Privacy Policy (Malaysia PDPA)
Veltell System Pte Ltd (“Veltell”, “we”, “us”) processes personal data relating to individuals in Malaysia, including employees, contractors and agents of our clients, in accordance with the Personal Data Protection Act 2010 (Act 709) of Malaysia (“PDPA”).
1. Personal data we process
- Contact data you provide through the consultation form, email or telephone: name, company, email address, phone number and the content of your enquiry.
- Engagement data processed on behalf of our clients for Malaysian payroll and compliance, such as names, national registration numbers, bank details, salary and EPF / SOCSO contribution data.
- Technical data such as pages visited on this website. We do not use advertising trackers.
We do not collect sensitive personal data as defined under the PDPA (such as religious or political information) unless strictly required for a service you have engaged, and only with your explicit consent.
2. Notice and purpose
Personal data is collected for identifiable, lawful purposes directly related to our services:
- to respond to enquiries and consultation requests;
- to deliver payroll, EPF, SOCSO and statutory compliance services;
- to manage contracts and documentation;
- to meet legal and regulatory obligations; and
- to maintain security and improve our website.
3. Disclosure
We disclose personal data only where necessary and lawful: to regulated banking and payment partners, to processors acting on our instructions, to professional advisers, and to authorities (including EPF, SOCSO and LHDN) where the law requires. We do not sell personal data.
4. Security and retention
We apply appropriate administrative and technical safeguards, including encryption in transit and access controls. Personal data is retained only as long as needed for the stated purposes or as required by Malaysian statutory record keeping rules, after which it is deleted or anonymized.
5. Data integrity and access
We keep personal data accurate and complete where it is used for decisions or ongoing obligations. Under the PDPA you have the right to request access to, and correction of, your personal data held by us. Requests under Sections 30 and 31 of the PDPA are handled within 21 days of the required fee and identity verification.
6. Cross border transfers
Where personal data is transferred outside Malaysia (including to our Singapore operations and technology partners), we rely on lawful grounds and appropriate safeguards as permitted under the PDPA.
7. Data breach notification
Where we become aware of a personal data breach that creates a real risk of harm, we will notify affected individuals and the relevant authorities as required by the PDPA regulations.
8. Contact
For any PDPA request or privacy question, contact: alif@getveltell.com. We may update this notice from time to time; the latest version is always published on this page.
Veltell System Pte Ltd, 60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051.