Privacy Policy

1Introduction

Neurova Sdn Bhd ("Neurova", "we", "us", "our") is committed to protecting the personal data you share with us. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have under Malaysian law — specifically the Personal Data Protection Act 2010 (PDPA).

This Policy applies to visitors to our website at neurovaaxax.live, clients and prospective clients who engage with us through our contact form, email, or telephone, and participants in our services and workshops. For data protection enquiries, contact us at [email protected].

2Data We Collect

We collect personal data in the following circumstances:

• Contact form submissions: Name, email address, and phone number (if provided), plus the content of your message.
• Client engagements: Business contact details, project-related communications, and data you share as part of the engagement scope (governed by a separate Data Processing Agreement).
• Website analytics: IP addresses, browser type, pages visited, and session duration — collected through analytics tools if you consent to analytics cookies.
• Cookies and similar technologies: See our Cookie Policy for full details.

We do not collect sensitive personal data (as defined under the PDPA) unless required for a specific engagement and with your explicit consent.

3How We Use Your Data

• Responding to enquiries submitted through our contact form or email
• Managing and delivering contracted services
• Sending project updates and communications related to your engagement
• Sending relevant service information to existing clients (you may opt out at any time)
• Improving our website and understanding how visitors use it (analytics cookies only)
• Complying with legal obligations under Malaysian law

Legal basis: We process your data based on your consent (for cookie-based analytics), contractual necessity (for client engagements), and our legitimate interests (for responding to enquiries and communicating with existing clients).

4Data Retention

We retain personal data for as long as necessary for the purposes described above, or as required by law. Specific retention periods:

• Contact form submissions: 12 months from submission, unless an engagement is initiated
• Client engagement records: 7 years from project completion, in line with Malaysian company record requirements
• Analytics data: As determined by the analytics provider, not exceeding 26 months

5Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Hosting, analytics, and email delivery providers acting as data processors on our behalf and under written agreements.
• Legal and regulatory authorities: Where required by Malaysian law or a court order.

Client project data covered by Data Processing Agreements is never used for purposes beyond the contracted engagement.

6Data Security

We implement reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include access controls, encrypted storage for sensitive project data, and regular review of our security practices. In the event of a data breach that is likely to result in a risk to your rights, we will notify affected individuals and the relevant authorities as required under Malaysian law.

7Your Rights

Under the Malaysian Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent for marketing communications at any time
• Request that we limit or stop processing your data in certain circumstances
• Lodge a complaint with the Department of Personal Data Protection (PDPD) Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8Cookies

We use cookies on our website. For a full description of the cookies we use and how to manage your preferences, please see our Cookie Policy.

9Children's Privacy

Our services are directed at businesses and professionals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided us with personal data, please contact us so we can remove it.

10External Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

11Policy Updates

We may update this Privacy Policy from time to time. When we do, the "Last Updated" date at the top of this page will be revised. We will notify existing clients of material changes via email. Continued use of our website or services following an update constitutes acceptance of the revised Policy.

12Contact

For privacy-related enquiries, data access requests, or complaints:

Email: [email protected]

Address: Neurova Sdn Bhd, 31 Jalan Kemajuan, 46200 Petaling Jaya, Selangor, Malaysia