Paeveul
TAKING NEW PROJECTS · 2026 Start an Enquiry →

Privacy Notice

Last updated: 30 May 2026

This Privacy Notice explains how Paeveul Web Services collects and uses your personal information when you visit our website or contact us about our services. We are committed to handling your information responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have any questions about this Notice, contact us at paeveul.official@gmail.com.

1. Who We Are

Paeveul Web Services is a web design and development service based in Kuala Lumpur, Malaysia, operated as a sole proprietorship. We are the data user responsible for any personal data you provide through this website. As required under the Personal Data Protection Act 2010, the identity of the individual data user behind Paeveul Web Services is available upon request — please contact us at paeveul.official@gmail.com and we will respond within five (5) business days.

2. What Information We Collect

2.1 Information you give us — contact and enquiry form

When you fill in our contact or enquiry form, we collect:

  • Your name
  • Your phone number
  • Your email address
  • The message or enquiry you send us

You are not required to provide all fields, but we may not be able to respond to your enquiry if key contact details are missing.

2.2 Information you give us — newsletter subscription (blog page)

On our blog page, we offer an optional email newsletter. If you choose to subscribe, we collect:

  • Your email address

This is a separate and voluntary data collection activity. You will only receive our monthly blog posts. You may unsubscribe at any time (see Section 11).

2.3 Information collected automatically

When you visit our website, certain technical data is collected automatically by the third-party services described in Section 5. This may include:

  • Your IP address and approximate location (country or city level — not your exact address)
  • The type of device and browser you are using
  • Which pages you viewed and how long you spent on them
  • How you arrived at our site (e.g. from a search engine or a link)

We do not currently use website analytics tools such as Google Analytics 4 or Microsoft Clarity. We may use such tools in the future — if and when we do, this Notice will be updated to describe what is collected and why.

We do not collect payment information, identity documents, or any sensitive personal data through this website.

3. Why We Collect Your Information

3.1 Contact form submissions

We use the information you submit through our contact form to:

  • Respond to your enquiry or service request
  • Follow up with you about a potential or ongoing project
  • Provide you with a quotation or proposal if requested

3.2 Newsletter subscription

We use your email address to send you our monthly blog post. We will not use your subscription email for any other purpose without your separate consent.

3.3 Future analytics

If and when we deploy analytics tools such as Google Analytics 4 or Microsoft Clarity, we will use the data collected to understand how visitors use our website so we can improve it, and to identify which pages are most useful or need improvement. This Notice will be updated at that time.

3.4 What we do not do

We do not use your information for automated decision-making or profiling. Contact form data will not be used for unsolicited marketing — we will not contact form submitters for promotional purposes (including via WhatsApp broadcast) without their explicit prior consent.

4. Legal Basis for Processing

Under the PDPA 2010, we process your personal data on the following grounds:

  • Consent — by submitting our contact form, you are giving us consent to contact you in response to your enquiry.
  • Consent — by subscribing to our newsletter on the blog page, you are giving us separate consent to send you our monthly blog posts. You may withdraw this consent at any time by unsubscribing.
  • Legitimate interests — if and when we deploy website analytics tools, we will rely on our legitimate interest in understanding how our site performs so we can improve it. This interest does not override your rights, and we will update this Notice before doing so.

5. Who We Share Your Information With

We do not sell, rent, or trade your personal data to any third party.

We use the following third-party services that may process your data:

Service Purpose Data involved Where data is processed
FormBold (formbold.com) Receives and stores contact form submissions Name, phone, email, message FormBold's infrastructure (refer to FormBold's privacy policy)
Web3Forms (web3forms.com) Receives newsletter subscription signups on the blog page Email address Web3Forms' infrastructure (refer to Web3Forms' privacy policy)
Google (Gmail) Receiving and replying to enquiries forwarded from FormBold Name, email, message Google servers (United States)
Google reCAPTCHA Spam and bot protection on the contact and homepage forms IP address, browser behaviour Google servers (United States)
Google Fonts Loads website fonts from Google's servers on every page IP address, browser data Google servers (United States)

Each of the above services is operated by a third party and is subject to that provider's own privacy policy. When your data is processed outside Malaysia, we rely on the respective provider's standard data protection practices.

Future services: We may in the future use analytics tools (such as Google Analytics 4 or Microsoft Clarity) and social media tracking pixels (such as Meta Pixel). If and when such tools are deployed, this Notice will be updated before they go live.

We may disclose your information if required to do so by Malaysian law or a lawful order from a Malaysian authority.

6. How Long We Keep Your Information

Data Retention period
Contact form submissions (stored via FormBold) Up to 2 years from submission, or until deletion is requested — whichever comes first
Newsletter subscription email Until you unsubscribe
Google reCAPTCHA and Google Fonts data Processed in real time; not retained by us — subject to Google's own retention policies

When retention periods expire, we delete or anonymise the data. If you make a deletion request (see Section 8), we will act on it promptly.

7. Cookies

Our website uses a limited number of cookies. We do not use advertising cookies, social media tracking pixels, or any cookies that identify you personally.

7.1 Cookies currently in use

Cookie name Set by Purpose Type Duration
_GRECAPTCHA Google reCAPTCHA Spam and bot protection on contact and homepage forms Functional Session / up to 6 months

7.2 Third-party data access — Google Fonts

Our website loads fonts from Google's servers (fonts.googleapis.com and fonts.gstatic.com) on every page. This means Google's servers receive your IP address and browser information each time you visit any page. Google may also set caching-related cookies via fonts.gstatic.com. This is a technical characteristic of how web fonts are delivered — it is not tracking for advertising purposes. For more information, see Google's privacy policy.

7.3 Cookies we do not currently use

We do not currently use Google Analytics, Microsoft Clarity, Meta Pixel, or any other analytics or advertising cookies. The following table lists tools we may add in the future. If and when we deploy them, this notice will be updated and a cookie consent mechanism will be introduced if advertising cookies are involved.

Tool Purpose if added Cookie type
Google Analytics 4 Website traffic analytics Analytics
Microsoft Clarity Session recording and heatmaps Analytics
Meta Pixel Social media advertising attribution Advertising

7.4 How to manage cookies

You have full control over cookies through your browser settings:

  • Chrome: Settings > Privacy and security > Cookies and other site data
  • Firefox: Settings > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Manage Website Data
  • Edge: Settings > Cookies and site permissions

Disabling cookies may affect how some websites function. Disabling the _GRECAPTCHA cookie may prevent our contact forms from working correctly, as reCAPTCHA is required for spam protection.

8. Your Rights Under the PDPA

As a data subject under the PDPA 2010, you have the right to:

  • Access your personal data that we hold
  • Correct any personal data that is inaccurate or incomplete
  • Withdraw consent for us to process your data at any time
  • Request deletion of your data (subject to any legal obligations we have to retain it)

To exercise any of these rights, email us at paeveul.official@gmail.com with the subject line "Data Request". We will acknowledge your request within 3 business days and respond in full within 21 days, as required under the PDPA.

We will not charge a fee for reasonable data access requests.

9. Children's Data

Our website is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us and we will delete it promptly.

10. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or the law. When we do, we will update the "Last updated" date at the top of this page. We encourage you to check back periodically.

11. Newsletter Unsubscribe

If you subscribed to our monthly blog newsletter and wish to stop receiving it, you may unsubscribe at any time. Each newsletter email includes an unsubscribe link. Alternatively, email us at paeveul.official@gmail.com with the subject line "Unsubscribe" and we will remove your address promptly.

12. Contact

For any privacy-related question or request:

Paeveul
Kuala Lumpur, Malaysia
Email: paeveul.official@gmail.com