Last updated: 25 August 2026 · Issued in English, with a Bahasa Malaysia notice at the end, as required by the Personal Data Protection Act 2010 (PDPA).
1 · The data user
Revalcrown, based in Kuala Lumpur, is the data user for anything collected through revalcrown.com. Reach us through the contact form for anything on this page.
2 · What arrives, and from where
You write to us. Booking a call or sending a brief passes us exactly what you typed: your name, an email address, a phone number if you offered one, your company, and whatever you told us about the project. It is used to answer you and to scope the work, and nothing else.
You subscribe. The newsletter holds one field, your email address. Every issue carries an unsubscribe link that works on the first click.
You accept measurement. Google Analytics 4 runs only if you press Accept on the banner. It records which pages were opened, roughly which region the visit came from, and what kind of device was used. Your IP address is shortened before storage, advertising signals stay switched off, and nothing goes to any ad platform. Decline, and no analytics cookie is written at all.
Our host keeps logs. Ordinary server records of address, browser and timestamp exist so the site can run and stay secure.
We ask for no sensitive categories of data, we build no profiles of visitors, and we have never sold or rented personal data to anyone.
3 · Why we are allowed to hold it
Two grounds cover everything here. The first is your consent, given when you submit a form or accept measurement. The second is necessity: if you have asked us to quote or deliver work, we need your details to do it. That matches the PDPA's General Principle. Consent can be pulled back whenever you like by writing to us, which stops future processing without unpicking what was already done lawfully.
4 · Who else touches it
A short list of suppliers, each acting on our instructions: Vercel hosts the site, a mail provider carries our email and newsletter, and a form service delivers what you submit. Beyond that, disclosure happens only where Malaysian law compels it. Nothing is shared for anyone else's marketing.
5 · Data leaving Malaysia
Several of those suppliers run infrastructure in Europe and the United States, so some data is stored outside Malaysia. When that happens we satisfy ourselves that the protection travelling with it is comparable to what the PDPA requires, and for visitors covered by the GDPR we rely on our suppliers' own transfer mechanisms, standard contractual clauses among them.
6 · How long we keep things
Enquiries stay while your matter is open and afterwards only as long as sensible business records require, then they go. Newsletter details last until you unsubscribe. We do not keep personal data past the purpose that justified collecting it.
7 · Keeping it safe
Traffic to this site is encrypted end to end, and access on our side is limited to the people who need it to do the work. No transmission over the internet is perfectly secure; what we can do is collect little, choose established providers, and keep the circle of access small. That is what we do.
8 · What you can ask us to do
The PDPA gives you the right to see the personal data we hold about you, to have it corrected, and to withdraw consent. If the GDPR applies to you, you can additionally ask for erasure, restriction, portability or object to processing, and you may complain to your national supervisory authority. Ask through the contact form. Reasonable requests are answered promptly and free of charge.
9 · Cookies and local storage
Left alone, this site stores three things in your browser: the language you chose, a session flag, and your answer to the cookie banner. Accepting measurement adds Google Analytics' own cookies. There are no advertising cookies and no cross-site tracking of any kind.
10 · Not for children
This is a business-to-business site and it is not aimed at children. We do not knowingly collect personal data from anyone under eighteen.
11 · When this page changes
Revisions appear here with a fresh date at the top. Anything materially different will be called out on the page rather than slipped in quietly.
Notis Privasi (Bahasa Malaysia)
Menurut Akta Perlindungan Data Peribadi 2010, Revalcrown ialah pengguna data bagi maklumat peribadi yang anda hantar melalui laman web ini — nama, alamat e-mel, nombor telefon dan butiran projek anda. Maklumat itu digunakan untuk membalas pertanyaan anda, menyediakan sebut harga atau kerja yang anda minta, dan menghantar surat berita jika anda melanggannya. Kami tidak pernah menjual data peribadi. Pembekal perkhidmatan kami — pengehosan, e-mel dan analitik — mungkin memproses data tersebut, termasuk di pelayan di luar Malaysia, dengan perlindungan yang setara. Anda berhak meminta akses kepada data anda, membetulkannya, dan menarik balik persetujuan pada bila-bila masa melalui borang hubungi kami.