Privacy policy

Responsible party

This policy applies to varelilo.com and to the consultation and contact forms. It is written with the Personal Data Protection Act 2010 (PDPA) in mind.

What we collect

When you send a form we collect what you give us:

• First name and surname
• Email address
• Phone number, if you provide it
• Age group and your message, if you provide them

Please do not send detailed medical records through the form.

Why we use it

We use the information to answer your request about Varelilo and to manage that conversation.

The basis is your consent, given when you tick the privacy box, and our need to respond to a request you started.

We do not sell your information. Service providers who host or send email may process it only to deliver that service.

How long we keep it

We keep the information for as long as we need to handle your request and for any period the law requires after that. When it is no longer needed, we delete it or remove details that identify you.

Your rights

You may ask for access to your personal information, ask us to correct or delete it, or object to how we use it. You may withdraw consent at any time by writing to [email protected] or by post to the Kuala Lumpur address.

You may also contact the Personal Data Protection Commissioner of Malaysia if you believe the processing does not comply with the PDPA.