Privacy Policy

1. Introduction

Voxhaven ("we", "us", "our") is committed to handling personal data with care and transparency. This policy explains what personal information we collect, how we use it, and the rights available to individuals whose data we hold. It applies to all visitors to our website at voxhaven.cyou and to anyone who engages our advisory services.

Our operations are based in Malaysia. This policy is written in compliance with the Personal Data Protection Act 2010 (PDPA), which governs how personal data is collected and processed in Malaysia. If you have questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal data only where there is a legitimate purpose. The types of data we may collect include:

• Contact information — name, email address, and phone number submitted via our enquiry form.
• Engagement information — information you share with us during advisory sessions, including business context, operational details, and strategic discussions. This data is treated as confidential.
• Usage data — IP address, browser type, pages visited, and time spent on site, collected via analytics tools if cookies are accepted.

Legal basis: Contact form submissions are processed on the basis of your consent. Engagement data is processed on the basis of our contractual relationship with you. Analytics data is processed on the basis of legitimate interest (website improvement), where consent has been given.

Retention: Enquiry data is retained for up to 24 months. Engagement documents and session notes are held for the duration of the engagement plus 12 months, after which they are deleted unless you request otherwise in writing.

3. How We Use Your Data

• To respond to your enquiry and discuss advisory engagement options.
• To deliver the advisory services you have engaged us to provide.
• To send you relevant updates about your engagement (scheduling, documents, summaries).
• To improve our website and understand how it is used (analytics, where consent is given).
• To comply with applicable legal obligations.

We do not sell personal data to third parties. We do not use client data for purposes outside the advisory relationship without explicit consent. We do not share individual client information with other clients under any circumstances.

4. Data Protection Measures

We take reasonable technical and organisational steps to protect personal data from loss, misuse, unauthorised access, or disclosure. These include:

• HTTPS encryption on all pages of our website.
• Access to client documents restricted to the advisors working on your engagement.
• Secure file storage using password-protected cloud environments.
• Deletion of client materials at the end of the agreed retention period.

In the event of a data breach that may affect your personal data, we will notify you within 72 hours of becoming aware of it, as required under applicable regulations.

5. Cookies

Our website uses cookies to function and to understand how it is being used. Essential cookies are required for the site to operate and cannot be disabled. Analytics and preference cookies are optional and only set if you have given consent. For full details, including how to manage your cookie preferences, see our Cookie Policy.

6. Your Rights Under PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding personal data we hold about you:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to correction — you may request that we correct inaccurate personal data.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
• Right to prevent processing — you may request that we cease processing your data for direct marketing purposes.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. You may also direct complaints to Malaysia's Department of Personal Data Protection at www.pdp.gov.my.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies separately before providing any personal information.

8. Children's Privacy

Our services are intended for business professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our site, please contact us and we will delete it promptly.

9. Policy Updates

We may update this policy from time to time. Changes will be posted on this page with a revised "last updated" date. For material changes, we will notify active clients directly via email. Continued use of our website or services following an update constitutes acceptance of the revised policy.

10. Contact

For any questions about this policy or requests relating to your personal data, contact us at: