Who is responsible for your data
Maison Fae Ventures (registration number 003886685-P), trading as MFV Tech and registered at C-2-9, Pandan Mas Townhouse, Jalan Pandan Indah 8, Taman Pandan Mas, 55100 Kuala Lumpur, Malaysia, is the data controller for the personal data described here. We process personal data in line with the Malaysian Personal Data Protection Act 2010, and where a visitor is in the United Kingdom or European Economic Area, in line with the UK GDPR and EU GDPR.
What we collect
When you contact us
The enquiry form asks for your name, email address and a description of what you need. Company name, phone number, the service you are interested in and your budget range are optional. We keep whatever you choose to send us in the message itself.
When you visit the site
Our hosting provider records standard server logs: IP address, the pages requested, the time of the request, and the browser and operating system reported by your device. These logs exist to keep the site available and to investigate abuse.
Analytics are loaded only if you accept analytics cookies. If you choose “essential only”, no analytics scripts run and no analytics identifiers are set. The detail is in our cookie policy.
When you become a client
To carry out a project we hold contact details for the people we work with, contract and scope documents, invoices and payment records, and any credentials or access you grant us to your own systems. We may also see personal data belonging to your customers inside systems we are building or maintaining. In that situation you remain the controller and we act as your processor, under the terms of the contract between us.
What we never ask for
We do not ask for and do not want your full card number, card security code or online banking credentials. Card payments are handled by our payment provider on its own systems; we receive only a confirmation, the amount, and the last four digits of the card.
Why we use it
- To reply to you. We use your enquiry details to answer your question and to prepare a scope or quotation. Our basis for this is the consent you give when you submit the form, and our legitimate interest in responding to a business enquiry.
- To deliver work you have commissioned. Performance of our contract with you.
- To take payment and keep records. Performance of our contract, and compliance with Malaysian tax and company-records obligations.
- To keep the site and our systems secure. Our legitimate interest in preventing fraud, abuse and unauthorised access.
- To measure how the site is used. Only with your consent, and only in aggregate.
We do not sell personal data, we do not rent mailing lists, and we do not add enquirers to a marketing list without asking.
Who else sees it
We share personal data only with service providers who need it to do their job for us, and only to the extent they need it:
- Hosting and content delivery
- Serves this website and stores server logs.
- Email delivery
- Passes enquiry-form messages to our inbox and carries our replies.
- Payment provider
- Processes card and online-banking payments. Card details are entered on the provider’s systems and are never stored by us.
- Accounting and tax advisers
- Prepare statutory accounts and returns from our invoice records.
- Analytics
- Only where you have accepted analytics cookies.
We will also disclose data where we are required to by law, by a court, or by a regulator, and where it is necessary to establish or defend a legal claim.
Where it is stored
Our default is to keep client data in Malaysia or Singapore. Some of the providers above operate in other countries, which means personal data may be transferred outside Malaysia. Where that happens we rely on the provider’s contractual data-protection commitments, including standard contractual clauses where the destination is outside the EEA or the UK. If a project requires data to stay in a particular country, tell us during scoping and we will design for it.
How long we keep it
- Enquiries that do not become projects
- 24 months from your last message, then deleted.
- Client contact and project records
- For the life of the engagement, then 7 years after the final invoice.
- Invoices and payment records
- 7 years, as required for tax and company records.
- Server logs
- Up to 90 days.
- Credentials you grant us
- Revoked and removed from our password manager at handover, or on request.
How we protect it
- The site is served over HTTPS, and HTTP requests are redirected to HTTPS.
- Access to client systems is individual, least-privilege, and behind multi-factor authentication.
- Credentials are held in a password manager, never in chat, tickets or source code.
- Laptops are disk-encrypted and lock automatically.
- Access is removed the day someone leaves a project.
No system is immune. If a breach happens that is likely to cause you significant harm, we will tell you and the relevant authority without undue delay, and explain what we know and what we are doing about it.
Your rights
You can ask us to:
- tell you what personal data we hold about you, and give you a copy;
- correct anything that is wrong or out of date;
- delete data we no longer have a reason to keep;
- stop processing your data for a particular purpose, including direct marketing;
- limit how we use your data while a dispute about it is resolved;
- withdraw consent you previously gave, at any time.
Write to privacy@mfvtech.my. We respond within 21 days. If your request is not straightforward we will tell you why and when to expect an answer. We may need to confirm your identity first, so that we do not hand your data to someone else.
If you are not satisfied with how we have handled a request, you can complain to the Personal Data Protection Department of Malaysia, or to the supervisory authority in your own country.
Children
Our services are sold to businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, write to us and we will delete it.
Changes to this policy
When this policy changes we update the review date at the top of the page. If a change materially affects how we use data you have already given us, we will tell affected clients directly rather than relying on this page.
Contact
- Who to write to
- Maison Fae Ventures, C-2-9, Pandan Mas Townhouse, Jalan Pandan Indah 8, Taman Pandan Mas, 55100 Kuala Lumpur, Malaysia
- hello@mfvtech.my
- Phone
- +60 11-2848 1778
- Hours
- Monday to Friday, 9:00 to 18:00 (GMT+8)