Privacy Policy

1. Who We Are

This website is operated by Everwin 90 Enterprise (SSM: 202103356936 / JM0958134-D), trading as Everwin Digital, located at B1-13-1, Jalan Jalil Perkasa 19, Bukit Jalil, 57000 Kuala Lumpur, Malaysia.

We respect your privacy. This policy explains what personal data we collect, why we collect it, and the choices you have. It is written in line with Malaysia's Personal Data Protection Act 2010 (PDPA), and we also aim to treat clients in Australia, Singapore and the United States fairly under the privacy laws of their own countries.

2. Personal Data We Collect

We only collect what we need to reply to you and do our work. This may include:

• Contact form details: your full name, business name, email address, phone or WhatsApp number, the service you are interested in, and your message.
• WhatsApp and email conversations: your name, phone number, email address and anything you choose to share with us when you message us.
• Client project information: if you become a client, we may receive business details, website or Google Business Profile access, photos and other materials needed to deliver our services.
• Basic technical data: like most websites, our hosting provider automatically records standard server logs such as IP address, browser type and pages requested, for security and performance.

We do not knowingly collect sensitive personal data (such as health, religious or financial account details), and we ask that you do not send it to us.

3. How We Use Your Data

• To reply to your enquiry and send you a quote or free audit.
• To deliver, manage and support the services you engage us for.
• To send invoices and keep business and tax records.
• To keep our website secure and working properly.
• To meet our legal obligations.

We will not add you to a marketing mailing list without your consent, and we never sell or rent your personal data to anyone.

4. Who We Share It With

We share personal data only with trusted service providers who help us run our business, and only as much as they need:

• Vercel Inc. — hosts this website.
• Resend — delivers contact form submissions to our inbox by email.
• WhatsApp (Meta Platforms) — when you choose to message us on WhatsApp, your conversation is handled under WhatsApp's own privacy policy.
• Google — email and, for client work, Google Business Profile and related tools.

We may also disclose personal data if required by law, a court order or a government authority.

5. International Transfers

Some of our service providers store data on servers outside Malaysia, including in the United States. Where this happens, we use reputable providers that apply appropriate security measures to protect your data.

6. Cookies and Tracking

We do not currently use advertising cookies or tracking pixels on this website. If we add analytics or advertising tools in the future (for example, to measure which pages are useful), we will update this policy before doing so.

Links to WhatsApp, Google, Facebook or other third-party sites are governed by those sites' own privacy policies.

7. How Long We Keep Your Data

We keep enquiry data for as long as needed to respond to you and follow up, and generally no longer than 24 months if you do not become a client. Client records are kept for the duration of our working relationship and for up to 7 years afterwards to meet Malaysian tax and accounting requirements. After that, we securely delete it.

8. How We Protect Your Data

This website is served over HTTPS. Access to client accounts and data is limited to people who need it to do the work, and we use strong passwords and two-factor authentication where available. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your information.

If a data breach is likely to cause you significant harm, we will notify you and the relevant authority as required by law.

9. Your Rights

You can contact us at any time to:

• Ask what personal data we hold about you and request a copy.
• Correct data that is inaccurate or out of date.
• Withdraw your consent or ask us to stop contacting you.
• Ask us to delete your data, where we are not legally required to keep it.
• Make a complaint about how we have handled your data.

We will respond within 21 days. If you are not satisfied with our response, you may contact the Personal Data Protection Department (JPDP) in Malaysia, or the privacy regulator in your own country.

10. Children

Our services are for business owners. We do not knowingly collect personal data from anyone under 18.

11. Changes to This Policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.

12. Contact Us

Questions about this policy or your personal data? Get in touch and we'll help.