Privacy Policy

01 Who We Are

Nova Renewables Sdn Bhd (“Nova Renewables”, “we”, “us”, or “our”) is a company incorporated in Malaysia, operating as an authorised representative of Enwise green power plant technology in Malaysia.

Our registered address is: No. 16-8, Infinity Tower, Jalan SS 6/3, SS 6, 47301 Petaling Jaya, Selangor, Malaysia.

We are the data controller responsible for your personal data collected through this website and through our business activities.

02 Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity data — your full name and job title
• Contact data — email address, phone number, and company name
• Business data — industry sector, details of your organic waste stream, and project enquiry information
• Technical data — IP address, browser type and version, time zone, browser plug-in types, operating system, and other technology identifiers on devices you use to access this website
• Usage data — information about how you use our website
• Communications data — your preferences in receiving marketing from us and your communication preferences

03 How We Collect Your Data

We collect personal data through the following means:

• Direct interactions — when you submit our contact form, send us an email, or communicate with us by telephone
• Automated technologies — as you interact with our website, we may automatically collect technical data about your equipment, browsing actions, and patterns via cookies and similar technologies
• Third parties — we may receive data from analytics providers such as Google Analytics, or from publicly available sources

04 Why We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries and provide information about our services
• To assess the suitability of our technology for your facility or project
• To send you relevant updates, project proposals, and technical information where you have given consent
• To manage our relationship with you and maintain records of our communications
• To improve our website and understand how visitors use it
• To comply with our legal and regulatory obligations

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason compatible with the original purpose.

05 Legal Basis for Processing

Under the Malaysia Personal Data Protection Act 2010 (PDPA), we process your personal data on the following grounds:

• Consent — where you have given clear consent for us to process your data for a specific purpose, such as receiving marketing communications
• Contractual necessity — where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
• Legitimate interests — where processing is necessary for our legitimate business interests, provided these are not overridden by your rights and interests
• Legal obligation — where we are required to process your data to comply with applicable law

06 Disclosure of Your Data

We may share your personal data with the following parties:

• Enwise — our technology principal, where necessary to evaluate or progress a project enquiry
• Service providers — third-party vendors who provide IT, email delivery, analytics, and other services on our behalf, who are bound by confidentiality obligations
• Professional advisers — lawyers, accountants, and consultants where necessary in the ordinary course of business
• Regulatory authorities — where required by law, court order, or regulatory requirement

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

07 Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

As a general guideline:

• Enquiry and contact form data is retained for up to 3 years from the date of last contact
• Business relationship data is retained for up to 7 years following the end of the relationship, in line with standard commercial record-keeping requirements
• Website analytics data is retained in accordance with the applicable service provider’s retention policy

After the applicable retention period, your data will be securely deleted or anonymised.

08 Your Rights

Under the PDPA and applicable Malaysian law, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request correction of inaccurate or incomplete personal data
• Right to withdraw consent — to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal
• Right to limit processing — to request that we stop using your data for certain purposes, including direct marketing

To exercise any of these rights, please contact us using the details in Section 13. We will respond to all requests within 21 days in accordance with the PDPA.

09 Cookies

Our website may use cookies and similar tracking technologies to improve your browsing experience and to understand how visitors use our site.

Cookies we may use include:

• Strictly necessary cookies — required for the website to function and cannot be disabled
• Analytics cookies — help us understand how visitors interact with our website (e.g. Google Analytics). These are only set with your consent

You can set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

10 Security

We have put in place appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. Access to your personal data is restricted to those who have a legitimate business need to know it.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

11 Third-Party Links

This website may include links to third-party websites, plug-ins, and applications (including the Enwise website at enwise.io). Clicking on those links or enabling those connections may allow third parties to collect or share data about you.

We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to read the privacy policy of every website you visit.

12 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will revise the “Last Updated” date at the top of this page.

We encourage you to review this policy periodically. Where changes are material, we will make reasonable efforts to notify you directly.

13 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a concern about how we handle your personal data, please contact us: