This Privacy Policy explains how Volartech Sdn Bhd (Registration No. 202501010782) (“Volartech”, “we”, “us” or “our”) collects, uses, discloses, and protects your personal data. We handle personal data in accordance with Malaysia’s Personal Data Protection Act 2010, as amended by the Personal Data Protection (Amendment) Act 2024 (together, the “PDPA”). For the purposes of the PDPA, Volartech is the data controller of the personal data described here.

01 Scope

This policy applies to personal data we collect through this website (volar-tech.com), when you contact us by email, and in the course of our business dealings with you as a partner, client, supplier, or enquirer. It does not apply to third-party websites we may link to, which are governed by their own privacy policies.

02 Personal data we collect

We collect only the personal data we need to respond to you and conduct our business, including:

• Information you give us — such as your name, email address, organisation, and the contents of any message you send us through our contact form or by email.
• Business-relationship information — contact and correspondence details exchanged in the course of partnership, procurement, or project discussions.
• Technical information — limited data automatically recorded by our hosting provider for security and reliability, such as IP address, browser type, and access times contained in standard server logs.

Our website does not use advertising or tracking cookies, and we do not knowingly collect personal data from anyone under the age of 18.

03 How and why we use your data

We process your personal data to:

• Respond to your enquiries and communicate with you;
• Evaluate, negotiate, and manage partnerships, procurement, and projects;
• Provide, operate, and secure our website and services;
• Comply with our legal, regulatory, and record-keeping obligations.

Where the PDPA requires it, we process your personal data on the basis of your consent, which you give by submitting your information to us; otherwise we rely on the performance of a contract with you or our compliance with a legal obligation.

04 Disclosure of your data

We do not sell or trade your personal data. We may disclose it to:

• Service providers who process data on our behalf, such as our website hosting and IT providers, under obligations of confidentiality and security;
• Professional advisers, such as legal, accounting, or compliance advisers, where necessary;
• Authorities or regulators where we are required or permitted to do so by law.

05 Cross-border transfers

Some of our service providers (including our website hosting and content-delivery infrastructure) may store or process personal data outside Malaysia. Where we transfer personal data abroad, we do so in accordance with the PDPA’s cross-border transfer requirements, taking reasonable steps to ensure the data receives a comparable standard of protection.

06 Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to maintain our business records, and to satisfy any legal or regulatory requirements. When personal data is no longer required, we take reasonable steps to securely delete or anonymise it.

07 Data security

We apply reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, and destruction, consistent with the Security Principle under the PDPA. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

08 Your rights under the PDPA

Subject to the conditions and exceptions in the PDPA, you have the right to:

• Access the personal data we hold about you;
• Correct personal data that is inaccurate, incomplete, or out of date;
• Withdraw your consent to our processing of your personal data;
• Limit the processing of your personal data for direct marketing or other specified purposes;
• Data portability — request that your personal data be transmitted to another data controller, where technically feasible and in a compatible format.

To exercise any of these rights, please contact us using the details in section 11. We may need to verify your identity before acting on a request.

09 Data breach notification

In the event of a personal data breach, we will notify the Personal Data Protection Commissioner as soon as practicable, and — where the breach is likely to cause significant harm — we will notify the affected individuals without unnecessary delay, in line with the PDPA.

10 Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The current version, with its effective date, will always be available on this page.

11 Contact us

For any questions about this policy, to exercise your rights, or to raise a data protection concern, please contact:

You also have the right to lodge a complaint with the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi), Malaysia.