Personal Data Protection Notice

We collect the information you give us: your name, business contact details (email address and telephone number), the company you represent and your role there, and the details of any enquiry, quotation or order you send us.

This website sets no advertising cookies and stores no personal data beyond what you choose to submit through our enquiry form.

We use your personal data to respond to your enquiries and prepare quotations; to fulfil, deliver and support your orders; to manage our relationship with you and keep the records the law requires; and to tell you about Goldvest’s own products and services — including seasonal and festive gifting, new ranges and related offers — where you are a client of ours or have enquired with us.

We do not use your data for any purpose incompatible with these, and we do not sell it.

You can ask us to stop sending you marketing at any time. Reply with the word UNSUBSCRIBE to any marketing email, or contact us using the details below, and we will stop within five (5) working days.

Choosing not to receive marketing does not affect service messages about an order you have placed.

We share your personal data only with the service providers who help us operate — for example our email, IT, hosting and delivery partners — and only under obligations of confidentiality and security. Some of these providers operate outside Malaysia, so your data may be processed overseas with appropriate protection in place.

We do not disclose your personal data to third parties for their own marketing.

We keep your personal data only as long as it is needed. Contacts with no dealings with us for twenty-four (24) months are removed from our marketing lists. Records tied to actual transactions — quotations, orders, invoices and delivery — are kept for seven (7) years to meet tax and legal requirements, then deleted. If you opt out of marketing, we keep only the minimum needed to honour that choice.

We take reasonable steps to protect your personal data against loss, misuse and unauthorised access. If a data breach occurs that is likely to cause you significant harm, we will act on it and give the notifications the law requires.

You may ask to access the personal data we hold about you and to correct it if it is inaccurate; withdraw a consent you previously gave; and require us to stop using your data for direct marketing. To make any of these requests, contact us using the details below. We may need to verify your identity before we act.