Privacy notice. Plain English, PDPA-aligned.

This site is operated by NUVIA VENTURES (SSM 202603080829), a Malaysian sole proprietorship registered at No 58, Jalan Seri Putra 2/3C, Bandar Seri Putra, 43000 Kajang, Selangor, trading as BroData. All references to we, us, our, or BroData in this notice refer to NUVIA VENTURES. NUVIA VENTURES is the data controller for any personal data collected on this site.

If you need to reach us about anything in this notice, email hello@brodata.my or message us on WhatsApp.

We only collect the information you actively send us through the intake form, WhatsApp, or email. We do not buy lists, scrape contacts, or run third-party trackers on this site.

• ›Intake form submissions: company name, TIN, industry, revenue tier, contact details (name, role, email, WhatsApp), and the technical and scope information you provide about your system.
• ›WhatsApp and email conversations: whatever you choose to send us, retained as part of normal business correspondence.
• ›Basic server logs: IP address, browser type, pages visited. Retained for 30 days and used only for security and performance debugging.

Form submissions exist so we can return a fixed-price quote. WhatsApp and email exist so we can have a conversation with you. Server logs exist so we can debug if the site goes down. That is the full list of purposes.

We do not sell your data, share it with marketing networks, or use it to train models.

Intake submissions are stored in Supabase with the project region pinned to Singapore (ap-southeast-1). Email notifications are delivered through Resend (United States). The website is hosted on Vercel (United States). WhatsApp conversations live in WhatsApp Business (Meta global infrastructure).

We rely on these vendors' published Data Processing Agreements and Standard Contractual Clauses for cross-border safeguards under Malaysia's PDPA Cross-Border Personal Data Transfer Guidelines 2025. Transfer Impact Assessments are available on request.

Each of those vendors has their own privacy posture. We pick vendors whose data-handling we consider reasonable for the kind of information involved.

Inside NUVIA VENTURES, only the founder (Taufik Anuar) has access to intake submissions and conversation histories. We do not have an account-manager layer or a sales team.

Outside the company, the vendors above process data on our behalf under their terms of service. We do not authorise any third party to use your data for anything beyond delivering the service we use them for.

• ›Intake submissions: retained for 24 months from submission date. We use older submissions to recognise repeat enquiries and to calibrate our quoting.
• ›Closed engagements: contractual records retained for 7 years per Malaysian tax-record requirements.
• ›Server logs: 30 days.
• ›WhatsApp and email: indefinitely, unless you ask us to delete a specific thread.

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to request access to the personal data we hold about you, to request correction of inaccurate data, and to withdraw consent for further processing.

To exercise any of these rights, email hello@brodata.my. We respond within 14 calendar days and free of charge for the first request in any 12-month period.

We currently use no advertising cookies, no third-party analytics scripts, and no cross-site trackers. If this changes we will update this notice and surface a cookie consent banner before any tracking begins.

The site uses essential cookies only, set by our hosting provider for session integrity. These cannot be disabled without breaking the site, but they collect no personal information.

We update this notice when we change a vendor, change a retention period, or add a new data category. The Last updated date at the top of this page changes when any update is made.

Material changes are notified to active clients by email. For prospects with active intake submissions, material changes are communicated via the same channel you used to reach us.