Privacy Policy

1. Introduction

Ondrava ("we", "us", "our") is committed to handling your personal information responsibly and in line with our obligations under the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy explains what data we collect, how we use it, and what choices you have.

This policy applies to information collected through our website at https://ondravas.pro and through direct contact with us. If you have questions, please write to [email protected].

2. Data We Collect

We collect information you provide directly, such as:

• Full name and email address (when you submit a contact form)
• Phone number (if you choose to include it)
• Message content (if you include a message)

We may also collect limited technical data automatically, including IP address, browser type, pages visited, and visit duration, through analytics cookies if you have consented to them.

Legal basis: We process your contact details on the basis of your consent (when you submit a form) and our legitimate interest in responding to business enquiries. Analytics data is processed only with your consent.

3. How We Use Your Information

• To respond to your enquiry or message
• To discuss and deliver consulting services if you become a client
• To understand how our website is used, in aggregate form, to improve it
• To comply with applicable legal obligations

We do not sell your personal information. We do not use your details to send marketing communications without your explicit consent.

4. Data Retention

We retain enquiry data for up to 12 months from the date of submission. If you become a client, engagement-related information is retained for 7 years in line with standard Malaysian business record-keeping requirements. You may request deletion at any time (subject to legal obligations).

5. Data Sharing

We do not share your personal information with third parties except:

• Service providers who help us operate our website (e.g. web hosting, analytics), who are bound by confidentiality
• Where required by law or a lawful order from a Malaysian authority

If we use Google Analytics, data may be processed on servers outside Malaysia. We ensure appropriate safeguards are in place for any such transfers.

6. Data Security

We use reasonable technical and organisational measures to protect your information, including HTTPS encryption on our website and restricted internal access to personal data. In the event of a data breach affecting your rights, we will notify you as required under the PDPA.

7. Cookies

We use cookies to operate the site and, with your consent, to understand usage. Essential cookies are always active. You can manage optional cookies at any time via our Cookie Policy page.

8. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw your consent for processing at any time
• Request that we limit or stop using your data
• Lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of these rights, contact us at [email protected]. We aim to respond within 21 days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

10. Children

Our services are intended for business professionals aged 18 and above. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of our website after changes are posted constitutes acceptance of the revised policy.