Privacy Policy

1. Introduction

Marvellis Cabinet ("we", "us", "our") is committed to handling personal data responsibly and transparently. This policy explains what personal data we collect, how we use it, how we protect it, and what rights you hold in relation to it. Our practice is based at 38-2A Jalan SS21/35, Damansara Utama, 47400 Petaling Jaya, Selangor, Malaysia.

This policy applies to data collected through our website at marvellid.pro and through our consulting engagements. If you have questions about this policy, please contact us at [email protected].

2. Data we collect

We collect personal data in the following ways:

Through our contact form: When you complete the contact form on our website, we collect your name, email address, and telephone number (if provided), and any information you include in your message.

During engagements: In the course of a consulting engagement, we may take notes — but only at your express request — and may retain documents you share with us for the duration of the engagement.

Through cookies: Our website uses essential cookies to function, and optional analytics and preference cookies if you consent. Please see our Cookie Policy for more detail.

We process your personal data on the following legal bases:

• Your consent (for marketing communications and optional cookies)
• Performance of a contract (for data necessary to deliver an engagement)
• Legitimate interests (for communicating with prospective clients about our services)
• Legal obligation (where required by Malaysian law)

3. How we use your data

We use personal data to:

• Respond to enquiries submitted through our contact form
• Deliver and administer consulting engagements
• Issue invoices and process payments
• Communicate about engagements in progress
• Understand how our website is used (analytics, with your consent)

We do not use your personal data for automated decision-making. We do not sell personal data to third parties under any circumstances.

4. Data retention

Enquiry data from our contact form is retained for a maximum of twelve months from the date of receipt. Data relating to a consulting engagement is retained for the duration of the engagement and for up to three years afterwards, in line with general accounting and contractual obligations. At the client's request, engagement notes and documents can be deleted or returned at any time after the engagement concludes.

5. Third-party services

We use a small number of third-party services to operate the website and manage communications. These include:

• Google Analytics (website usage analytics, with your consent)
• Email service providers for delivering correspondence

These providers are contractually required to handle personal data in accordance with applicable data protection law and are not permitted to use your data for their own purposes.

6. Security

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include access controls on systems holding personal data, encrypted storage and transmission where applicable, and a limited number of individuals with access to engagement data. In the event of a data breach, we will notify affected individuals and the relevant authority in accordance with our obligations under the Personal Data Protection Act 2010.

7. Cookies

We use cookies on our website. For full detail on the types of cookies used and how to manage your preferences, please refer to our Cookie Policy.

8. Your rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data:

• Right of access: To request a copy of the personal data we hold about you
• Right of correction: To request correction of inaccurate or incomplete data
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time
• Right to limit processing: To request that we limit processing in certain circumstances
• Right to lodge a complaint: With the Department of Personal Data Protection (JPDP), Malaysia

To exercise any of these rights, please contact us at [email protected]. We will respond within thirty days.

9. Third-party links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies directly.

10. Children

Our services are directed at owner-managers of businesses and are not intended for individuals under eighteen years of age. We do not knowingly collect personal data from minors.

11. Changes to this policy

If we make material changes to this privacy policy, we will update the date at the top of this page and, where the changes affect how we use data you have already provided, we will notify you directly by email.

12. Contact

For any questions about this policy or how we handle your personal data, please contact us: