Privacy Policy

1. Introduction

Havenmark AI Sdn. Bhd. ("Havenmark AI", "we", "us", "our") is committed to protecting the personal data of individuals who interact with this website and engage with our advisory services. This Privacy Policy describes how we collect, use, store, and protect personal data, and sets out your rights under Malaysia's Personal Data Protection Act 2010 (PDPA 2010).

This policy applies to personal data collected via this website (havenmar) and through the conduct of our advisory engagements. For data-related questions, contact us at privacy@havenmar.

2. Personal Data We Collect

We collect the following categories of personal data:

• Contact and identity data: Full name, email address, telephone number, and job title — provided when submitting an enquiry or entering an engagement.
• Organisational data: Company name and sector, where relevant to the scope of an advisory engagement.
• Technical data: IP address, browser type, and pages visited — collected via website analytics where consent has been given.
• Communication records: Records of correspondence by email or telephone relating to an enquiry or engagement.

Legal basis for processing: Personal data is processed on the basis of (a) your consent, where given; (b) the performance of a contract or pre-contractual steps; or (c) our legitimate interest in responding to enquiries and conducting our advisory practice.

Retention: Enquiry data is retained for 12 months if no engagement follows. Data collected during an engagement is retained for 5 years from the conclusion of the engagement, after which it is securely deleted unless legal requirements require longer retention.

3. How We Use Personal Data

Personal data is used for the following purposes:

• Responding to enquiries submitted via the website contact form
• Conducting and managing advisory engagements
• Fulfilling contractual obligations under engagement agreements
• Maintaining records required by Malaysian law
• Improving the website and its content (analytics data only)

Data sharing: We do not sell or rent personal data. We may share data with professional advisors (accountants, legal counsel) subject to confidentiality obligations, and with website analytics providers where consent has been given. We do not share client data with AI vendors or third parties without explicit written consent.

4. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• TLS encryption for data in transit via this website
• Access controls limiting personal data to authorised personnel
• Storage of engagement records on password-protected systems
• Periodic review of security arrangements

In the event of a personal data breach that is likely to result in significant harm, affected individuals will be notified as soon as reasonably practicable.

5. Cookies

This website uses cookies to support basic functionality and, where you have given consent, to collect analytics data about site usage. You can manage your cookie preferences at any time. See our Cookie Policy for full details.

6. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that inaccurate or incomplete personal data be corrected.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time. This does not affect the lawfulness of processing prior to withdrawal.
• Right to object: You may object to processing of your personal data for direct marketing purposes.
• Right to limit processing: In certain circumstances, you may request that processing of your data be limited.

To exercise any of these rights, contact us at privacy@havenmar. Requests will be responded to within 21 days. If you are dissatisfied with our response, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

7. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of third-party websites and encourage you to review their privacy policies independently.

8. Children's Privacy

Our services are directed at organisations and individuals aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us at privacy@havenmar so that it may be deleted.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on this website. Continued use of the website following such notice constitutes acceptance of the revised policy. The current version date is shown at the top of this document.

10. Contact

For any data protection enquiry, contact the data controller: