Privacy Notice

1. Who we are

Cortavia operates the website at cortavia.sbs and provides geospatial data labelling, map feature extraction and spatial analytics advisory services from its office at Level 15, Menara Prestige, 1 Jalan Pinang, 50450 Kuala Lumpur, Malaysia. References to "Cortavia", "we", "us" or "our" in this notice refer to that entity.

For questions about this notice, contact us at [email protected] or on +60 3-2166 9482.

2. What data we collect

We may collect the following categories of personal data:

• Contact form submissions: first name, last name (optional), email address, phone number (optional) and any project description you include in the message field.
• Usage data: pages visited, time on site, referring URL, browser type and approximate geographic area, collected through analytics tools.
• Cookie data: identifiers stored on your device through cookies and similar tracking technologies. See section 5 for details.

We do not request or store sensitive personal data such as identity card numbers, financial account details or health information through this website.

3. How we use the data

• To respond to your enquiry and, where applicable, prepare and send a project scope or quotation.
• To fulfil the terms of any engagement you enter into with Cortavia.
• To improve the website by understanding which content is used and how visitors navigate it.
• To serve relevant advertising to people who have visited the site, where you have consented to advertising cookies.

4. Legal basis for processing

Cortavia processes personal data in accordance with applicable Malaysian personal data protection law. Depending on how you interact with us, the basis for processing is one of the following:

• Your consent, given when you tick the privacy agreement checkbox on the contact form or when you accept cookie categories through the cookie preference panel.
• Legitimate interest, where we have a genuine business reason to process data that is not outweighed by your interests — for example, retaining the record of an email enquiry so we can follow it up.
• Contractual necessity, where processing is required to carry out work you have asked us to do.

You may withdraw consent at any time by contacting us at [email protected]. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Cookies and tracking

We use cookies in three categories: essential (required for the site to function), performance/analytics (to understand site usage) and advertising (to reach relevant audiences off-site). You can manage your preferences through the cookie panel on the homepage or on our Cookie Rules page.

6. Third-party processors

We share data with a limited set of third-party processors who support site operations:

• Web analytics provider — receives anonymised or pseudonymised usage data to generate site-traffic reports.
• Advertising pixel providers — receive browsing data if you have consented to advertising cookies, for the purpose of serving relevant advertisements.
• Hosting and infrastructure providers — store and serve the website and its associated data.

We do not sell personal data. We do not share personal data with third parties for their own marketing purposes without your consent.

7. Data retention

Enquiry records (form submissions and email correspondence) are retained for up to two years from the date of the enquiry or the end of any resulting project engagement, whichever is later. Analytics data is retained in accordance with the default retention periods of our analytics provider. Cookie consent records are retained for the period required to demonstrate compliance.

When retention periods expire, data is deleted or anonymised.

8. Your rights

Depending on the circumstances, you may have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, subject to any legal or contractual retention obligations.
• Withdraw consent where processing is based on consent.
• Object to processing carried out under legitimate interest.

To exercise any of these rights, write to us at [email protected]. We will respond within a reasonable period and, where required, within the timeframe specified by applicable law.

9. Data security

We maintain technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These include access controls, encrypted data transmission via HTTPS, and periodic review of our security practices. No transmission over the internet is entirely without risk; if you have concerns about a specific data transfer, contact us before sending.

10. Children

This website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through this site, contact us and we will delete it promptly.

11. Changes to this notice

We may update this privacy notice from time to time. The "last updated" date at the top of the page reflects when the most recent revision was made. If we make changes that significantly affect how we process your data, we will take reasonable steps to bring this to your attention.

12. Contact

Cortavia
Level 15, Menara Prestige
1 Jalan Pinang, 50450 Kuala Lumpur
Malaysia

Email: [email protected]
Phone: +60 3-2166 9482