Privacy Policy
Last updated: 6 October 2026
This policy explains what personal data Vermaze Sdn Bhd ("Vermaze", "we", "us") collects when you visit vermaze.com or contact us, how we use it, and the choices you have.
We handle personal data in line with the Personal Data Protection Act 2010 of Malaysia (PDPA).
1. Who we are
Vermaze Sdn Bhd (202001039513 (1395834-U)) is a web and product design studio based in Kuala Lumpur, Malaysia. We are responsible for the personal data described in this policy.
If you have a question about this policy or your data, email us at contact@vermaze.com.
2. What we collect
Information you give us. When you email us, book a call or send an enquiry, we collect the details you share, such as:
- Your name
- Your email address and phone number
- Your company name and role
- What you tell us about your project
Information collected automatically. When you visit our website, we and our service providers collect information about your visit, such as:
- Your device type, browser and operating system
- Your IP address and approximate location (city or country)
- The pages you view, how long you stay, and what you click or scroll
- The website or search that brought you to us
We do not ask for sensitive personal data, and we ask that you do not send it to us.
3. How we use your data
We use personal data to:
- Reply to your enquiry and arrange calls or meetings
- Prepare proposals and deliver our services
- Understand how people use our website, so we can improve it
- Measure which pages, searches and campaigns bring enquiries
- Keep our website secure and prevent misuse
- Meet our legal and accounting obligations
We do not sell your personal data. We do not use it to make automated decisions about you.
4. Cookies and analytics
Our website uses cookies and similar technologies. A cookie is a small file stored on your device. We use them to remember your preferences and to measure how the website is used.
Google Analytics. We use Google Analytics, a web analytics service provided by Google LLC. It uses cookies to collect information such as the pages you visit, how long you stay, how you arrived, and your approximate location. Google processes this information on our behalf to report on how the website is used. Google may also use it according to its own privacy policy.
- Read the Google Privacy Policy
- See how Google uses information from sites that use its services
- Opt out of Google Analytics on all websites with the Google Analytics opt-out browser add-on
Website-insight tools. We may also use tools that show how visitors move through our pages, including clicks, scrolling and page views. Some of these tools can replay a visit so we can see where people get stuck. We use this information to improve the website. We do not use it to identify you personally.
Your choices. You can block or delete cookies in your browser settings. If you do, the website will still work, but some features may not remember your choices.
5. Who we share data with
We share personal data only when it is needed, with:
- Service providers who help us run our website and business, such as hosting, analytics, email, scheduling and accounting providers. They may use the data only to provide their service to us.
- Professional advisers, such as lawyers and auditors, when required.
- Authorities, when the law requires it.
Some of these providers are located outside Malaysia. When data is transferred abroad, we take reasonable steps to make sure it stays protected.
6. How long we keep it
We keep personal data only for as long as we need it for the purposes in this policy, or as long as the law requires. Enquiry details are kept while we are in contact with you and for a reasonable period afterwards. Analytics data is kept in line with the retention settings of our providers.
7. How we protect it
We use reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Your rights
Under the PDPA, you can ask us to:
- Give you access to the personal data we hold about you
- Correct personal data that is inaccurate or out of date
- Stop or limit how we use your personal data
- Withdraw your consent, including for marketing messages
To make a request, email contact@vermaze.com. We will reply within the time the law allows. We may need to confirm your identity first.
9. Links to other websites
Our website may link to other websites, such as client websites and social platforms. We are not responsible for how those websites handle your data. Please read their own privacy policies.
10. Children
Our website and services are meant for businesses. We do not knowingly collect personal data from anyone under 18.
11. Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed. If the changes are significant, we will make that clear on this page.
12. Contact us
If you have a question, a request or a complaint about how we handle your personal data, email contact@vermaze.com.