Privacy Policy

Effective Date: 2 January 2026
Last Updated: 12 October 2026
Legal Entity: EvoGadgets Marketing (PG0321198-M)
Brands / Services Covered: EvoCardLink, EvoLink, EvoReview, MyCards.my, Communication Core, and related services operated by EvoGadgets Marketing
Websites Covered: evocardlink.com, evogadgets.com, evobrand.my, mycards.my, and related service pages or subdomains operated by us
Contact Email: sales@evogadgets.com
Contact Address: Level 5, Unit 27 & 28, Pan Palace Plaza, Taman Lip Sin, 11900 Bayan Lepas, Pulau Pinang, Malaysia.

1. Introduction

EvoGadgets Marketing (PG0321198-M) (“EvoGadgets Marketing”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy / Personal Data Protection Notice explains how we collect, use, disclose, store, and protect personal data in connection with:

  • evocardlink.com, which supports EvoCardLink products, NFC Digital Business Card solutions, EvoLink digital profile services, and related account or support features;
  • evogadgets.com, which serves as our website store for online purchase of EvoCardLink solutions and other related products or services;
  • evobrand.my, which supports website design services, branding-related enquiries, digital project discussions, and custom corporate site services, including custom corporate sites related to EvoCardLink;
  • mycards.my, which supports NFC Digital Business Card services, digital profile solutions, and related professional or corporate digital networking services operated by us; and
  • Communication Core, our WhatsApp Business Platform integration and customer communication service, including authorised human replies, AI-assisted suggestions and related support or sales workflows where enabled.

This notice is intended to help you understand how your personal data is handled when you visit our websites, submit an enquiry, purchase products or services, request a quotation, engage us for website or digital services, use an EvoLink profile, communicate through WhatsApp, use Communication Core, or otherwise interact with us.

2. Who This Notice Applies To

This notice may apply to:

  • website visitors;
  • customers and potential customers;
  • online store purchasers and account holders;
  • EvoCardLink / EvoLink account holders, profile owners, and corporate users;
  • business owners, marketing contacts, and client representatives who enquire about website design, branding, or digital services;
  • people whose details are submitted to us as part of an order, quotation request, account setup, project brief, profile, or support request;
  • recipients, viewers, or visitors who access a public EvoLink page through a link, QR code, or NFC tap;
  • people who contact us by WhatsApp, email, form, or social platform;
  • business customers and their authorised managers or staff using Communication Core;
  • individuals who communicate with a business customer through a Communication Core-connected WhatsApp number, where our service processes those communications; and
  • suppliers, partners, and business contacts.

3. Types of Personal Data We May Collect

Depending on how you interact with us, we may collect and process different categories of personal data. Not every category applies to every person. For example, ordinary website visitors who only browse our websites may only provide or generate limited technical and usage information, while customers, account holders, or people who submit forms, orders, quotations, project details, or profile details may provide additional personal data.

A. Identity and Contact Information

Where you voluntarily provide it to us, such as through an enquiry form, WhatsApp, email, order, account registration, quotation request, or profile setup, we may collect:

  • full name;
  • company or business name;
  • job title or role;
  • phone number;
  • email address;
  • business address or location;
  • social media links; and
  • profile photo, logo, or branding assets.

B. Order, Billing, and Transaction Information

We may collect or process information relating to:

  • purchase details;
  • order history;
  • billing or invoicing details;
  • payment-related information handled through our payment channels or service providers; and
  • records relating to subscription, renewal, fulfilment, delivery, or service activation.

C. Account, Profile, and Service Content Information

If you use our EvoCardLink / EvoLink service, order a custom digital solution, or engage us for website-related services, we may collect content and service-related information that you choose to provide or publish, including:

  • public profile details for an EvoLink page;
  • contact buttons and destination links;
  • company branding assets;
  • map or location details;
  • downloadable contact card information;
  • media, showcase, or profile content you upload or submit;
  • website content, product information, business descriptions, images, logos, or other assets provided for design or setup work; and
  • project, design, hosting, support, maintenance, or implementation-related information.

D. Technical and Usage Information

When you visit our websites or access an EvoLink page, we may automatically collect certain technical or usage-related information such as:

  • IP address;
  • browser type;
  • device type;
  • operating system;
  • referring URL or traffic source;
  • pages viewed;
  • date and time of access; and
  • click actions and engagement with page features.

E. Communications and Support Information

We may collect information contained in or relating to:

  • enquiry forms;
  • quotation requests;
  • WhatsApp, email, or other messages sent to us;
  • support requests and follow-up communications;
  • customer service records; and
  • feedback, survey responses, or project discussions;
  • WhatsApp message content, sender and recipient identifiers, message attachments or media, message timestamps, delivery or read status, and conversation history where processed by a connected service; and
  • customer-service notes, assigned staff, follow-up status, and related conversation actions where those features are used.

F. Communication Core Configuration and AI-Assistance Information

Where Communication Core is used, we may also process business-provided FAQs, product or service information, prices, policies, customer-service instructions, approved knowledge materials, AI-generated draft replies, staff edits and approvals, and technical or audit records associated with communication workflows. Some of these materials may contain personal data if a user chooses to include it. We encourage users not to upload unnecessary personal or sensitive information.

4. How We Collect Personal Data

We may collect personal data:

  • directly from you when you contact us, place an order, request a quotation, complete a form, sign up, or use our services;
  • when you or your authorised representative submit account, profile, order, or project information to us;
  • when you purchase a product or service through our online store or other sales channels;
  • when you engage us for website design, digital setup, hosting, maintenance, or related support services;
  • when you interact with our websites, payment flow, public profile pages, or service tools;
  • from cookies and similar technologies;
  • from public sources or third parties where permitted by law; and
  • from your employer or organisation if a product, account, or project is arranged under a business or corporate engagement;
  • through the WhatsApp Business Platform when a person messages a business number connected to Communication Core; and
  • from an authorised business customer when they provide or correct conversation details, knowledge material, customer-service notes, or related settings.

5. Purposes of Processing Your Personal Data

We may use your personal data for purposes including:

  • providing and managing our products and services;
  • processing enquiries, quotation requests, orders, payments, renewals, fulfilment, and service administration;
  • creating, hosting, configuring, maintaining, or supporting an EvoCardLink or EvoLink page;
  • generating QR-linked or NFC-linked digital business card functionality;
  • providing website design, setup, development, hosting, maintenance, consultation, or project support services;
  • communicating with you about your enquiry, order, quotation, project, support case, or account;
  • receiving, organising and responding to WhatsApp enquiries through Communication Core;
  • presenting AI-assisted draft responses to authorised staff, or supporting configured automated responses where that functionality is enabled;
  • managing staff assignments, customer-service handovers, follow-ups, conversation history, quality checks and technical troubleshooting;
  • publishing the profile information or business information you choose to make visible through an EvoLink page or related digital asset;
  • managing customer accounts, subscriptions, and service access;
  • improving our websites, user experience, products, and service features;
  • internal administration, record keeping, reporting, and business operations;
  • security, fraud prevention, troubleshooting, and service protection;
  • analytics and performance measurement, including profile visits, website usage, and user interactions where applicable;
  • sending service notices, updates, reminders, or operational communications;
  • sending marketing or promotional materials where permitted by law; and
  • complying with legal, tax, regulatory, contractual, or operational requirements.

6. Site-Specific Services and Published Information

A. EvoLink Public Profiles and Digital Business Card Pages

EvoCardLink is designed to help users share professional information digitally.

If you are a customer or account holder and choose to publish your EvoLink page, the information you choose to display may become visible to people who access your page through a web link, QR code, or NFC tap.

By default, public EvoLink pages may be configured not to be indexed by search engines. However, the account holder or customer may be given the option to enable search engine indexing for their public EvoLink page if they choose to make that page more discoverable through search results.

This may include items such as your name, role, company, phone number, email address, social links, business address, map location, profile image, logo, and other profile details that you choose to publish.

B. Online Store and Order Processing

When you purchase through evogadgets.com or related sales channels, we may use your information to process your transaction, arrange fulfilment or delivery, provide service activation, communicate order updates, and manage after-sales support.

C. Website Design and Custom Corporate Site Services

When you engage us through evobrand.my or related channels for website design, custom corporate site services, or related digital work, we may use the information and content you provide to prepare quotations, discuss requirements, plan and execute the project, communicate updates, and deliver or support the requested services.

You are responsible for ensuring that the information, materials, and content you submit to us for publication, setup, or project use are accurate, appropriate, and authorised for disclosure.

If you provide us with another person’s personal data, you confirm that you have the right or consent to do so.

D. Communication Core — WhatsApp Business Messaging and AI-Assisted Communication

What the service does. Communication Core helps EvoGadgets Marketing and, where offered, our business customers manage WhatsApp conversations for legitimate enquiries, customer support, sales communications and follow-ups. Depending on the features enabled, it may provide a shared inbox, conversation history, assigned staff access, AI-generated draft replies, approved business knowledge, reminders, and message status reporting.

Information processed. When a person contacts a WhatsApp number connected to Communication Core, relevant information may include their name or WhatsApp profile name, phone number or platform identifier, messages, media or documents they send, conversation timestamps, delivery status, and staff notes or follow-up records. Please avoid sending sensitive personal information through WhatsApp unless it is necessary and appropriate.

AI assistance and human review. Where an AI-assisted feature is enabled, relevant conversation content and approved business information may be processed by a third-party AI service provider to prepare draft replies or other assistance. Depending on the business’s configuration, authorised staff may review, edit, approve or reject a draft before sending. If automatic responses are enabled in the future, some replies may be generated or sent without individual human approval, subject to the settings in use. AI-generated material may be inaccurate; users should not rely on it alone for medical, legal, financial or other high-stakes decisions. We do not publish private WhatsApp conversations as public website content merely because Communication Core has processed them.

Access and service providers. Access to Communication Core records may be available to relevant authorised business personnel, including administrators, managers and support staff according to their assigned roles. Processing may also involve Meta’s WhatsApp Business Platform, our website or hosting infrastructure, and AI or other technical service providers where necessary for the enabled features. See Sections 7 and 8 for disclosure and cross-border processing.

Our role and business customers’ responsibilities. When you communicate directly with EvoGadgets Marketing, we generally determine how we use that communication for our business purposes. Where another business uses Communication Core for its own customers, that business generally determines why it communicates with those individuals and what information is appropriate to process. EvoGadgets Marketing may provide the service and process information on that business’s behalf, depending on the contractual and operational arrangement. Business customers are responsible for providing applicable privacy notices, establishing an appropriate legal basis or obtaining consent where required, respecting opt-outs, and using WhatsApp in accordance with Meta’s policies and applicable law. The business customer’s privacy notice may also apply to those communications.

Messaging choices. Individuals may contact the relevant business to ask questions about a conversation, request that promotional messages stop, or exercise available personal data rights. A request to stop marketing does not necessarily prevent necessary responses to an existing enquiry, transactional notifications or legally required communications. Where a request relates to a business customer’s records, we may refer or coordinate it with that business.

Retention and deletion. Conversation records, attachments, service settings, staff notes and associated logs are retained for periods reasonably necessary for the relevant service, business and legal purposes. Specific periods may depend on the business customer’s settings, the applicable service arrangement, legal obligations and technical backup cycles. We do not represent that all records are deleted immediately after a conversation ends. For requests, see Section 15 and our Data Deletion Instructions.

7. Disclosure of Personal Data

We may disclose your personal data to the following classes of third parties where reasonably necessary for the purposes stated above:

  • our employees, authorised personnel, and internal administrators;
  • affiliated companies or related business entities;
  • hosting providers, cloud service providers, website tools, and technical support providers;
  • payment gateways, banks, and billing or accounting service providers;
  • domain, email, messaging, communication, marketing, or CRM service providers, including the WhatsApp Business Platform where used;
  • AI-processing and related technology service providers when AI-assisted features are enabled;
  • printing, fulfilment, logistics, courier, or delivery service providers;
  • analytics, security, anti-spam, and website performance providers;
  • professional advisers such as auditors, lawyers, consultants, or insurers;
  • government authorities, regulators, law enforcement bodies, or courts where required by law; and
  • any other party to whom you have authorised or instructed us to disclose your personal data.

We do not sell your personal data.

8. Cross-Border Transfers

Some of our service providers or technology platforms, including messaging infrastructure and AI service providers where used, may store or process personal data outside Malaysia.

Where cross-border transfers occur, we will take reasonable steps to ensure that your personal data continues to receive a level of protection that is comparable to applicable legal requirements and that the transfer is made in accordance with applicable law.

9. Cookies and Similar Technologies

Our websites may use cookies, pixels, or similar technologies to:

  • keep the websites functioning properly;
  • remember preferences or sessions;
  • understand website traffic and usage patterns;
  • improve performance and user experience; and
  • support analytics, security, and service delivery.

You may adjust your browser settings to block or delete cookies. However, doing so may affect certain website functions.

10. Marketing Communications

We may use your contact details to send updates, promotions, or marketing communications about our products or services where permitted by law.

You may opt out of receiving marketing communications from us at any time by:

  • clicking the unsubscribe link where available; or
  • contacting us directly at sales@evogadgets.com; or
  • telling us through the relevant communication channel that you no longer wish to receive promotional messages.

Operational or service-related communications may still be sent where necessary. If a separate business uses Communication Core to contact you, direct any marketing opt-out request to that business using its messaging channel or privacy contact.

11. Whether Providing Personal Data Is Mandatory or Voluntary

In some situations, providing personal data is voluntary.

However, where certain information is required for us to provide a quotation, fulfil an order, activate a digital profile, verify an account, process payment, provide support, or deliver a requested service, failure to provide the required personal data may result in us being unable to:

  • process your order, enquiry, or quotation request;
  • create, activate, or maintain your EvoCardLink / EvoLink service;
  • proceed with requested website design, setup, hosting, maintenance, or project work;
  • publish requested profile or business information;
  • provide customer support; or
  • continue certain service features.

12. Data Retention

We will retain personal data only for as long as reasonably necessary for the purposes for which it was collected, or as required for legal, tax, regulatory, accounting, dispute resolution, security, or legitimate business purposes.

When personal data is no longer required, we will take reasonable steps to delete, destroy, anonymise, or securely archive it in accordance with our internal practices and applicable legal obligations. For Communication Core, conversation records, media, backups, security logs and merchant-managed records may have different retention and deletion arrangements. We will not promise a fixed deletion period unless that period is established for the applicable service.

13. Security

We take reasonable practical, administrative, technical, and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. Where relevant, these measures may include role-based access restrictions, credential protection and operational access reviews; their implementation depends on the service and environment involved.

However, no internet transmission or storage method is completely secure, and we cannot guarantee absolute security.

14. Accuracy of Personal Data

We rely on the personal data provided to us being accurate, complete, and up to date.

Please notify us promptly if your information changes or if you believe any personal data we hold about you is inaccurate.

15. Your Rights and Choices

Subject to applicable law, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate, incomplete, misleading, or outdated personal data;
  • withdraw consent to certain processing;
  • request erasure or deletion where applicable law and the circumstances provide for it;
  • request that we stop or limit processing in certain circumstances;
  • opt out of direct marketing communications; and
  • make a complaint if you believe your personal data has been handled improperly.

To exercise any of these rights, please contact us using the details in Section 18 below. For deletion requests, you may also follow our Data Deletion Instructions. If your data is held by a separate business using Communication Core, please contact that business first; we may assist it in dealing with applicable requests.

We may request information to verify your identity before processing your request.

16. Sensitive Personal Data

Our services are generally not intended to collect sensitive personal data.

Please do not submit sensitive personal data to us unless it is clearly necessary and lawful to do so. Where sensitive personal data is involved, we will handle it in accordance with applicable legal requirements.

17. Third-Party Websites, Apps, and Embedded Services

Our websites, service pages, or digital profile pages may contain links to or integrations with third-party services such as maps, social media platforms, messaging tools, embedded media, external websites, customer-owned websites, lead forms, booking pages, landing pages, payment pages, or other external marketing platforms.

In some cases, an EvoLink profile owner, store customer, or service client may choose to place links that direct visitors to their own website, enquiry form, booking form, marketing page, CRM form, payment page, or another third-party platform for the purpose of collecting customer information or enquiries.

When you click on those external links and submit your information on those external platforms, your personal data will be collected and processed by the relevant profile owner, customer, client, or third party in accordance with their own privacy policies and practices, and not under this Privacy Policy.

We are not responsible for the privacy, security, content, or data handling practices of third-party platforms, customer-owned websites, or external services that are not operated or controlled by us.

However, where a form, feature, or data collection tool is hosted, operated, or processed by EvoGadgets Marketing, this Privacy Policy will apply to that processing. Messaging through WhatsApp is also subject to Meta’s applicable terms and privacy information. Where external AI or hosting providers process data for enabled Communication Core features, their services may have their own applicable terms and contractual data protection arrangements.

18. Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy / Personal Data Protection Notice or how we handle personal data, please contact:

Company Name: EvoGadgets Marketing (PG0321198-M)
Email: sales@evogadgets.com
Address: Level 5, Unit 27 & 28, Pan Palace Plaza, Taman Lip Sin, 11900 Bayan Lepas, Pulau Pinang, Malaysia.
Department: Sales & Support Department

19. Changes to This Notice

We may update this Privacy Policy / Personal Data Protection Notice from time to time to reflect changes in our business, services, legal requirements, or data handling practices.

Any revised version will be posted on the relevant website and will take effect from the date stated at the top of the updated notice.