Privacy Policy

1. Introduction

Forvex ("we", "us", "our") operates from Suite 27-A, Menara Worldwide, 198 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia. We provide brand name research information services to business clients. This Privacy Policy explains how we collect, use, store, and protect personal data in connection with our services and website at forvex.live.

This policy applies to all personal data we handle, whether submitted through our website enquiry form, provided during an engagement scoping session, or collected through standard website analytics. If you have questions about this policy, please contact us at [email protected].

By using our website or engaging our services, you acknowledge you have read this policy. This policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Personal Data We Collect

We collect the following categories of personal data:

• Contact information: name, business email address, telephone number, and job title — provided when you submit an enquiry through our website form or contact us directly.
• Business information: organisation name, nature of business, and information about proposed brand names or business categories — provided during the scoping phase of an engagement.
• Communication records: emails, notes from scoping calls, and written scope agreements exchanged in connection with an engagement.
• Website usage data: IP address, browser type, pages visited, and referring URLs — collected automatically through standard server logs and, where consent is provided, analytics cookies.

We do not collect sensitive personal data (as defined under the PDPA) and do not ask for identification documents or financial account details in the ordinary course of our services.

3. Legal Basis and Purpose of Processing

We process personal data on the following bases:

• Contract performance: processing necessary to deliver a commissioned research report, including scoping, communication, and delivery.
• Legitimate interests: responding to enquiries, maintaining business records, improving our services, and operating our website securely.
• Consent: for optional analytics and marketing cookies — you may withdraw consent at any time via our cookie preferences page.
• Legal obligation: retaining records as required under Malaysian law, including the Companies Act 2016 and applicable tax legislation.

Retention periods: Enquiry records are retained for 12 months from the date of first contact if no engagement follows. Engagement-related records are retained for seven years from the completion of an engagement to satisfy legal and business record-keeping requirements. Website analytics data is retained for up to 14 months.

4. How We Use Personal Data

• To respond to enquiries and provide scope outlines or fee proposals.
• To deliver commissioned research reports, including scoping discussions and milestone communications.
• To send administrative communications related to an ongoing engagement (status updates, report delivery, invoice).
• To maintain internal business records and comply with legal obligations.
• To understand how our website is used and to improve the information we make available.

We do not use personal data for direct marketing without your explicit consent. We do not sell, rent, or share personal data with third parties for their own marketing purposes.

5. Data Sharing

We do not share personal data with third parties except in the following limited circumstances:

• Service providers: we use third-party services for email delivery, website hosting, and analytics. These providers process data on our behalf under contractual obligations consistent with applicable law.
• Legal requirements: where we are required to disclose information to comply with a legal obligation, court order, or regulatory authority in Malaysia.
• Business transfers: in the event of a merger, acquisition, or sale of business assets, personal data may be transferred to the successor entity under equivalent privacy protections.

We do not transfer personal data to countries outside Malaysia except where necessary to operate standard cloud-based email or website infrastructure, in which case appropriate safeguards apply.

6. Data Protection Measures

• Website communications are transmitted over HTTPS (TLS encryption).
• Access to client data within our organisation is restricted to staff directly involved in the relevant engagement.
• Engagement files are stored on access-controlled systems. Physical documents are stored securely at our Kuala Lumpur office.
• In the event of a personal data breach that poses a risk to affected individuals, we will notify relevant parties in accordance with the PDPA and take steps to contain and remediate the breach.

7. Cookies

We use cookies on our website. Essential cookies are necessary for the website to function and cannot be disabled. Optional analytics and preference cookies are only placed with your consent. You can manage your cookie preferences at any time through our Cookie Policy page.

8. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Withdraw consent for processing based on consent (this does not affect lawfulness of prior processing).
• Request that we cease processing your data for direct marketing purposes.
• Lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your rights have been violated.

To exercise any of these rights, please contact us in writing at [email protected] or by post to Suite 27-A, Menara Worldwide, 198 Jalan Bukit Bintang, 55100 Kuala Lumpur. We will respond within 21 days of receiving your request.

9. Third-Party Links

Our website may contain links to external websites, including public trademark registers and commercial databases referenced in research contexts. These external sites operate under their own privacy policies. We are not responsible for the data practices of third-party websites and recommend you review their privacy statements before providing personal information to them.

10. Children's Privacy

Our services are directed exclusively at business organisations and their representatives. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

12. Contact for Data Enquiries

For privacy-related questions, data access requests, or concerns about how we handle personal data:

• Email: [email protected]
• Post: Forvex, Suite 27-A, Menara Worldwide, 198 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia
• Phone: +60 3 2148 9376 (office hours, Monday–Friday, 9:00 am – 6:00 pm MYT)