Privacy Policy

Cindovax ("we", "us", "our") is committed to handling the personal data of visitors to this website and clients of our services with care and in accordance with applicable law. This policy explains what data we collect, why we collect it, how we use it, and what rights you have in relation to it.

This policy applies to data collected through this website and through our service engagements. It is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia.

If you have questions about this policy, contact us at [email protected].

1. Data We Collect

We collect personal data in the following ways:

1.1 Contact and Enquiry Forms

When you submit an enquiry through our website, we collect: full name (required), email address (required), phone number (optional), and any information you include in the message field. This data is used to respond to your enquiry and to discuss a potential service engagement.

1.2 Service Engagements

When you engage Cindovax for services, we collect business contact details, product image files submitted for processing, and any correspondence related to the engagement. Image files submitted to us are processed solely for the purpose of the agreed service and are not retained beyond the completion of that engagement unless explicitly agreed otherwise in writing.

1.3 Website Analytics

If you consent to analytics cookies, we collect anonymised information about how visitors use this website — pages visited, time on site, and general navigation patterns. This data is used to improve the website and is not linked to personally identifiable information without your consent.

1.4 Legal Basis for Processing

• Consent: For analytics and marketing cookies, and for optional communications.
• Contract performance: For data collected in connection with service delivery.
• Legitimate interest: For responding to enquiries submitted via the contact form.

1.5 Data Retention

Contact enquiry data is retained for up to 24 months unless a service engagement follows, in which case relevant data is retained for the duration of the engagement plus 12 months. Image files submitted for processing are deleted within 30 days of engagement completion unless otherwise agreed.

2. How We Use Your Data

• To respond to enquiries submitted through our website.
• To deliver the service you have engaged us for, including processing submitted image files.
• To send service-related communications — status updates, documentation, review scheduling.
• To improve the website and our services using aggregated, anonymised analytics data.
• To comply with applicable legal obligations under Malaysian law.

We do not sell, rent, or trade personal data to third parties for marketing purposes. We do not send unsolicited marketing communications.

2.1 Third-Party Services

We may use the following third-party services in the delivery of our website and services: web hosting providers, email communication tools, and analytics platforms (where consented). These providers are engaged under data processing agreements consistent with PDPA requirements.

3. Data Protection Measures

• Data transmitted via this website uses TLS encryption (HTTPS).
• Access to personal data is restricted to Cindovax personnel with a direct operational need.
• Image files submitted by clients are stored in access-controlled environments during processing.
• In the event of a data breach affecting personal data, affected individuals will be notified in accordance with PDPA obligations.

4. Cookie Usage

This website uses essential cookies necessary for basic functionality, and optional cookies for analytics and preferences. Optional cookies are only placed with your consent via the cookie consent prompt. Full details are available in our Cookie Policy.

5. Your Rights Under the PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights:

• Right of access: Request a copy of personal data we hold about you.
• Right of correction: Request correction of inaccurate or incomplete personal data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. This does not affect the lawfulness of processing prior to withdrawal.
• Right to limit processing: Request that we limit how we use your data in certain circumstances.
• Right to complain: You may lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your data has been handled unlawfully.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

6. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently.

7. Children's Privacy

Our services are directed at businesses and individuals aged 18 and above. We do not knowingly collect data from anyone under 18. If we become aware that data has been submitted by a minor, it will be deleted promptly.

8. Policy Updates

We may update this policy from time to time. The "Last Updated" date at the top of this page will reflect the most recent revision. We encourage you to review this page periodically. Continued use of our website or services after an update constitutes acceptance of the revised policy.