Privacy Policy

Section 01

Who We Are

The data controller for the purposes of this policy is Iverra, a business providing standard operating procedure documentation services. Our registered office is at Level 13, Menara Worldwide, 198 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia.

For privacy-related enquiries, please contact us at [email protected].

Section 02

Personal Data We Collect

We collect personal data through our website contact form and through direct correspondence. The categories of data we may collect include:

• Contact details: name, email address, and telephone number submitted via the contact form
• Correspondence content: the content of messages or enquiries you send to us
• Usage data: pages visited, time spent on site, browser type, and approximate location (via analytics cookies, where consent is given)
• Session data: technical data stored temporarily to support site functionality

Legal basis for processing: We process your data on the basis of your consent (where applicable), to take steps at your request prior to entering a service engagement, or to pursue our legitimate interest in responding to business enquiries.

Retention: Enquiry data is retained for up to 24 months from last contact. Data associated with a completed engagement is retained for up to 7 years for record-keeping purposes. Cookie-derived data is retained according to the cookie durations set out in our Cookie Policy.

Section 03

How We Use Your Data

We use the personal data you provide for the following purposes:

• Responding to enquiries submitted through our contact form
• Discussing, scoping, and delivering SOP documentation engagements
• Sending service-related communications relevant to an active engagement
• Improving our website based on anonymised usage data (where consent to analytics cookies is given)
• Complying with applicable legal and regulatory requirements

We do not use your personal data for unsolicited marketing communications. Any service-related follow-up communication will be directly connected to your original enquiry or an active engagement.

Section 04

Sharing Your Data

We do not sell personal data to third parties. We may share data in limited circumstances:

• Service providers: third-party tools used to operate our website (such as hosting and analytics providers) may process data on our behalf and are bound by appropriate data processing terms
• Legal requirements: we may disclose data where required by Malaysian law or a competent authority
• Business transfers: in the event of a business restructuring, data may be transferred to a successor entity subject to equivalent data protection obligations

Where third-party analytics services are in use and you have consented to analytics cookies, data such as page views and session duration may be processed by those services. You can withdraw this consent at any time via our Cookie Policy page.

Section 05

Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure:

• Website traffic is served over HTTPS (TLS encryption in transit)
• Access to systems holding personal data is restricted to individuals who need it to fulfil their role
• We conduct periodic reviews of data handling practices
• In the event of a data breach affecting your rights and freedoms, we will notify affected individuals in accordance with applicable requirements

Section 06

Cookies

Our website uses cookies to support functionality and, where you consent, to collect anonymised usage data. Cookies are small text files placed on your device by your browser.

We use essential cookies (necessary for the site to function), and optional analytics cookies (used only with your consent). You can manage your cookie preferences at any time on our Cookie Policy page.

Section 07

Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in respect of personal data we hold about you:

• Right of access: you may request a copy of the personal data we hold about you
• Right of correction: you may request that inaccurate or incomplete data be corrected
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing
• Right to limit processing: you may request that we restrict use of your data in certain circumstances
• Right to object: you may object to processing carried out on the basis of legitimate interest

To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days. If you are dissatisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

Section 08

Third-Party Links

Our website may contain links to external websites or resources. We are not responsible for the privacy practices of those sites, and this policy does not apply to them. We recommend reviewing the privacy notices of any third-party sites you visit.

Section 09

Children's Privacy

Our services are intended for organisations and business professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data through our site, please contact us so we can remove it promptly.

Section 10

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this page periodically.

Continued use of our website following any update constitutes your acknowledgement of the revised policy.

Section 11

Contact for Data Enquiries

For any questions or requests relating to this policy or our data practices, please contact: