Privacy Policy

Last Updated: January 19, 2026

1. Introduction

Neurova ("we," "us," "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website or engage our services. We operate in compliance with the Malaysian Personal Data Protection Act 2010 (PDPA) and applicable data protection regulations.

By accessing our services or providing us with your personal data, you acknowledge that you have read and understood this Privacy Policy. If you have questions or concerns about this policy, please contact us at [email protected].

2. Information We Collect

We collect information that you provide directly to us and information that is automatically collected when you use our website or services.

Personal Information You Provide

When you contact us, request information, or engage our services, we may collect:

  • Name and contact details (email address, phone number)
  • Company name and job title
  • Business requirements and project details
  • Communication preferences
  • Any other information you choose to provide

Automatically Collected Information

When you visit our website, we automatically collect certain information through cookies and similar technologies:

  • Browser type and version
  • Operating system
  • IP address and general location
  • Pages visited and time spent on pages
  • Referring website addresses

3. How We Use Your Information

We process personal data for the following purposes, based on legitimate business interests, contractual necessity, or your consent:

  • To respond to your inquiries and provide information about our services
  • To deliver and manage the AI services you have engaged us for
  • To communicate with you about projects, updates, and service improvements
  • To improve our website functionality and user experience
  • To comply with legal obligations and regulatory requirements
  • To protect against fraud, security threats, and misuse of our services
  • To conduct analytics and business intelligence activities

We do not use personal data for marketing purposes without explicit consent. If you opt in to receive communications from us, you may withdraw consent at any time by contacting [email protected].

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share information with the following parties under specific circumstances:

Service Providers

We work with trusted third-party service providers who assist us in operating our website, conducting business, and delivering services. These providers include cloud hosting services, email communication platforms, and analytics tools. All service providers are contractually obligated to maintain confidentiality and security of your data.

Legal Requirements

We may disclose personal data when required by law, court order, or government request, or when necessary to protect our legal rights, prevent fraud, or ensure safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the relevant parties. You will be notified of any such change via email or prominent notice on our website.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using SSL/TLS protocols
  • Encryption of sensitive data at rest
  • Access controls limiting data access to authorized personnel only
  • Regular security assessments and vulnerability testing
  • Employee training on data protection and security practices
  • Secure backup procedures and disaster recovery protocols

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to promptly addressing any suspected data breaches.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Contact information and project-related data are typically retained for seven years following project completion to comply with business and legal requirements. Website analytics data is retained for two years. You may request deletion of your data at any time, subject to our legal obligations to retain certain records.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze site usage. Cookies are small text files stored on your device that help us remember your preferences and understand how you interact with our site.

We use the following types of cookies:

  • Essential Cookies: Necessary for basic website functionality and security
  • Analytics Cookies: Help us understand site usage patterns and improve performance
  • Preference Cookies: Remember your settings and customization choices

You can manage cookie preferences through your browser settings or by using our cookie management tool. For more details about our cookie practices, please see our Cookie Policy.

8. Your Rights

Under the Malaysian Personal Data Protection Act and applicable data protection laws, you have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data in certain circumstances
  • Right to Data Portability: Receive your data in a structured, commonly used format
  • Right to Object: Object to processing of your data for specific purposes
  • Right to Withdraw Consent: Withdraw previously given consent at any time
  • Right to Complain: Lodge a complaint with the relevant data protection authority

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. Please note that some requests may require identity verification to protect your privacy.

9. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies only to information collected by Neurova.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected information from someone under 18, we will take steps to delete that information promptly. If you believe we have collected data from a minor, please contact us at [email protected].

11. International Data Transfers

While we primarily operate within Malaysia, some of our service providers may be located in other jurisdictions. When personal data is transferred internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to protect your data in accordance with Malaysian data protection standards.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by email (if you have provided an email address) or by posting a prominent notice on our website. The "Last Updated" date at the top of this policy indicates when it was most recently revised. We encourage you to review this policy periodically to stay informed about how we protect your data.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Neurova

15 Jalan Tun Razak

50400 Kuala Lumpur

Malaysia

Email: [email protected]

Phone: +60 3-8491 2756