Wavewurk Sdn Bhd (Registration No. 202601036088 (1698183-M)) ("Wavewurk", "we") respects your privacy. This notice explains how we handle personal data collected through www.wavewurk.com, in line with the Personal Data Protection Act 2010 (Malaysia) as amended. A Bahasa Melayu version is available at the top of this page.
1. What we collect
- Contact enquiry form: name, company, e-mail address, telephone number (optional), asset type, and the message you write.
- Catalogue request: e-mail address, and optionally your name and company.
- Data-rights requests: name, e-mail address and the details of your request.
- Technical data: a one-way hash of your IP address and your browser user-agent are stored with your consent record. Optional analytics/marketing cookies are used only if you accept them.
2. Why we collect it (purposes)
- To respond to your enquiry and arrange site assessments (enquiry form).
- To send you the service catalogue you asked for (catalogue request). This is not marketing.
- Only if you tick the separate, optional box: to send occasional technical insights and case studies by e-mail. You can withdraw at any time.
- To handle your data-rights requests and to keep records that prove your consent.
Supplying the required fields is necessary for us to respond; if you do not supply them we cannot process your request. Marketing consent is optional and never a condition of receiving the catalogue.
3. Who receives your data
- Our staff who handle enquiries.
- Brevo (e-mail service provider): receives your e-mail address and first name, and — only if you opted in — is used to send marketing e-mails. [TO CONFIRM: Brevo data location and data-processing agreement]
- Hosting and e-mail delivery providers that run this website. [TO CONFIRM: hosting provider name and server location]
- Authorities, where required by law.
We do not sell personal data.
4. Transfers outside Malaysia
Some providers listed above may store or process data outside Malaysia. [TO CONFIRM: countries involved and the safeguards relied on.] We only transfer data where permitted by the PDPA.
5. How long we keep it
- Enquiries: [TO CONFIRM: retention period, e.g. 24 months after last contact].
- Catalogue requests: [TO CONFIRM: retention period].
- Consent records: kept as long as needed to evidence your choices, stripped of IP and device data when you ask us to erase your data.
6. Your rights
You may ask to access, correct, export or delete your personal data, withdraw your consent (including marketing consent), or object to direct marketing. Use the "Your data rights" form below, or contact us. We verify your identity first and aim to respond within [TO CONFIRM: 21] days. You can unsubscribe from marketing e-mails with the link in any message.
7. Security
Data is sent over HTTPS, access to our admin system is restricted by role and two-factor authentication, and the catalogue is delivered through personal links that expire.
8. Cookies
Essential cookies keep the site and forms working. Optional analytics and marketing cookies load only after you accept them; you can change your choice at any time with "Cookie settings" in the footer.
9. Data Protection Officer / contact
[TO CONFIRM: whether a Data Protection Officer must be appointed and their details.] Until confirmed, contact us at rfx@wavewurk.com or +606-316 3800.
10. Changes
We will update this notice when our practices change and record the version number that applied when you gave consent.