Privacy Policy

We collect information you provide directly to us, including your name, work email address, company name, and the content of messages you submit through our contact forms. When you visit our website, we may also collect certain technical data automatically — such as your IP address, browser type, operating system, referring URLs, and pages visited — through cookies and similar tracking technologies. We do not collect sensitive personal data (such as health, financial, or biometric information) in the ordinary course of our business operations.

We use the personal data we collect to respond to your enquiries, provide the IT services and consulting solutions you have requested, and maintain our business relationship with you. We may also use your contact information to send you relevant updates about our services, industry insights, or event invitations — but only where you have given your consent or we have a legitimate business interest. We do not sell your personal data to third parties, and we do not use your data for automated decision-making that produces legal or similarly significant effects.

Our website uses cookies and similar technologies to improve your browsing experience, analyse site traffic, and support our marketing activities. We categorise cookies as: strictly necessary (required for the site to function), analytical (Google Analytics 4, Microsoft Clarity — used to understand how visitors engage with our content), and marketing cookies. Analytical and marketing cookies are only activated after you have provided your explicit consent via our cookie consent banner. You may withdraw your consent at any time by adjusting your cookie preferences or clearing your browser cookies.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Contact form enquiries and related correspondence are retained for up to 24 months from the date of last contact, after which they are securely deleted. Website analytics data is retained in accordance with Google Analytics and Microsoft Clarity default retention settings (up to 14 months for user-level data). Where a contractual relationship exists between you and VFACE, relevant data is retained for the duration of the contract plus 7 years to comply with UK and EU legal obligations.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with applicable data protection legislation, you have the following rights regarding your personal data: the right to access a copy of the data we hold about you; the right to rectification of inaccurate data; the right to erasure where we have no legal basis for continuing to hold your data; the right to restrict or object to our processing of your data; the right to data portability; and the right to lodge a complaint with your national data protection authority. To exercise any of these rights, please contact our Data Protection Officer using the contact details below. We will respond within 30 days.

VFACE operates offices in India, Malaysia, Singapore, the United Kingdom, and the United Arab Emirates. Your personal data may be transferred to and processed in any of these countries in connection with the services we provide. When transferring data outside the EEA or UK, we ensure appropriate safeguards are in place — including Standard Contractual Clauses approved by the European Commission or the UK Information Commissioner's Office — to protect your data in accordance with applicable privacy law. By submitting your personal data through our website or contact forms, you acknowledge that your data may be processed in these jurisdictions.