Privacy Policy - EvoCardLink

Last updated: 2 November 2025
Applies to: evogadgets.com, evobrand.my, evocardlink.com, mycards.my (and related subdomains), our Shopee/Lazada/TikTok listings, WhatsApp communications, and any forms we host (including EvoLink information forms and dashboards).

Compliance: This Privacy Notice is issued in accordance with Malaysia’s Personal Data Protection Act 2010 (PDPA) and the Personal Data Protection Principles. It explains what we collect, how we use and disclose it (including publication on a public EvoLink page), your rights, and how to contact us.

1) Who we are (Data User / Controller)

EvoGadgets Marketing (Registration No. PG0321198-M)
Address: Unit 27&28, Level 5, Pan Palace Plaza, Taman Lip Sin, 11900 Bayan Lepas, Pulau Pinang
Email: sales@evogadgets.com

2) Scope

This Notice covers personal data processed by us via our websites, marketplaces, WhatsApp, and EvoLink systems (forms and dashboards).

Important for EvoLink profiles: Your EvoLink page is public on the web. Only the fields you choose to provide will be shown. If you don’t want something to appear publicly, leave the field blank. You can request edits or removal anytime via the contact above.

3) What we collect

  • Identity & contact: name, mobile number, WhatsApp, email, job title, company name, office number.
  • EvoLink profile content (optional/public): website; Company Profile; My Profile; Our Products/Services; portfolio; testimonials; promotions; events; booking/enquiry/get-quote links; WhatsApp/Telegram group links; Google Maps; social links; Open Graph image/title/description.
  • Commerce data: order, delivery and invoice details (we do not store full payment card numbers).
  • Device/usage data: IP address, device/browser info, timestamps, referral URLs, cookies/analytics events.
  • Support content: messages, attachments and notes from WhatsApp/email/calls.

We do not intentionally collect sensitive personal data; please avoid submitting it.

4) How we collect your data

  • Directly from you via our websites/forms (including EvoLink), WhatsApp, email or in person.
  • Marketplaces (Shopee/Lazada/TikTok) when you purchase—those platforms are separate controllers.
  • Automatically via cookies/analytics when you browse our sites.
  • From third parties you ask us to liaise with (e.g., your designer/IT for profile setup).

5) Why we process your data (Purposes)

  • Order fulfilment & customer service (process/ship orders, invoicing, support).
  • EvoLink creation and publication (build and host your public EvoLink page; generate QR/NFC, vCard, analytics).
  • Account & membership (user accounts, profile edits, renewals where applicable).
  • Operations, security & compliance (system logs, fraud prevention, PDPA compliance, tax/legal obligations).
  • Marketing with opt-out (updates, offers, new templates/features). You may instruct us at any time to cease processing for direct marketing.

6) Is the data mandatory?

We only ask for what we need. Fields marked (Required) are mandatory to provide the service; others are optional.

For Purchases / Order Fulfilment (Required):

  • Name (to identify the recipient)
  • Mobile number (for delivery updates / courier contact)
  • Shipping address (to deliver your order)

For EvoLink Account Creation (Required):

  • Email address (to send the new-user link & temporary passcode, and for account recovery)

Conditional (when applicable):

  • Billing/Invoice details for tax invoices.
  • Card personalization data (e.g., name/job title to engrave/print) for customized cards.
  • Alternative contact if required by the courier/service for certain locations.

Optional (Public EvoLink Profile):
All profile fields you choose to publish are optional and shown only if you provide them (website, Profiles, Products/Services, Portfolio, Testimonials, Promotions, Events, booking/enquiry/get-quote links, WhatsApp/Telegram links, Google Maps, social links, Open Graph details).

Your choice: If you don’t want a detail to appear publicly, leave the field blank.

If you do not provide required data:
We may be unable to process or ship your order, create your EvoLink account, or deliver the requested service.

Marketplace checkouts (Shopee/Lazada/TikTok):
Those platforms set their own required fields. We receive your order details to fulfil your purchase; if anything mandatory is missing for delivery or account setup, we’ll contact you.

7) Publication & sharing

  • Public disclosure (EvoLink): Anything you submit in EvoLink’s public fields will be public. You can later edit/hide fields or request removal.
  • Vendors/partners (under contract): web hosting/CDN, couriers, payment processors, email/WhatsApp providers, analytics, support tools, marketplace integrations—only as needed and with appropriate safeguards.
  • Legal/compliance: regulators, law enforcement, auditors where required.

8) International (cross-border) transfers

We may use infrastructure or service providers outside Malaysia (e.g., hosting/CDN, analytics, email). Where data is transferred abroad, we do so in accordance with the PDPA’s cross-border requirements (e.g., consent/appropriate protection or other permitted conditions).

9) How long we keep your data (Retention)

We retain personal data only as long as necessary for the purposes above, then delete or anonymise it, consistent with the PDPA Retention Principle.

Typical periods

  • Transaction records (orders, invoices, delivery): up to 7 years (tax/accounting).
  • Operational logs & basic analytics: 12–24 months (operations/security).
  • EvoLink account & profile (lifetime hosting): active while your profile remains active (see below). If inactive for 12 months (no profile views and no edits/updates), we apply the archival flow below.

Active vs Inactive (EvoLink lifetime hosting)

  • Active if either (a) at least one view in the last 12 months, or (b) you edit/update your EvoLink profile in the last 12 months.
  • Inactive if no views and no edits for 12 consecutive months → we mark it inactive, notify you, and allow a 30-day grace period to reactivate (by viewing or editing).
  • No response: we may unpublish (archive) the page to reduce unintended disclosure, keeping a secure backup for up to 12 months (for restoration on request). After that, we may delete the archived copy unless the law requires longer retention.

10) Security

We implement organisational, physical and technical controls (role-based access, strong passwords, login protections, encryption in transit, backups, monitoring) and review controls periodically.

11) Your rights

Under the PDPA, you can:

  • Access your personal data we hold and request a copy.
  • Correct inaccurate or outdated data.
  • Withdraw consent (where processing is based on consent).
  • Object/opt-out of direct marketing (we must cease upon your notice).

To exercise your rights, email sales@evogadgets.com. We will respond within a reasonable time and may request verification.

12) Data breach notification

If a personal data breach occurs, we will assess and notify the Commissioner (and affected individuals where required) as soon as practicable, in line with current guidance.

13) Children’s data

Our services target businesses and working professionals. If you believe a child’s data was provided without appropriate consent, contact us and we will act promptly.

14) Cookies & analytics

We use cookies/SDKs for essential functions (session/login, cart), performance/analytics, and—if you consent—marketing. You can manage cookies in your browser; some features may not work without them. If we publish a separate Cookie Notice, it will list providers, purposes and retention.

15) Links and third-party platforms

Marketplaces (Shopee/Lazada/TikTok), payment gateways, maps, chat and social platforms we embed are operated by third parties with their own privacy notices. Please review their policies to understand how they process your data.

16) Language versions

Malaysia’s PDPA requires privacy notices in Bahasa Malaysia and English. If there is any inconsistency, the English version shall prevail.

17) Changes to this Notice

We may update this Notice to reflect operational, legal or regulatory changes. The “Last updated” date will change, and significant changes will be highlighted on this page.