Overview of data handling at NoviTvoice
NoviTvoice collects and processes personal data necessary to deliver mentoring services, schedule sessions, manage subscriptions and measure progress. Our approach is case-driven: we use anonymized examples and aggregated metrics to improve content without exposing individual identities. This section outlines what we collect, why, and how we protect it in practical operational scenarios.
Definitions
This section explains the terminology used throughout the policy with examples tied to mentoring and executive coaching workflows to make each concept actionable for users.
Data collection
We collect information from users directly, from device and usage logs, and from third-party services with user consent. Each collection type is mapped to a clear service purpose and a practical example of how it improves mentoring outcomes.
Data you provide directly
When registering or using NoviTvoice services, you may provide personal and professional information to create profiles, arrange mentoring, or submit materials for review. Examples and minimal required fields are listed below.
- Contact details: name, email address and phone number used to confirm bookings and notify about session changes.
- Professional background: current role, employer, industry, CV or resume excerpts used to match mentors and design relevant case scenarios.
- Mentoring preferences and goals: short- and long-term objectives, competency areas for development, and session notes that inform coaching plans.
- Payment and billing information: billing name, invoice address and transaction records to manage subscriptions and corporate invoicing.
- User-generated content: uploaded documents, exercises, session recordings or reflections when explicitly submitted for mentoring review.
- Feedback and ratings: session feedback, mentor evaluations and survey responses used to improve program quality and matchmaking.
- Support communications: messages to customer support or mentoring coordinators that document service requests and resolutions.
Automatically collected data
To operate and improve the platform we collect device and usage information. This data supports service reliability, security and user experience tuning based on observed patterns across case studies.
- Usage logs: pages visited, features used, session duration and interaction events to measure engagement with mentoring modules.
- Device and browser data: IP address, device type, operating system and browser version necessary for troubleshooting and security analysis.
- Performance metrics: error reports and performance logs to prioritize technical fixes that affect mentor and mentee experiences.
- Analytics identifiers: anonymous identifiers used by analytics tools to understand aggregate behavior and improve content relevance.
- Location approximations: country-level location inferred from IP for localization of content and compliance checks.
- Cookies and tracking: identifiers set in cookies for session continuity and preference storage.
- Security logs: authentication events and access patterns used to detect and respond to suspicious activity.
Data from third parties
When you choose to link or integrate third-party services, or when corporate administrators provide batches of user records, NoviTvoice may receive data from external sources to support mentoring engagement.
- Corporate HR systems: when organizations arrange mentoring for cohorts, HR may share names, roles and email addresses to enable onboarding.
- Payment processors: payment-related data necessary to process transactions and issue receipts without storing full card details on our servers.
- Identity providers: when using single sign-on, identity assertions and profile attributes are received to create accounts and streamline access.
- Publicly available sources: professional profiles and public bios that users may reference when building mentoring profiles.
- Third-party analytics: aggregated analytics and performance data shared by our analytics partners to improve platform features.
Why we process personal data
Each processing purpose is tied to an operational need and illustrated with a practical example from mentoring engagements so users can see how data is applied in context.
- Service delivery: to match mentors, schedule sessions and provide access to learning materials — e.g., using role and goal information to create a tailored three-month mentoring plan.
- Account management: to create user accounts, authenticate access and maintain subscription status for corporate and individual clients.
- Payments and billing: to process payments, issue invoices and manage refunds via our payment partners.
- Personalization: to recommend content and mentor pairings based on stated goals and past interactions while relying on aggregated trends rather than exposing personal narratives.
- Quality improvement: to collect feedback and outcome metrics to refine case studies and mentoring curricula.
- Security and fraud prevention: to detect abuse, secure accounts and contribute incidents that may affect platform integrity.
- Legal compliance: to respond to legal requests, tax requirements and contractual obligations with corporate clients.
- Research and analytics: to analyze aggregated, de-identified data for product development and reporting internal program effectiveness.
Legal bases for processing
We rely on appropriate legal bases for processing personal data depending on the purpose. Below are typical legal bases with practical context for users.
- Contractual necessity: processing necessary to fulfill obligations under a user or corporate contract, such as delivering mentoring sessions.
- Legitimate interests: processing for platform improvement, security and analytics where such interests are balanced against user privacy and minimal intrusion.
- Consent: certain optional features, such as marketing communications or recording sessions for training, are processed on the basis of explicit user consent.
- Legal obligation: processing to comply with laws, regulations or requests from competent authorities in relevant jurisdictions.
Rights under applicable privacy frameworks
We outline rights similar to international privacy standards and provide steps for requesting access, correction, deletion, restriction or portability, with examples related to mentoring accounts.
- Right to access: request a copy of personal data we hold and an explanation of processing activities; typical response includes profile, booking history and consent records.
- Right to rectification: request correction of inaccurate or incomplete personal data, such as updating a job title or employer in a mentoring profile.
- Right to deletion: request removal of personal data when not required for legal or contractual retention; we explain implications for ongoing mentoring engagements.
- Right to restrict processing: request suspension of processing in certain circumstances, for example while a dispute about accuracy is resolved.
- Right to object: object to processing based on legitimate interests, such as targeted marketing, and to withdraw consent where processing is consent-based.
- Right to data portability: request a structured, commonly used, machine-readable copy of personal data for transfer to another provider when technically feasible.
Cookies and similar technologies
Cookies help deliver a consistent user experience and collect aggregate usage data. NoviTvoice uses cookies for essential functions, preferences and analytics tied to product improvements.
Types: essential cookies for authentication, preference cookies for language and display choices, analytics cookies for aggregated usage measurement, and optional cookies for third-party integrations.
Categories: strictly necessary (session, login), performance (analytics), functional (preferences) and marketing (third-party integrations if enabled). We limit marketing cookies and require consent where applicable.
Managing cookies: users can control cookie preferences through their browser settings and through available consent tools in the NoviTvoice interface. Disabling certain cookies may affect functionality like saved preferences or single sign-on.
Read our full cookie guidance for details on specific cookies and lifetimes.
Sharing data with third parties
We share personal data only for service delivery, compliance or with user consent. Sharing is governed by contracts and technical safeguards to protect data in operational scenarios such as corporate program delivery.
- Service providers: third-party vendors who support payments, hosting, analytics and communications. They process data on our behalf under contractual terms.
- Corporate clients: when an organization sponsors mentoring for its employees, relevant profile and participation data may be shared with designated corporate administrators as part of the program.
- Legal and regulatory: when required to comply with legal obligations or respond to lawful requests from authorities.
- Mentor matching partners: vetted partners who assist with mentor supply and matching; they receive limited profile information strictly necessary to propose mentor fits.
- Aggregated reporting: anonymized, non-identifiable aggregate metrics shared with partners or clients to demonstrate program outcomes and trends.
- Acquisition and corporate transactions: in the event of a merger or sale, user data may be transferred as part of the transaction subject to notice and applicable protections.
Cross-border transfers
NoviTvoice may transfer data to service providers or partners located outside Malaysia. Transfers are governed by contracts, standard contractual clauses where applicable, and technical measures to maintain data protection consistent with the purpose of processing.
Safeguards: contractual commitments, vendor assessments, encryption in transit, and limited access controls. For transfers involving personal data, we apply measures proportionate to sensitivity and business need.
Data retention
We retain personal data only as long as necessary for the purpose it was collected, to comply with legal obligations, or to resolve disputes. Retention periods are aligned with operational needs and documented retention schedules.
Accounts: profile and account records are retained while the account is active and for a reasonable period after deactivation to allow for disputes, refunds or regulatory requirements.
Messages and session notes: retained for operational needs tied to ongoing mentoring engagements; users can request deletion of non-essential notes where retention is no longer necessary for service delivery.
Logs and analytics: aggregated analytics and anonymized logs may be retained longer for product improvement; detailed logs are retained for a shorter period for security and troubleshooting.
Deletion requests: users may request deletion of personal data subject to business needs and legal obligations. We provide guidance on what deletion means for active mentoring programs and potential impacts on service continuity.
Security measures
NoviTvoice implements administrative, technical and physical measures to protect personal data. Security controls are chosen based on risk assessments and include access controls, encrypted communications, monitoring and incident response processes tailored to protect mentoring interactions and stored materials.
- Access controls: role-based access for employees and contractors, with least-privilege principles applied to production systems.
- Encryption: TLS for data in transit and encryption at rest for sensitive stored assets where appropriate.
- Incident response: documented incident handling and notification procedures with practical steps to contain and remediate security events.
How to exercise your rights
At NoviTvoice we respect individual data rights and provide clear routes for you to review, correct, or request removal of personal information. Below we outline the main rights available to users in Malaysia and how they can be exercised, illustrated with practical scenarios and case-based examples to help you choose the right action for your situation.
- Access: You can request a copy of personal data NoviTvoice holds about you. Example: request a record of mentoring session notes and feedback summaries to review career development recommendations.
- Correction: If your data is inaccurate or incomplete, ask us to update it. Scenario: change of employer or job title reflected in your mentoring profile after submitting supporting documentation.
- Deletion: Request removal of personal data when retention is no longer necessary. Practical case: removing an outdated CV from your profile when you no longer seek opportunities.
- Portability: Request a machine-readable copy of data for transfer to another service. Example: exporting mentoring history, goal plans and achievement logs to an alternative career platform.
- Restriction of processing: Ask us to limit how your data is used while a dispute is resolved. Scenario: pause data sharing with third-party analytics while you review data accuracy.
- Objection to processing: Where lawful grounds allow, you may object to certain processing activities such as direct marketing. Example: stop targeted emails about executive workshops.
- Withdraw consent: If you previously consented to a specific processing activity, you can withdraw consent without affecting prior lawful use. Practical case: withdrawing consent for public display of a mentoring success case study.
- Complain to a regulator: If you remain unsatisfied after our response, you may escalate your concern to the Malaysian Personal Data Protection Commissioner, using the documented case history we provide.
How to submit a privacy rights request
To exercise any of the rights above, submit a written request to NoviTvoice via the contact channels listed below. Include your full name, registered email, description of the requested action, and any documentation to help verify identity. For requests tied to specific mentoring sessions or case files, reference the session date or case ID to speed handling. We use scenario-driven triage: simple requests may be resolved with a single verification step, while complex cases involving third-party data may require additional clarification.
We aim to acknowledge most requests within 7 business days and provide a substantive response within 30 calendar days. For complex requests that require consultation with partners or legal review, we will notify you of any reasonable extension and the reasons for the delay.
Marketing communications and options
NoviTvoice may send emails about new mentoring tracks, executive workshops, case-study webinars, and product updates that reflect your expressed interests. Marketing content is tailored using anonymized engagement patterns and your stated preferences. Example: if you previously attended a leadership scenario workshop, we may highlight advanced executive mentoring pathways that build on those cases. We respect your choices and process unsubscribes promptly.
To stop receiving marketing emails, use the unsubscribe link in any marketing message or update your communication preferences in your account settings. You may also contact our privacy team to request removal from marketing lists; we will process such requests within 7 business days.
Children and minors
NoviTvoice is intended for professionals and executives. We do not knowingly collect personal data from persons under 18 years of age. If we learn we have received data from a minor without appropriate parental or guardian consent, we will take steps to remove such data promptly, following verification and case-based procedures.
Third-party links and services
Our platform may contain links to external sites or integrate third-party tools for scheduling, payments, analytics, and content delivery. Examples include calendar booking services used to arrange mentoring sessions and third-party case-study platforms for published examples. Clicking third-party links takes you to their sites, where their privacy terms apply. NoviTvoice is not responsible for external practices; we recommend reviewing those privacy policies before providing personal data.
Changes to this privacy notice
We periodically update this privacy notice to reflect changes in our services, legal requirements, or operational practices. Material changes will be communicated via email and a site notice with a clear summary of what changed and practical examples of how it affects data handling. Non-material edits will be reflected on the website with the revision date updated.
Contact and data protection officer
For questions about privacy practices, data access requests, or to report a concern, contact NoviTvoice at: 72120 Bandar Seri Jempol, Negri Sembilan, Malaysia. Business ID: 739639010638. Phone: +60121370102. Email: [email protected]. Include relevant case details or session references where applicable to help us respond with practical, scenario-based guidance.
- +60121370102
- [email protected]
- 72120 Bandar Seri Jempol, Negri Sembilan, Malaysia