Privacy Policy
Last Updated: 20 May 2026 | Effective: 20 May 2026
1. Introduction
draviak ("we", "us", "our") is committed to protecting the personal information of individuals who interact with our website and services. This Privacy Policy explains what data we collect, how we use it, how long we retain it, and what rights you have in relation to it.
This policy applies to visitors to draviak.blog and to individuals who enquire about or use draviak's services. If you have questions about this policy, please contact us at [email protected].
2. Data We Collect
Information You Provide
- Name and email address (provided via the contact form)
- Phone number (optional, if provided)
- Message content submitted through the enquiry form
- Information shared during engagement sessions or email correspondence
Information Collected Automatically
- IP address and approximate geographic location
- Browser type, device type, and operating system
- Pages visited, time on site, and referral source
- Cookie identifiers (see Section 5 and our Cookie Policy)
3. Legal Basis for Processing
We process personal data on the following legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection principles:
- Consent: When you submit the contact form or accept optional cookies, you consent to the associated processing.
- Legitimate interest: For analytics that help us improve the website and for responding to enquiries.
- Contract: When processing is necessary to deliver a service you have engaged.
4. How We Use Your Data
- Responding to enquiries submitted via the contact form
- Delivering subscriptions, workshops, and engagement deliverables
- Sending service-related communications (e.g., access credentials, delivery confirmations)
- Improving our website based on aggregated, anonymised usage data
- Complying with legal obligations
We do not use your personal data for unsolicited marketing. We do not sell personal data to third parties.
5. Cookies
We use essential cookies for basic website functionality and optional analytics cookies to understand how visitors use the site. You can manage your cookie preferences via the banner on the homepage. For detailed information, see our Cookie Policy.
6. Data Retention
- Enquiry form data: retained for 24 months from submission, then deleted
- Engagement records: retained for 36 months from engagement completion
- Analytics data: retained in aggregated form for up to 26 months
- Financial records: retained for 7 years as required by Malaysian tax law
7. Third-Party Services
We may use the following third-party services which may process data in connection with operating our website:
- Google Analytics (website usage analytics)
- Email delivery services (transactional email)
Each service has its own privacy policy. We select services that apply reasonable data protection measures.
8. Data Security
We apply reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, or alteration. These include access controls, secure transmission (HTTPS), and limited retention periods. In the event of a data breach affecting your personal data, we will notify you and the relevant authority as required by applicable law.
9. International Transfers
Some of the third-party services we use may store or process data outside Malaysia. Where this occurs, we rely on appropriate safeguards, including contractual protections, to ensure your data is handled with comparable care.
10. Your Rights
Under the Personal Data Protection Act 2010 and related data protection principles, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data (subject to legal retention requirements)
- Withdraw consent where processing is based on consent
- Object to processing based on legitimate interest
- Lodge a complaint with the relevant supervisory authority in Malaysia
To exercise these rights, contact us at [email protected]. We will respond within 30 days.
11. Children's Privacy
Our services are directed at professional engineering teams and organisations. We do not knowingly collect personal data from individuals under 18 years of age. If you become aware that a minor has submitted data to us, please contact us so we can delete it.
12. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
13. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be noted on this page with an updated date. Continued use of the website after a change constitutes acceptance of the updated policy.
14. Contact
For any questions about this Privacy Policy or your personal data:
- Email: [email protected]
- Address: Jalan Bukit Bintang 105, 55100 Kuala Lumpur, Wilayah Persekutuan, Malaysia