Privacy Policy

1. Introduction

Corvane ("we", "our", "us") operates at Jalan Stesen Sentral 5, 50470 Kuala Lumpur, Wilayah Persekutuan, Malaysia. This Privacy Policy describes how we collect, use, and protect personal data in connection with our website and information resource services. We are committed to handling personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and applicable regulations.

This policy applies to all visitors to our website at corvanes.blog and to individuals who use or enquire about Corvane's reference resources. If you have questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal data through the following means:

• Enquiry forms: name, email address, and optionally phone number and a message, when you submit an enquiry through the website contact form.
• Email correspondence: any personal data you include in emails sent to our addresses.
• Subscription and access management: name and email address provided when setting up access to Reference Access or Comparison Workbook subscriptions.
• Custom Research Brief engagements: organisational and contact details provided during the discovery call and engagement process.
• Cookies and analytics: technical data about your visit, including browser type, pages visited, and session duration, where you have consented to analytics cookies.

We do not collect sensitive personal data (as defined under PDPA 2010) in the course of our services.

3. How We Use Personal Data

Personal data is used for the following purposes:

• Responding to enquiries and providing information about our resources.
• Setting up and managing subscription access (Reference Access and Comparison Workbook).
• Conducting discovery calls and delivering Custom Research Briefs.
• Sending quarterly update notifications to active subscribers (with your consent).
• Improving our website and reference content based on aggregated, anonymised usage data.
• Meeting legal and regulatory obligations under Malaysian law.

Legal basis for processing: consent (for marketing communications and analytics); contract (for service delivery); and legitimate interest (for responding to enquiries and managing subscriptions).

4. Data Retention

We retain personal data for the following periods:

• Enquiry records: 24 months from the date of enquiry.
• Subscriber data: for the duration of the active subscription, plus 36 months after termination for administrative purposes.
• Custom Research Brief engagement records: 60 months from project completion.
• Analytics data: as configured in our analytics platform, typically 26 months.

After the relevant retention period, personal data is securely deleted or anonymised.

5. Data Sharing

We do not sell, rent, or trade personal data. We may share data with:

• Service providers: third-party platforms used for email delivery, subscription management, and website analytics, under data processing agreements.
• Analytics services: aggregated, anonymised data may be processed by analytics platforms where you have consented to analytics cookies.
• Legal authorities: where required by Malaysian law or a valid legal order.

Custom Research Brief engagement details — including client questions, discovery call notes, and delivered briefs — are treated as confidential and are not shared with third parties except as required by law.

6. Data Protection Measures

We implement reasonable technical and organisational measures to protect personal data, including:

• HTTPS encryption for all data transmitted via the website.
• Access controls limiting personal data access to team members who require it for their role.
• Regular review of data handling practices.
• Secure storage for engagement records and subscriber data.

In the event of a personal data breach, we will notify affected individuals and the relevant authority in accordance with our obligations under PDPA 2010.

7. Cookies

Our website uses cookies. Essential cookies are required for basic site functionality and are set automatically. Analytics and preference cookies are only set with your consent, which you can provide or withdraw via the cookie consent notice on the website. For detailed information, see our Cookie Policy.

8. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights:

• Right of access: request a copy of the personal data we hold about you.
• Right of correction: request that inaccurate or incomplete personal data be corrected.
• Right to withdraw consent: withdraw consent for processing based on consent at any time, without affecting processing already carried out.
• Right to limit processing: request that we limit how we use your personal data in certain circumstances.
• Right to inquire: ask questions about how your personal data is being processed.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

If you have a complaint about how we handle your personal data, you may contact the Department of Personal Data Protection Malaysia (Jabatan Perlindungan Data Peribadi, JPDP) at www.pdp.gov.my.

9. Third-Party Links

Our website may contain links to external sites. Corvane is not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policy of any site you visit.

10. Children

Our services are directed at professional and organisational users. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us so we can remove it.

11. Changes to This Policy

We may update this policy from time to time. The current version will always be available at this page, with the Last Updated date shown at the top. Significant changes will be communicated to active subscribers by email.