Privacy Policy — DatavaNGuards

Definitions

Key terms used in this policy are explained below to make our practices clear and accessible.

Personal data means any information that relates to an identified or identifiable individual, such as name, contact details, job title or identifiers collected in connection with our services.
Processing refers to any operation performed on personal data, including collection, storage, retrieval, use, disclosure, modification and deletion.
User covers visitors to DatavaNGuards.info, training participants, prospective clients, referrers and anyone interacting with our services.
Service means the digital protection education, training, simulations, support and related services offered by DatavaNGuards.
Cookies are small files placed on a device to remember preferences, support functionality, and collect analytics about how the service is used.

Data We Collect

We collect information directly from users, automatically through technology when they access our sites, and sometimes from trusted third parties. We limit collection to what is necessary to provide and improve our services.

Data You Provide

When you register, request services, or communicate with us, you may provide personal data required to deliver the requested service.

Contact details such as full name and email address
Telephone number and mailing address
Organisation name, role and business identifiers
Billing and payment information provided for invoices and subscriptions (handled via payment processors)
Training responses, assessment results and participation records
Support requests, feedback and any content you submit to us

Automatically Collected Data

We automatically collect technical and usage information to operate the service, troubleshoot issues and improve content relevance.

IP address and approximate location
Device and browser details, screen resolution and operating system
Log data including access times, pages viewed and interaction events
Cookies and similar identifiers used for functionality and analytics
Performance metrics such as load times and feature usage
Aggregated and anonymised usage reports

Third-Party Sources

We may receive data from partners or publicly available sources to enhance our service delivery while taking care to validate and limit such data.

Payment processors and invoicing partners to process transactions
Learning management system partners and corporate customers for course delivery
Analytics and security providers that help us monitor and protect services

How We Use Data

We use collected data only for specific, documented purposes necessary for delivering services, improving offerings, and meeting legal obligations.

To provide and manage training, simulations and support services
To process payments, invoices and contract administration
To personalise learning content and recommend relevant modules
To detect, contribute and respond to security incidents
To communicate important service information and updates
To comply with legal and regulatory obligations
To perform analytics and improve course content and delivery
To manage customer relationships and optional marketing where consent is given

Legal Bases for Processing

Where applicable, we rely on recognised legal bases to process personal data.

Performance of a contract to deliver services you requested
Consent where you have explicitly agreed to specific processing (e.g., marketing emails)
Legitimate interests such as maintaining security and improving services, balanced against individual rights
Compliance with legal obligations such as recordkeeping or responding to lawful requests

Data Subject Rights

If you are subject to EU data protection rules, you may have specific rights regarding your personal data. We describe those rights below and how to exercise them.

Right of access — request a copy of personal data we hold about you
Right to rectification — request correction of inaccurate or incomplete data
Right to erasure — request deletion of data where retention is no longer necessary or lawful
Right to restriction of processing — ask us to limit use while a dispute is resolved
Right to data portability — request transfer of machine-readable data to another controller when technically feasible
Right to object — object to processing based on legitimate interests or direct marketing

Cookies and Tracking

Cookies and similar technologies help the site function and provide insights into usage. We use them with user control and transparency in mind.

We use essential cookies for core functionality, preference cookies to remember choices, performance cookies for analytics, and optional advertising cookies only with consent.

Categories include Essential, Functional, Performance/Analytics and Marketing/Advertising cookies. Essential cookies cannot be disabled without affecting service functionality.

You can manage cookie preferences through your browser settings or the cookie banner on DatavaNGuards.info. Disabling some cookies may reduce certain features.

View our full Cookie Policy

Data Sharing and Disclosure

We share personal data only where necessary to provide services, meet legal obligations, or with partners who support our operations under appropriate protections.

Service providers who support hosting, payments, analytics and course delivery
Affiliated companies and subcontractors involved in service fulfilment
Professional advisors such as auditors and legal advisors under confidentiality terms
Acquirers or successors in the event of a business sale or restructuring
Law enforcement or regulators when legally required to respond to valid requests
Aggregated or anonymised datasets that do not identify individuals

International Data Transfers

DatavaNGuards may transfer personal data across borders to operate services and engage trusted partners. Transfers are handled in accordance with applicable law and assessed safeguards.

When data is transferred internationally we use contractual safeguards, encryption, vendor assessments and data minimisation to protect information and limit unnecessary exposure.

Data Retention

We retain personal data only as long as necessary for the purposes described, to meet legal obligations, or to resolve disputes, with periodic reviews to minimise retention.

Account information is retained for the duration of the customer relationship and removed or anonymised after a reasonable period following account closure unless legal obligations require otherwise.

Messages and correspondence are retained while relevant to ongoing matters and for a short period afterwards to allow service continuity and recordkeeping.

Technical logs and monitoring data are retained for troubleshooting and security purposes for limited periods consistent with operational needs.

You may request deletion of your personal data where applicable; we will assess requests against contractual and legal retention requirements and proceed to delete or anonymise data when appropriate.

Security Measures

DatavaNGuards applies industry-standard technical and organisational measures to protect personal data from unauthorised access, accidental loss or misuse. Measures are regularly reviewed and updated as threats evolve.

Encryption of data in transit and, where appropriate, at rest; secure access controls and authentication
Role-based access, regular security assessments, logging, and incident response procedures
Routine security reviews and controlled access: DatavaNGuards conducts scheduled audits of systems and restricts data access to authorized personnel only, using role-based permissions and secure authentication to reduce exposure.

Your Rights

You have clear choices about how your personal information is collected, used and shared by DatavaNGuards. Below are the rights available to individuals in Malaysia and practical steps to exercise them.

Right to access: Request a copy of personal data we hold about you, including records of processing activities related to your account or training engagements.
Right to correction: Ask us to correct incomplete or inaccurate personal information so our records reflect your current details and preferences.
Right to deletion: Submit a request to delete personal data where retention is no longer necessary for the purposes for which it was collected, subject to legal or contractual retention obligations.
Right to restrict processing: Request that we limit how we use your personal information while a dispute about accuracy or lawful processing is being resolved.
Right to data portability: Where feasible, receive your personal data in a commonly used, machine-readable format for transfer to another service provider.
Right to object to processing: Object to direct marketing or other processing activities based on legitimate interests; we will assess and respond to such requests promptly.
Right to withdraw consent: If you previously provided consent for a specific processing activity, you may withdraw it at any time for future processing.
Right to lodge a complaint: If you believe DatavaNGuards has mishandled your personal data, you may contact our team or lodge a complaint with the relevant Malaysian authority.

How to submit a rights request

To exercise any of the rights above, contact our Privacy Officer with a clear description of your request and a copy of identification if required for verification. Include your full name, email address, and any account or invoice references to help us locate your records quickly.

hello@DatavaNGuards.info

We aim to acknowledge receipt of rights requests within 7 business days and provide a detailed response within 30 calendar days. Complex requests or those requiring verification may take longer; we will notify you if an extension is needed.

Marketing and communications

DatavaNGuards uses contact details provided during sign-up or event registration to share relevant updates about our digital safety training, new services, and occasional promotions. Communications are tailored to professional needs and preferences to keep information practical and useful.

You can opt out of marketing communications at any time using the unsubscribe link in emails, by contacting our support team, or by updating your preferences in your account settings.

Children's privacy

DatavaNGuards does not intentionally collect personal data from children under 13 for training or services. If we learn that we have collected such data without parental consent, we will take steps to delete it promptly. Parents or guardians who believe their child’s data has been collected may contact us.

Links to third-party sites

Our website and course platforms may contain links to external sites or services. DatavaNGuards is not responsible for the privacy practices or content of third-party sites. We recommend reviewing their privacy policies before providing personal information.

Changes to this privacy policy

We may update our privacy policy to reflect changes in legal requirements or service offerings. Material changes will be posted on DatavaNGuards.info with a revised effective date. Continued use of our services after updates indicates acceptance of the revised policy.