Privacy Notice

Avenzor (company registration number to be updated) is the data user responsible for personal data processed through avenzor.io and portal.avenzor.io. Our registered office is at A12-2, NorthPoint Offices Mid Valley, Medan Syed Putra Utara, 59200 Kuala Lumpur, Malaysia.

Questions about this notice or your personal data can be sent to enquiry@avenzor.io.

Depending on how you interact with us, we may collect:

• Contact details — name, email address, company name, and role, for example when you submit an enquiry or careers form.
• Account data — login credentials and profile information for the Avenzor portal.
• Business and financial documents — company profiles, audited accounts, management accounts, and bank statements that you choose to upload. These may contain personal data of directors, shareholders, or employees.
• Usage data — device, browser, and interaction information collected through server logs.

You are responsible for ensuring you have the authority and any necessary consents to share documents containing other people’s personal data with us.

We process personal data to:

• Provide financial health checks, lending-readiness reports, and monthly CFO actions.
• Respond to contact and careers enquiries.
• Operate, secure, and improve our website and portal.
• Meet legal, regulatory, and audit obligations in Malaysia.

We rely on your consent and on the necessity of processing for the service you request. We do not sell personal data, and we do not make automated lending decisions about you.

We disclose personal data only to:

• Service providers who host our infrastructure, deliver email, or support document processing, under contractual confidentiality obligations.
• Advisors, financial institutions, or other third parties — only when you explicitly instruct us to share a report or document with them.
• Regulators, law enforcement, or courts where disclosure is required by Malaysian law.

Some of our service providers (for example cloud hosting and email delivery) operate infrastructure outside Malaysia. Where personal data is transferred outside Malaysia, we take reasonable steps to ensure it receives a standard of protection comparable to the PDPA, including contractual safeguards with those providers.

We retain personal data only for as long as necessary to provide the service, comply with legal obligations, or resolve disputes. Uploaded documents and generated reports are deleted or anonymised when no longer required, or earlier on your request.

We apply practical security measures — encryption in transit, access controls, and least-privilege administration — to protect personal data against loss, misuse, and unauthorised access.

Subject to the PDPA, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate, incomplete, or outdated personal data.
• Withdraw consent to processing, subject to legal and contractual restrictions.
• Limit processing of your personal data, including for direct marketing.

To exercise any of these rights, email enquiry@avenzor.io. We may need to verify your identity before acting on a request. If you are unsatisfied with our response, you may lodge a complaint with the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi, JPDP) Malaysia.

Our marketing site uses only cookies that are strictly necessary for it to function. The Avenzor portal uses session cookies to keep you signed in. We do not use third-party advertising cookies.

We may update this notice as our service or the law evolves. The “Last updated” date above reflects the latest revision; material changes will be highlighted on this page. Related policies: Data & consent and Terms of service.