Privacy Policy

1. Introduction

Wovenly is committed to protecting the personal information of those who engage with our services, visit our website, or correspond with us. This Privacy Policy explains what personal data we collect, how we use it, and the rights you have in relation to it. It is written in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By using our website or submitting your information through our contact form, you acknowledge that you have read and understood this policy.

2. Who We Are

Wovenly is a people management consulting practice based in Kota Kinabalu, Sabah. We are the data controller for personal information collected through our website and in connection with our consulting engagements. For data-related questions, write to us at [email protected].

3. What Personal Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number, job title, company name — provided when you submit our contact form or correspond with us directly.
• Communication records: the content of messages you send us, including enquiries and requests.
• Service-related data: information shared during consulting engagements, workshops, or interviews — handled under separate confidentiality arrangements agreed at the start of each engagement.
• Technical data: IP address, browser type, referring URL, pages visited, and time of visit — collected automatically via website analytics tools if analytics cookies are accepted.
• Cookie preferences: your consent choices stored locally in your browser.

4. How We Collect Personal Data

• Through the contact form on our website
• Through direct correspondence by email or telephone
• During the delivery of our services (interviews, workshops, consulting sessions)
• Through website analytics tools (when consent is given)

5. Legal Basis for Processing

We process personal data on the following bases under the PDPA 2010:

• Consent: Where you have provided explicit consent, such as by submitting our contact form or accepting analytics cookies.
• Contract performance: Where processing is necessary to deliver services you have engaged us for.
• Legitimate interests: Where we have a legitimate business reason, such as maintaining records of past correspondence for service continuity.
• Legal obligation: Where we are required to retain or disclose information by law.

6. How We Use Personal Data

• To respond to enquiries submitted through our contact form or by email
• To deliver consulting services, facilitated sessions, and booklet subscriptions
• To communicate with you about your engagement or subscription
• To maintain records of our work for professional and legal purposes
• To understand how our website is used and improve it (analytics, where consent is given)

We do not use personal data for automated decision-making or profiling.

7. Data Sharing

We do not sell personal data to third parties. We may share personal data only in the following circumstances:

• Service delivery: With members of the Wovenly team who need access to complete the work
• Professional advisers: With legal, accounting, or insurance professionals where required
• Legal compliance: Where disclosure is required by Malaysian law or a court order

Information shared by participants during consulting engagements or facilitated sessions is treated under the specific confidentiality terms agreed at the start of that engagement and is not used elsewhere.

8. Data Retention

We retain personal data only for as long as necessary. In general:

• Contact enquiries that do not lead to an engagement: up to 12 months
• Information related to active or completed engagements: up to 5 years from the close of the engagement, for professional record-keeping purposes
• Analytics data: in line with the retention settings of the analytics tool used (typically 14–26 months)

9. Cookies

We use cookies on our website. For full details, please see our Cookie Policy. We use cookies for basic website function (essential) and, where you consent, for website analytics. You can manage your preferences at any time through the cookie banner on our homepage.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policies of any external sites you visit.

11. Your Rights Under the PDPA 2010

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for processing based on consent
• Request that we stop processing your data for direct marketing purposes (we do not currently engage in direct marketing)

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.

12. Data Security

We take reasonable steps to protect personal data against loss, misuse, and unauthorised access. Our website uses HTTPS. Access to client-related files is restricted to the Wovenly team members who need it for the work. We notify affected individuals and, where required, the relevant authority, in the event of a data breach.

13. Children's Privacy

Our services are designed for business managers and professionals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that we have inadvertently collected such data, we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated "Last Updated" date. Continued use of our website or services after changes are published constitutes acceptance of the revised policy.

15. Contact for Privacy Enquiries

For any questions about this policy or how we handle your personal data, contact us at:

• Email: [email protected]
• Address: Lorong Pantai 9, 88000 Kota Kinabalu, Sabah, Malaysia
• Phone: +60 88 261 749

For complaints about how we handle your personal data that we cannot resolve directly, you may contact the Department of Personal Data Protection Malaysia (JPDP) at pdp.gov.my.