Privacy Policy

1. Introduction

Vellum Arc ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect information when you visit our website or engage our consulting services.

By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy. If you have questions or concerns, please contact us at [email protected].

2. Information We Collect

2.1 Information You Provide

We collect personal information that you voluntarily provide when you:

Contact us through forms on our website, including your name, email address, phone number, and any message content you choose to share. Engage our consulting services, which may include business information, financial data, and strategic information relevant to the engagement. Subscribe to communications or updates from us.

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain technical information including IP address, browser type and version, device information, pages visited, time and date of visits, referring website addresses, and general location data based on IP address.

This information is collected through cookies and similar technologies. Please see our Cookie Policy for more details about how we use cookies.

2.3 Information from Third Parties

We may receive information about you from third-party services we use for analytics, such as Google Analytics, or from professional referrals and business networks.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

To respond to your inquiries and communicate with you about potential or active consulting engagements. To deliver consulting services including research, analysis, and advisory work. To manage client relationships and fulfill contractual obligations.

3.2 Website Improvement

To understand how visitors use our website and identify areas for improvement. To analyze trends and user behavior to enhance website functionality and user experience.

3.3 Communications

To send service-related communications including engagement updates and deliverables. To provide information about our services that may be relevant to your interests, with your consent where required.

3.4 Legal Compliance

To comply with applicable laws, regulations, and legal processes. To protect our rights, privacy, safety, or property, and that of our clients and others.

4. Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We engage third-party companies and individuals to perform functions on our behalf, such as website hosting, data analysis, and email delivery services. These service providers have access to personal information only to perform specific tasks and are obligated to maintain confidentiality.

4.2 Legal Requirements

We may disclose personal information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights or comply with judicial proceedings.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal information may be transferred. We will notify you of any such change in ownership or control of your personal information.

5. Data Protection and Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, secure server infrastructure, access controls limiting data access to authorized personnel only, regular security audits and monitoring, and employee training on data protection practices.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining retention periods, we consider the nature of the information, the purposes for which it was collected, applicable legal requirements, and whether the purposes can be achieved through other means.

For client engagement data, we typically retain information for seven years following engagement completion to comply with professional standards and potential legal requirements. For website inquiry data from non-clients, we retain information for two years unless you request earlier deletion.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy of this information in a structured, commonly used format.

7.2 Correction

You have the right to request correction of inaccurate or incomplete personal information.

7.3 Deletion

You have the right to request deletion of your personal information, subject to certain exceptions including legal obligations, ongoing business relationships, and legitimate interests.

7.4 Restriction and Objection

You have the right to request restriction of processing or to object to certain types of processing of your personal information.

7.5 Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time.

7.6 Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in your jurisdiction if you believe our processing of your personal information violates applicable law.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

8. Cookies and Tracking

Our website uses cookies and similar technologies to enhance user experience and analyze website usage. Cookies are small text files stored on your device that help us remember your preferences and understand how you interact with our website.

For detailed information about the cookies we use and how to manage your cookie preferences, please refer to our Cookie Policy.

9. Third-Party Websites

Our website may contain links to third-party websites. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete such information.

11. International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction. When we transfer personal information internationally, we implement appropriate safeguards to protect your information in accordance with applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on our website with a new effective date. We encourage you to review this Privacy Policy periodically.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Governing Law

This Privacy Policy is governed by the laws of Malaysia. Any disputes arising from this Privacy Policy or our data practices shall be subject to the exclusive jurisdiction of the courts of Malaysia.