1. Introduction
Vantik ("we", "us", "our") is a performance metrics and KPI advisory firm based in Kuala Lumpur, Malaysia. We take the handling of personal information seriously and aim to be straightforward about what we collect, why we collect it and how it is used.
This policy applies to information gathered through this website and through the course of our advisory engagements. It is written in plain language because we believe you should be able to read it without difficulty.
For questions about this policy, write to us at [email protected] or at the address below.
2. Data We Collect
We collect only what is reasonably necessary. The categories below describe what that includes:
Contact and Enquiry Information
When you fill in the contact form on this website, we receive your name, email address, phone number (if provided) and the message you submit. This is used solely to respond to your enquiry.
Engagement Data
When you engage us for advisory work, we may collect business contact details, documents shared for review, and notes from working sessions. These are held only for the duration necessary to deliver and document the engagement.
Website Usage Data
We may collect anonymised data about how visitors use this site — pages viewed, time on site, browser type — through analytics tools. This data does not identify you individually.
Cookie Data
Cookies may be set when you visit this site. You control which categories are active. See our Cookie Policy for details.
Legal basis for processing
We process personal data on the basis of: (a) your consent, where given; (b) the performance of a contract or pre-contractual steps at your request; and (c) our legitimate interests in managing our business and improving our services, where these are not overridden by your rights.
Retention Periods
- Enquiry messages: up to 12 months from receipt, unless a project follows
- Engagement records: up to 7 years for billing and compliance purposes
- Analytics data: aggregated, retained up to 26 months
- Cookie preferences: stored locally in your browser until cleared
3. How We Use Your Data
Personal information is used for the following purposes:
- Responding to enquiries submitted through our contact form
- Delivering and documenting advisory engagements
- Sending occasional updates about our services, where you have consented
- Improving our website and understanding how it is used
- Meeting our legal and accounting obligations under Malaysian law
Data Sharing
We do not sell personal data. We may share it only in the following limited circumstances:
- With service providers who help operate our website and tools (e.g. hosting, analytics), under confidentiality agreements
- Where required by law or a competent authority in Malaysia
- With your explicit consent for any other purpose
4. Data Protection Measures
This website is served over HTTPS. Data submitted through forms is encrypted in transit.
Engagement files and records are stored on access-controlled systems with limited staff permissions.
Personal data is accessible only to those who need it to perform their role in your engagement.
Should a breach affecting your personal data occur, we will notify you and relevant authorities as required by applicable law.
6. Your Rights
Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, and where applicable under other data protection frameworks, you have the following rights in relation to personal data we hold about you:
You may request a copy of the personal data we hold about you.
You may ask us to correct inaccurate or incomplete data.
You may request deletion of personal data we hold, where we are not required by law to retain it.
Where applicable, you may request that your data be provided in a structured, machine-readable format.
You may object to certain types of processing, including direct marketing communications.
Where processing is based on consent, you may withdraw that consent at any time without affecting prior processing.
To exercise any of these rights, write to [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you may raise a concern with the Department of Personal Data Protection (JPDP) in Malaysia.
7. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. Once you leave our website, this policy no longer applies. We encourage you to read the privacy policy of any external site you visit.
8. Children's Privacy
Our services are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted information to us, please contact us and we will remove it promptly.
9. Changes to This Policy
We may update this policy from time to time. When we do, the "Last updated" date at the top of this page will change. Material changes will be communicated through a notice on this website. Continued use of our services after a change takes effect constitutes acceptance of the revised policy.
10. Contact Information
For any questions, requests or concerns about this policy or the personal data we hold, please contact us: