We treat your data like our own.

Scope

This policy covers the Verdan Forge website (verdanforge.com), contact form, and any client data processed during engagements. It is written to align with Malaysia’s Personal Data Protection Act 2010 (PDPA 2010).

What we collect

We only collect what is needed to reply to you or deliver an engagement:

• Contact form: name, email, company, message — used only to respond.
• Newsletter capture: email only — used only to send insights.
• Engagement data: operational data provided by the client stays inside the agreed boundary.

How we use it

• We do not sell, rent, or share personal data with third parties.
• We do not use client data to train external models without explicit written consent.
• Access is role-based; actions are logged; retention is scoped to the engagement.

Your rights

• Request access, correction, or deletion of personal data.
• Withdraw consent at any time.
• Contact us at contact@verdanforge.com for any privacy request.

Security

We apply defence-in-depth: role-based access, audit trails, boundary controls, and encryption where appropriate. No system is 100% secure, but we design for containment and rapid response.

Last updated: 2026-08-31