Policies & trust

Privacy Policy

Your data deserves the same care as your website. This policy explains how we handle personal data when you visit mavericks.my, contact us or work with us.

Last updated: 13 October 2026

Who handles your data

Maverick Creative Resources (registration no. AS0523221-H) handles personal data for this website and our client communications. Contact hello@mavericks.my for privacy questions or requests.

What we collect and where it comes from

We collect the details you provide through our contact form or email: your name, email address, business or brand, chosen service, domain/hosting needs, timeline and project message. For a project, we may also collect SSM registration records, copies of identity cards (IC), other identity or business documents required by your selected payment provider, photographs of your business premises, and project, billing and support records. Information may come from you, an authorised company representative or systems you authorise us to access. Hosting and security systems may record IP addresses, browser/request information and access logs.

Why we use it

We use these details to respond to enquiries, prepare quotes, design and develop websites or internal systems, provide support, maintain business records and protect against abuse. SSM and identity documents are used where needed for business/identity verification and payment-provider onboarding or integration. Premises photographs are used for agreed website content or business verification; we do not publish them outside the agreed use. We do not sell your personal data or use contact-form enquiries for unrelated marketing.

Access to internal systems and confidential data

During website or system development, integration, testing or support, we may need authorised access to company systems, databases, source files, account permissions and confidential or sensitive business information. This may include personal data about customers, employees or other people. Access is limited to what is necessary for the agreed work and to the team members who need it. We do not use this access for unrelated purposes. Clients should authorise the access and identify relevant restrictions before it is provided. Where practical, we use test or masked data and limited-access accounts, and arrange to remove or revoke project access when it is no longer needed.

Required details and your choices

Name, email address, service and project message are required to submit an enquiry; other initial enquiry details are optional. SSM records, IC copies and other supporting documents are requested only where needed for the agreed work or the selected payment provider’s requirements. We explain the purpose when requesting them. Without documents required by a payment provider, its account verification or payment integration may not proceed. Without the form’s required details, we cannot process the enquiry or reply. You can instead email us directly. You may ask us to limit use of your information or withdraw consent by email; this may affect our ability to respond or provide the service you requested.

Where enquiries go and who may receive data

Submitted enquiries are emailed to hello@mavericks.my. Access is limited to people handling your enquiry or project. Our hosting and email provider, Shinjiru, and service providers needed for an agreed project may process relevant information. Selected payment gateways and financial/payment providers may receive SSM records, IC copies and other required documents to assess and verify your application, enable transactions or meet their own verification requirements. We share these documents only for the provider setup you authorise; the provider’s own privacy notice also applies to its processing. We may disclose information where required by law. We share only what is needed for those purposes. If a selected provider processes data outside Malaysia, any transfer must be handled with safeguards required by applicable law.

Cookies and browser storage

We use a temporary session cookie to protect contact-form submissions and browser local storage to remember your EN/BM language choice. This website currently does not use advertising cookies or third-party analytics trackers. You can clear cookies and site data through your browser; doing so may reset your language choice or require the contact form to reload. Analytics setup offered in client packages does not mean a tracker is installed on this website.

Security and retention

We use HTTPS, restricted access, input validation and anti-abuse controls. The form uses hashed IP identifiers and timestamps to limit repeated submissions; enquiry content is held in our email system rather than a public website database. Identity documents and internal company data are treated as confidential. We arrange a suitable project transfer channel for these materials; the public contact form is for initial enquiries and has no document-upload facility. We avoid requesting unnecessary copies and limit retention of project access details and supporting documents to what is needed. We keep personal data only for as long as needed for the purposes above, applicable record-keeping requirements or resolving a dispute, and then delete it or anonymise it. No system can guarantee absolute security.

Access, correction and other requests

Email hello@mavericks.my to request access to or correction of your personal data, ask about its use, withdraw consent or raise a privacy concern. You can also request deletion of information we no longer need, subject to applicable legal and record-keeping requirements. We may ask for proportionate verification before releasing or changing records. Information about Malaysian personal-data rights is available from the Personal Data Protection Department.

Changes to this policy

We may update this policy when our services or data practices change. The updated version and date will appear on this page.