Resale Royalty Right Visual Arts Malaysia (RRRVA Malaysia, we, us, or our) is committed to protecting the personal data of individuals who interact with our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
By submitting any form on this website, registering as a member, or otherwise providing us with your personal data, you consent to the processing of your personal data as described in this Policy.
2. Personal Data We Collect
We may collect the following categories of personal data:
- Identity data — full name, artist name, nationality
- Contact data — email address, phone number, mailing address
- Professional data — institution or company name, art medium, portfolio information
- Communication data — messages, feedback, and correspondence you send us
- Technical data — IP address, browser type, and usage data collected automatically when you visit our website
We do not collect sensitive personal data (as defined under PDPA) unless strictly required and with your explicit consent.
3. Purpose of Processing
Your personal data is collected and processed for the following purposes:
- To respond to your enquiries, feedback, and messages
- To register and manage your member account
- To administer and maintain our platform and services
- To send updates, newsletters, or notices related to our platform (only where you have consented)
- To comply with legal and regulatory obligations under Malaysian law
- To improve the user experience and platform functionality
We will not process your personal data for any purpose other than those stated above without your prior consent, except as permitted or required by law.
4. Disclosure of Personal Data
We do not sell, rent, or trade your personal data to third parties. We may disclose your personal data to:
- Service providers — third-party vendors who assist in operating our website (e.g. email delivery, cloud hosting), bound by confidentiality obligations
- Regulatory authorities — where required by Malaysian law, court order, or government authority
- Authorised personnel — RRRVA Malaysia staff who need access to fulfil the stated purposes
Any third-party service providers are required to handle your personal data in accordance with PDPA requirements.
5. Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. When personal data is no longer required, it will be securely deleted or anonymised.
6. Security of Personal Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
7. Your Rights Under PDPA
As a data subject under the PDPA, you have the right to:
- Access — request access to your personal data held by us
- Correction — request correction of inaccurate, incomplete, or outdated personal data
- Withdraw consent — withdraw your consent to the processing of your personal data at any time (subject to legal or contractual restrictions)
- Limit processing — request that we limit the processing of your personal data in certain circumstances
To exercise any of these rights, please contact us at the address below. We will respond to your request within 21 days as required under the PDPA.
8. Cookies
Our website may use session cookies solely to maintain your login state and language preference. We do not use tracking or advertising cookies. You may configure your browser to refuse cookies, although this may affect the functionality of certain features.
9. Links to Third-Party Sites
Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The updated policy will be posted on this page with a revised effective date. Your continued use of the platform after any changes constitutes your acceptance of the revised policy.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer at [email protected] or visit www.rrrvamalaysia.com.