Privacy Policy

Verve Events & Experiences Sdn. Bhd. ("Verve Events", "we", "our") operates the website gardenkit.pro. This policy explains what personal data we collect, why we collect it, and the choices you have. We process personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).

1. Data we collect

When you use our enquiry form we collect the details you choose to share: your name, email address, phone number if provided, the type of event you are planning and any notes you include. Our hosting provider also records standard technical logs such as IP address, browser type and pages visited, which are used for security and troubleshooting.

2. How we use your data

• To respond to your enquiry and prepare proposals you have requested.
• To manage projects you have engaged us for, including guest lists you supply.
• To keep records required by Malaysian tax and company law.
• To maintain the security and performance of this website.

We do not sell personal data, and we do not send marketing messages unless you have explicitly asked to receive them.

3. When we share data

Event production sometimes requires sharing limited details with vendors acting on our instructions, for example a venue that needs a guest list or a caterer that needs dietary notes. We share only what the vendor needs to deliver their part of your event, under confidentiality obligations. We may also disclose data where required by law or a competent authority.

4. Retention

Enquiry records are kept for up to twenty-four months so we can pick up conversations that resume later. Project and financial records are retained for seven years as required by law, after which they are securely deleted.

5. Your rights

Under the PDPA you may request access to the personal data we hold about you, ask us to correct it, or withdraw consent to further processing. Write to [email protected] or to our registered office at Level 20, Menara Hap Seng 2, Plaza Hap Seng, No. 1 Jalan P. Ramlee, 50250 Kuala Lumpur, Malaysia. We respond to verified requests within twenty-one days.

6. Security

Access to personal data is limited to team members who need it for their work. Our systems use encrypted connections, and vendor agreements include data protection clauses. No online service can promise absolute security, but we treat guest data with the same discretion we bring to the events themselves.

7. Changes to this policy

If we change this policy we will publish the new version on this page with a revised date. Material changes affecting active clients will be communicated directly.