Last updated: 30 May 2026
This Privacy Notice explains how Paeveul Web Services collects and uses your personal information when you visit our website or contact us about our services. We are committed to handling your information responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
If you have any questions about this Notice, contact us at paeveul.official@gmail.com.
Paeveul Web Services is a web design and development service based in Kuala Lumpur, Malaysia, operated as a sole proprietorship. We are the data user responsible for any personal data you provide through this website. As required under the Personal Data Protection Act 2010, the identity of the individual data user behind Paeveul Web Services is available upon request — please contact us at paeveul.official@gmail.com and we will respond within five (5) business days.
When you fill in our contact or enquiry form, we collect:
You are not required to provide all fields, but we may not be able to respond to your enquiry if key contact details are missing.
On our blog page, we offer an optional email newsletter. If you choose to subscribe, we collect:
This is a separate and voluntary data collection activity. You will only receive our monthly blog posts. You may unsubscribe at any time (see Section 11).
When you visit our website, certain technical data is collected automatically by the third-party services described in Section 5. This may include:
We use two website analytics tools — Google Analytics 4 and Microsoft Clarity — to understand how visitors use our website. Neither tool loads unless you accept analytics cookies via the cookie consent banner that appears on your first visit, or once every 365 days after that. See Section 7 below, and our Cookie Notice, for the complete list of cookies and exactly how the banner works.
We do not collect payment information, identity documents, or any sensitive personal data through this website.
We use the information you submit through our contact form to:
We use your email address to send you our monthly blog post. We will not use your subscription email for any other purpose without your separate consent.
We use the data collected by Google Analytics 4 and Microsoft Clarity — when you have accepted analytics cookies — to understand how visitors use our website so we can improve it, and to identify which pages are most useful or need improvement. If you decline the cookie banner, or have not yet made a choice, neither tool collects any data about your visit.
We do not use your information for automated decision-making or profiling. Contact form data will not be used for unsolicited marketing — we will not contact form submitters for promotional purposes (including via WhatsApp broadcast) without their explicit prior consent.
Under the PDPA 2010, we process your personal data on the following grounds:
We do not sell, rent, or trade your personal data to any third party.
We use the following third-party services that may process your data:
| Service | Purpose | Data involved | Where data is processed |
|---|---|---|---|
| FormBold (formbold.com) | Receives and stores contact form submissions | Name, phone, email, message | FormBold's infrastructure (refer to FormBold's privacy policy) |
| Web3Forms (web3forms.com) | Receives newsletter subscription signups on the blog page | Email address | Web3Forms' infrastructure (refer to Web3Forms' privacy policy) |
| Google (Gmail) | Receiving and replying to enquiries forwarded from FormBold | Name, email, message | Google servers (United States) |
| Google reCAPTCHA | Spam and bot protection on the contact and homepage forms | IP address, browser behaviour | Google servers (United States) |
| Google Analytics 4 | Website traffic analytics — only runs if you accept analytics cookies via our cookie consent banner | Pages viewed, session duration, referral/traffic source, device and browser type, approximate location (city/country level) | Google servers (United States) |
| Microsoft Clarity | Session recording and heatmaps to understand on-page behaviour — only runs if you accept analytics cookies via our cookie consent banner | Mouse movement, scrolling, and clicks (session recordings); form-field masking status currently under review — see our Cookie Notice for the latest | Microsoft servers |
| Google Fonts | Loads website fonts from Google's servers on every page | IP address, browser data | Google servers (United States) |
Each of the above services is operated by a third party and is subject to that provider's own privacy policy. When your data is processed outside Malaysia, we rely on the respective provider's standard data protection practices.
We do not currently use social media tracking pixels, such as Meta Pixel, or any advertising cookies. If that changes, we will update this Notice and, where required, introduce an appropriate consent mechanism before any such tool goes live.
We may disclose your information if required to do so by Malaysian law or a lawful order from a Malaysian authority.
| Data | Retention period |
|---|---|
| Contact form submissions (stored via FormBold) | Up to 2 years from submission, or until deletion is requested — whichever comes first |
| Newsletter subscription email | Until you unsubscribe |
| Google Analytics 4 and Microsoft Clarity analytics data | Retained according to Google's and Microsoft's own default settings; the underlying browser cookies (_ga, _ga_*, Clarity session cookies) persist for up to around 2 years (Google's standard GA4 setting) or as set by Microsoft — we have not customised either. Your own consent-choice cookie (paeveul_consent) is kept for 365 days. |
| Google reCAPTCHA and Google Fonts data | Processed in real time; not retained by us — subject to Google's own retention policies |
When retention periods expire, we delete or anonymise the data. If you make a deletion request (see Section 8), we will act on it promptly.
Our website uses a limited number of cookies, including two analytics tools — Google Analytics 4 and Microsoft Clarity — that only load if you accept them through the cookie consent banner described in Section 7.3. We do not use advertising cookies, social media tracking pixels (such as Meta Pixel), or any cookies that identify you personally by name. For the complete cookie-by-cookie breakdown, see our Cookie Notice.
| Cookie name | Set by | Purpose | Type | Duration |
|---|---|---|---|---|
paeveul_consent |
Paeveul (first-party) | Remembers whether you accepted or declined analytics cookies. Stores only that choice — not any data about your visit. | Strictly necessary | 365 days |
_ga, _ga_* |
Google Analytics 4 — only loads if you accept | Helps us understand how visitors use the site: pages viewed, time on page, referral/traffic source, device and browser type, approximate location at city/country level | Analytics — opt-in | Up to around 2 years (Google's standard setting) |
| Clarity session cookies | Microsoft Clarity — only loads if you accept | Records session activity (mouse movement, scrolling, clicks) and builds heatmaps of how visitors interact with the site | Analytics — opt-in | Set by Microsoft; not customised by us |
_GRECAPTCHA |
Google reCAPTCHA | Spam and bot protection on contact and homepage forms | Functional | Session / up to 6 months |
Our website loads fonts from Google's servers (fonts.googleapis.com and fonts.gstatic.com) on every page. This means Google's servers receive your IP address and browser information each time you visit any page. Google may also set caching-related cookies via fonts.gstatic.com. This is a technical characteristic of how web fonts are delivered — it is not tracking for advertising purposes. For more information, see Google's privacy policy.
Malaysian law does not currently require a cookie consent banner for analytics-only tools like Google Analytics 4 and Microsoft Clarity. We built one anyway because we think visitors should have a clear, easy choice about it.
When you visit this site for the first time — or if it has been more than 365 days since you last made a choice — a banner appears asking whether you accept or decline analytics cookies. Neither Google Analytics 4 nor Microsoft Clarity loads until you choose. The scripts that load them are not present on the page at all unless you accept.
We do not currently use Meta Pixel or any other social media advertising pixel. See our Cookie Notice for the full cookie-by-cookie breakdown and how to change your choice at any time.
You have full control over cookies through your browser settings:
Disabling cookies may affect how some websites function. Disabling the _GRECAPTCHA cookie may prevent our contact forms from working correctly, as reCAPTCHA is required for spam protection.
You can also change your analytics cookie choice at any time by clearing your browser's cookies for paeveul.com — the banner will reappear on your next visit. See our Cookie Notice for full step-by-step instructions.
As a data subject under the PDPA 2010, you have the right to:
To exercise any of these rights, email us at paeveul.official@gmail.com with the subject line "Data Request". We will acknowledge your request within 3 business days and respond in full within 21 days, as required under the PDPA.
We will not charge a fee for reasonable data access requests.
Our website is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us and we will delete it promptly.
We may update this Privacy Notice from time to time to reflect changes in our practices or the law. When we do, we will update the "Last updated" date at the top of this page. We encourage you to check back periodically.
If you subscribed to our monthly blog newsletter and wish to stop receiving it, you may unsubscribe at any time. Each newsletter email includes an unsubscribe link. Alternatively, email us at paeveul.official@gmail.com with the subject line "Unsubscribe" and we will remove your address promptly.
For any privacy-related question or request:
Paeveul
Kuala Lumpur, Malaysia
Email: paeveul.official@gmail.com