BBrewwellEvents
Legal

Privacy Policy

Last updated: 12 May 2026

1. Who we are

This website, brewwell.pro, is operated by Brewwell Events Sdn. Bhd. (Company No. 202101033842 (1429016-P)), Suite 27-3, Menara Lumina, 12 Jalan Ampang Hilir, 55000 Kuala Lumpur, Malaysia ("Brewwell", "we", "us"). We process personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).

2. Data we collect

When you send an enquiry through our contact form we receive the details you choose to share: your name, email address, mobile number, the type of event you are planning and the content of your message. Separately, our hosting provider records standard technical logs — IP address, browser type, pages visited and timestamps — which we use in aggregate to keep the site secure and functional.

3. Why we use it

  • To respond to your enquiry and prepare proposals you have requested.
  • To administer contracts if you become a client.
  • To maintain the security and performance of this website.
  • To meet legal and accounting obligations under Malaysian law.

We do not sell personal data, we do not send marketing emails without your consent, and we do not use automated decision-making.

4. Sharing

Data is shared only with service providers who help us run the business — such as web hosting and email providers — under contractual confidentiality obligations, or with authorities where the law requires it. If your event involves third-party vendors (venues, caterers, entertainers), we share only the details necessary to deliver the services you have engaged us for.

5. Retention

Enquiry records are kept for up to twenty-four months from our last exchange, after which they are deleted. Client and financial records are retained for seven years as required by Malaysian tax legislation.

6. Your rights

Under the PDPA you may request access to the personal data we hold about you, ask for corrections, or withdraw consent to further processing. Write to [email protected] or post your request to the address above. We respond within twenty-one days.

7. Security

Access to personal data is limited to team members who need it, protected by unique credentials and encrypted connections. No online transmission is perfectly secure, but we take reasonable and proportionate steps to protect the information you give us.

8. Changes

If we change this policy we will post the revised version on this page with a new "last updated" date. Continued use of the site after changes indicates acceptance of the updated policy.