Privacy Policy

1. Introduction

Eaveston ("we", "us", "our") is a logistics advisory practice registered in Malaysia and operating from Port Klang, Selangor. This Privacy Policy explains how we collect, use, store, and protect personal information when you use this website or engage our services.

We handle personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using this website or enquiring about our services, you acknowledge the practices described in this policy.

2. Data We Collect

We collect personal data when you:

• Submit an enquiry form on this website (name, email address, phone number, message content)
• Correspond with us by email or telephone
• Enter into an engagement agreement with us

We also collect non-personal technical data through cookies and analytics tools, including page views, browser type, and approximate location. See Section 5 and our Cookie Policy for details.

3. How We Use Your Data

Personal data collected through this website is used for the following purposes:

• Responding to enquiries and providing information about our engagements
• Managing and delivering advisory engagements you have contracted
• Sending engagement-related communications (scope confirmations, written reviews, invoices)
• Improving our website and service delivery
• Meeting legal and regulatory obligations under Malaysian law

We do not use personal data for unsolicited marketing. If you wish to receive occasional updates about Eaveston services, this will be clearly requested and you may withdraw consent at any time.

4. Legal Basis for Processing

Under the PDPA, we process personal data on the following grounds:

• Consent — when you submit an enquiry form or agree to communications
• Contract performance — when processing data is necessary to deliver an engagement you have commissioned
• Legitimate interests — for website analytics and improving our service, where this does not override your rights
• Legal obligation — where required by Malaysian law or regulation

5. Cookies

This website uses cookies to function and to understand how visitors use the site. Essential cookies are required for basic functionality. Optional cookies (analytics, preference) are only placed with your consent. You can manage your preferences at any time via our Cookie Policy page.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy:

• Enquiry data from visitors who do not become clients: 12 months from the date of enquiry
• Client engagement data: 7 years from the end of the engagement (as required for business records under Malaysian law)
• Website analytics data: 26 months, as per standard analytics provider retention settings

7. Data Sharing

We do not sell, rent, or trade personal data. We may share data with the following categories of third parties only where necessary:

• Technology service providers (website hosting, email delivery) who process data on our behalf under data processing agreements
• Professional advisors (accountants, lawyers) bound by confidentiality obligations
• Regulatory or law enforcement authorities where required by law

Where data is processed outside Malaysia, we take steps to ensure an equivalent level of protection applies.

8. Data Protection Measures

We protect personal data through the following measures:

• HTTPS encryption for all data transmitted via this website
• Access to personal data restricted to Eaveston staff with a legitimate need
• Regular review of data held to delete data that is no longer necessary
• Data breach notification procedures in line with PDPA requirements

9. Your Rights

Under the PDPA and applicable data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of data we hold about you (subject to legal retention requirements)
• Withdraw consent to processing where consent is the legal basis
• Lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Third-Party Links

This website may contain links to external sites. Eaveston is not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy policy of any site you visit.

11. Children's Privacy

Our services are directed at businesses and their representatives. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently collected such data, please contact us at [email protected] and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the revised version will be published on this page with a new "Last Updated" date. Continued use of this website after changes constitutes acceptance of the revised policy.

13. Contact

For questions about this Privacy Policy or how we handle personal data, contact:

• Email: [email protected]
• Post: Eaveston, Lot 7, Jalan Sungai Pinang 5/6, Pelabuhan Klang, 42000 Port Klang, Selangor, Malaysia