Privacy Policy

1. Introduction

Velora operates in Malaysia and complies with the Personal Data Protection Act 2010 (PDPA). We are committed to transparent data practices and give you control over your personal information.

For questions about this policy or our data practices, please contact us at privacy@vellooranb.

2. Information We Collect

Personal Data You Provide

When you contact us or use our services, we may collect:

• Name and contact information (email address, phone number)
• Business information (company name, role, industry)
• Communication preferences
• Any information you choose to provide in messages or forms

Automatically Collected Information

When you visit our website, we may automatically collect:

• Technical information (browser type, operating system, IP address)
• Usage data (pages visited, time spent, referring source)
• Device information
• Cookie data (see our Cookie Policy for details)

3. How We Use Your Information

We use your personal data for the following purposes:

Service Delivery

• Responding to your inquiries and providing requested information
• Delivering our AI solutions and services
• Managing client relationships and project work
• Providing customer support

Communication

• Sending service-related updates and notifications
• Providing information about our solutions (if you've opted in)
• Responding to your questions and requests

Improvement and Analysis

• Understanding how our website and services are used
• Improving our offerings and user experience
• Analyzing trends and patterns to enhance our services

Legal Compliance

• Complying with legal obligations
• Protecting our rights and property
• Preventing fraud and ensuring security

4. Legal Basis for Processing

Under Malaysian PDPA, we process your personal data based on:

• Consent: You have given explicit consent for specific processing purposes
• Contract: Processing is necessary to fulfill our contractual obligations to you
• Legitimate Interest: Processing is necessary for our legitimate business interests while respecting your rights
• Legal Obligation: Processing is required to comply with legal requirements

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

Service Providers

We work with trusted third-party providers who assist with:

• Website hosting and infrastructure
• Email and communication services
• Analytics and performance monitoring
• Customer relationship management

These providers are contractually obligated to protect your data and use it only for specified purposes.

Legal Requirements

We may disclose your information when required by law, court order, or to protect our legal rights and safety.

6. Data Protection Measures

We implement comprehensive security measures to protect your personal data:

• Encryption of data in transit and at rest
• Secure server infrastructure with regular updates
• Access controls limiting who can view personal data
• Regular security audits and assessments
• Employee training on data protection practices
• Incident response procedures for potential breaches

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Client data: Retained for the duration of the business relationship plus 7 years for legal and accounting purposes
• Inquiry data: Retained for 2 years from last contact unless you request earlier deletion
• Marketing data: Retained until you withdraw consent or request deletion
• Website analytics: Typically retained for 26 months

When data is no longer needed, we securely delete or anonymize it.

8. Cookies and Tracking

We use cookies and similar technologies to improve your experience on our website. These help us understand how you use our site and enable certain features.

For detailed information about our cookie practices and your choices, please see our Cookie Policy.

9. Your Rights

Under Malaysian PDPA, you have the following rights regarding your personal data:

To exercise these rights, contact us at privacy@vellooranb. We will respond to your request within 30 days.

10. International Data Transfers

We primarily store and process data within Malaysia. If we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by relevant authorities
• Adequate level of data protection in the receiving country
• Your explicit consent for the transfer

11. Children's Privacy

Our services are intended for business use and not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email if you're an active client or subscriber
• Post a notice on our website

We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: