Privacy Policy

1. Introduction

Novalith ("we", "us", "our") is committed to handling personal data responsibly. This policy explains what data we collect, how we use it, and the rights you hold in relation to it. It applies to data collected through our website at novalithol and through our business engagement processes.

We operate under the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs the processing of personal data in commercial transactions. If you have questions about this policy, contact us at privacy@novalithol.

2. Data We Collect

We collect personal data you provide directly when you use our contact form or communicate with us by email or phone. This may include your name, email address, phone number, job title, company name, and the content of your messages.

We also collect limited data automatically when you visit our website, including your IP address, browser type, pages visited, and time spent on the site. This is collected through standard web analytics tools and is used in aggregate form to improve the website.

We do not collect sensitive personal data as defined under the PDPA (such as health, financial account, or biometric data) through this website. Data collected through project engagements is governed by separate data processing agreements.

3. How We Use Your Data

Personal data submitted through our contact form is used to respond to your enquiry, discuss potential services, and manage the business relationship if an engagement proceeds. We retain this data for as long as the relationship is active and for a reasonable period thereafter (typically 36 months) for legitimate business purposes.

We may send you relevant information about our services if you have engaged with us and have not opted out. You can opt out at any time by contacting us at privacy@novalithol.

We use website analytics data to understand how visitors use the site and to identify areas for improvement. This data is not linked to individual identities.

4. Legal Basis for Processing

Under the PDPA, we process personal data on the following bases: your consent (for contact form submissions and marketing communications); the performance of a contract or pre-contractual steps (for project-related communications); and our legitimate interests in managing and growing the business, where those interests are not overridden by your rights.

5. Data Sharing

We do not sell personal data. We may share data with trusted service providers who assist us in operating the website and managing communications (for example, email and analytics platforms). These providers are engaged under data processing terms that restrict how they may use the data.

We may disclose personal data where required by Malaysian law or by a competent authority. We will notify you where legally permitted to do so.

6. Data Protection Measures

We implement reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss. This includes encrypted transmission via HTTPS, access controls on systems that store personal data, and regular review of our data handling practices.

In the event of a data breach that may affect your rights or freedoms, we will take prompt steps to contain it and notify relevant parties as required under the PDPA.

7. Cookies

Our website uses cookies to support functionality and to collect anonymous analytics data. You can manage your cookie preferences through the banner on our homepage or via your browser settings. For full details, see our Cookie Policy.

8. Your Rights

Under the PDPA and applicable law, you have the right to access the personal data we hold about you, to correct inaccurate data, to withdraw consent to processing (where consent is the legal basis), and to request deletion of data where we no longer have a legitimate reason to retain it.

To exercise any of these rights, contact us at privacy@novalithol. We will respond within 21 days. We may need to verify your identity before processing the request.

If you believe your data has been handled in breach of the PDPA, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies independently.

10. Children's Privacy

Our services are directed at organisations and business professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently done so, please contact us and we will delete the data promptly.

11. Policy Updates

We may update this policy from time to time. Significant changes will be noted at the top of this page with a revised date. Continued use of the website following an update constitutes acceptance of the revised policy.

12. Contact

For data-related enquiries, contact our data officer:

Novalith · 27 Persiaran KLCC, 50088 Kuala Lumpur, Malaysia

privacy@novalithol