Privacy Notice

1. About this notice

Orvaco is a product of Civalria Sdn Bhd (“Civalria”, “we”, “us” or “our”).

This Privacy Notice explains how we collect, use, disclose and protect personal data when you visit orvaco.com, contact us, communicate with us about Orvaco, or otherwise interact with the Orvaco marketing website.

This notice relates primarily to the public Orvaco website and commercial enquiries. Separate contractual or data-processing terms may apply where an organisation becomes an Orvaco customer or uses the Orvaco platform.

Civalria processes personal data in accordance with applicable Malaysian data-protection law, including the Personal Data Protection Act 2010 and applicable amendments and regulations.

2. Personal data we may collect

We may collect personal data that you provide voluntarily when you contact us or communicate with us about Orvaco.

This may include your name, job title, organisation, email address, telephone number, information contained in messages or enquiries, and any other information you choose to provide.

When you visit our website, our hosting and technical infrastructure may also process limited technical information associated with your request, such as IP address, browser or device information, requested pages, timestamps and basic diagnostic or security information. If you consent to analytics, Google Analytics 4 may process website usage and technical information as described in section 11.

We do not ask you to provide sensitive personal information through the marketing website unless it is genuinely required for a specific purpose.

3. How we collect personal data

We may collect personal data directly from you when you contact us by email, communicate with us about becoming a customer or Founding Partner, or otherwise provide information to us.

Limited technical data may also be generated automatically when your browser communicates with our website and hosting infrastructure. Analytics data is collected only after you choose to accept analytics.

4. Why we use personal data

We may process personal data to respond to enquiries and requests, understand whether Orvaco may be relevant to your organisation, arrange and conduct commercial discussions, provide requested information about Orvaco, manage prospective customer relationships, maintain the security and reliability of the website, investigate misuse or technical problems, maintain appropriate business records, comply with applicable legal or regulatory obligations, and establish, exercise or defend legal rights where necessary.

We will not use information provided through an Orvaco enquiry for an unrelated purpose without an appropriate basis.

5. Marketing communications

We may contact you in response to an enquiry or an existing business conversation.

Where applicable law or consent requirements apply to direct marketing, we will respect them. You may ask us at any time not to send you further marketing communications.

Operational responses to an enquiry, contractual communications and security-related communications are not treated in the same way as promotional marketing.

6. Disclosure of personal data

We may disclose personal data where reasonably necessary to service providers that support the operation, hosting, security, analytics, communications or administration of the Orvaco website and our business. Google provides Google Analytics 4 when you consent to analytics.

We may also disclose information to professional advisers such as lawyers, accountants or auditors where necessary; to governmental, regulatory, judicial or law-enforcement authorities where disclosure is legally required; or in connection with a legitimate corporate transaction, subject to appropriate safeguards.

We do not sell personal data to advertisers.

Our website may link to third-party services. Those services operate under their own privacy practices, and you should review their applicable notices where relevant.

7. International processing

Some service providers used in operating modern internet services may process or store information outside Malaysia.

Where personal data is transferred or made accessible outside Malaysia, we will take steps appropriate to the circumstances and applicable Malaysian data-protection requirements.

This section does not mean that every item of information is transferred internationally.

8. Security

We take reasonable technical and organisational measures intended to protect personal data against unauthorised access, disclosure, alteration, loss, misuse or destruction.

No internet transmission or information system can be guaranteed to be completely secure. You should therefore avoid sending highly sensitive or unnecessary confidential information through general website enquiries or email unless an appropriate secure method has been agreed.

9. Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, for legitimate business-record requirements, or where a longer retention period is required or permitted by law.

When information is no longer reasonably required, we may delete, anonymise or securely dispose of it in accordance with applicable requirements and our operational practices.

10. Your rights

Subject to applicable Malaysian law, you may have rights relating to personal data we hold about you, including rights to request access to personal data, request correction of inaccurate or outdated information, withdraw consent where processing depends on consent, limit certain processing, and object to or stop direct marketing.

The Malaysian Personal Data Protection Commissioner describes rights including notice of processing, access, correction, withdrawal of consent, restrictions on processing and direct-marketing controls. You can read more on the Commissioner’s website.

We may need to verify your identity before acting on a request and may be entitled to refuse or limit a request in circumstances permitted by law.

11. Cookies and analytics

We use Google Analytics 4, provided by Google, to understand how visitors find and use the public Orvaco marketing website. Google Analytics is optional and is not loaded unless you select Accept analytics.

If you consent, Google Analytics may process information such as the page visited, referring source, browser and device category, approximate geographic information, interaction timestamps and an online identifier stored in an analytics cookie. We also record when an existing email contact link is selected and the location of that link on the website. We do not send the email address, email subject, message contents, your name or other directly identifying information as Analytics event parameters.

Google Analytics commonly uses the cookies _ga, which helps distinguish browsers, and _ga_HSRVG92R34, which helps maintain session information for this website’s measurement stream. Google documents a typical maximum duration of up to two years for these cookies, although the actual duration may be affected by browser settings, user choices and changes to Google’s service.

Before consent, analytics storage is denied and the Google tracking library is not requested. Advertising storage, advertising user data and advertising personalisation remain denied. We do not use Google Analytics consent as permission for advertising pixels or personalised advertising.

Your choice is stored locally in your browser under orvaco_analytics_consent_v1 so that the website can remember it. This preference is not sent to Orvaco as a form submission.

You can accept, reject or change your choice at any time by selecting Analytics preferences in the website footer. Rejecting or withdrawing consent does not limit website functionality. When you withdraw consent, the page reloads without Google Analytics and the website attempts to remove Orvaco analytics cookies accessible to it. You may also clear cookies and site data through your browser settings.

Google processes Analytics data under its own terms and privacy practices. More information is available in Google’s Privacy Policy and Google’s information about safeguarding Analytics data.

12. Third-party links

Our website may contain links to third-party websites or services. Following an external link may cause the third party to collect or process information independently of Civalria.

We are not responsible for the privacy practices of independent third-party services.

13. Changes to this notice

We may update this Privacy Notice where our practices, services or legal obligations change.

The current version will be published on this page together with its effective or last-updated date.

Material changes will not be described retrospectively as having applied before they actually took effect.

14. Contact

For questions, complaints or requests concerning this Privacy Notice or personal data handled by Civalria in connection with Orvaco, contact:

Orvaco is a product of Civalria Sdn Bhd.