Privacy Policy

Data Controller: Anvil Bureau
Address: Lot 17, Jalan Tun Razak, 50400 Kuala Lumpur, Malaysia
Contact: [email protected]

For questions about this policy or about how we handle your personal data, contact us at the email above.

Information you provide: When you submit the contact form on this website, we collect your name, email address, and optionally your phone number and a message. When you engage our services, we may collect additional professional information relevant to the engagement scope.

Automatically collected data: When you visit the website, our servers may record your IP address, browser type, pages visited, and the date and time of your visit. We may use analytics cookies to understand how the site is used.

Engagement data: During a consulting engagement, we collect operational information you share with us. This is governed by the confidentiality agreement that applies to the engagement and is treated separately from website data.

Legal basis for processing: We process your data on the basis of your consent (when you submit the contact form), contractual necessity (when delivering an engagement), and legitimate interest (for site analytics and service improvement).

We use personal data you provide through this website to respond to your enquiry and to communicate about potential or active engagements. We do not use it for unsolicited marketing. If you have completed an engagement with us and would like to receive occasional updates about our practice, you may opt in explicitly — we will not add you to any communications list without your agreement.

Website analytics data is used to understand how visitors navigate the site and to improve its structure and content. It is not linked to personally identifiable information.

We do not sell personal data to third parties under any circumstances.

We do not share your personal data with third parties except where required by Malaysian law, or where a service provider processes data on our behalf under appropriate data processing terms (for example, email service or website hosting). Any such service providers are bound by confidentiality and are not permitted to use your data for their own purposes.

Operational information shared during a consulting engagement is not referenced externally without your explicit permission, as detailed in the engagement confidentiality agreement.

Contact enquiry data is retained for up to 24 months following last contact, after which it is deleted unless an active engagement relationship exists. Engagement documentation is retained for up to 5 years for record-keeping purposes, after which it is securely destroyed. Analytics data is aggregated and anonymised within 14 months.

This website uses HTTPS encryption for all data in transit. Access to personal data within our systems is restricted to team members who require it for their role. We conduct periodic reviews of our data handling practices. In the event of a data breach that affects your rights and interests, we will notify affected individuals and the relevant authority as required under Malaysia's PDPA and its amendments.

This website uses cookies to store your cookie consent preference and, where you have consented, to collect analytics data about site usage. Essential cookies are required for the site to function and cannot be disabled. Optional cookies (analytics, preferences) are only set after you have accepted them via the cookie banner. Full details are available in our Cookie Policy.

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for the processing of your data
• Request that we cease processing your data for direct marketing purposes
• Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your data rights have been breached

To exercise any of these rights, contact us at [email protected]. We will respond within 21 working days.