Privacy Policy

This Privacy Policy applies to the vCard Creator service operated at vbizcard.my (“we”, “us”, “our”, or “the Service”). We are the data controller responsible for the personal data you provide when you register and use this service.

If you have any questions or concerns about this policy, please contact us at support@vbizcard.my.

When you register or use the Service, we collect the following information:

• Account information: username, email address, and password (stored as a secure hash).
• Profile & contact content: name, job title, phone numbers, social links, and any other information you voluntarily add to your vCard.
• Usage data: login timestamps and basic activity logs used to administer your account.
• Uploaded files: profile photos, cover images, PDFs, or other media you upload to your vCard.

We do not collect payment card details directly — any subscription payments are handled through third-party payment processors under their own privacy policies.

Specifically, we use your data to:

• Create and maintain your user account.
• Authenticate you when you sign in.
• Contact you regarding account status (approval, suspension, subscription enquiries).
• Respond to support requests you initiate.
• Send important service notices (e.g. policy changes, security alerts).
• Comply with our legal and regulatory obligations.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

For users in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract performance — processing necessary to provide the Service you signed up for (Article 6(1)(b) GDPR).
• Legitimate interests — security monitoring, fraud prevention, and service improvement (Article 6(1)(f) GDPR).
• Legal obligation — where we are required to retain or disclose data by law (Article 6(1)(c) GDPR).
• Consent — where you have explicitly opted in to optional communications (Article 6(1)(a) GDPR). You may withdraw consent at any time.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes. We may share limited data only in the following circumstances:

• Service providers: Trusted infrastructure providers (hosting, email delivery) who process data strictly on our behalf and under data processing agreements.
• Legal requirements: Where we are compelled to disclose data by law, court order, or competent authority.
• Business transfer: In the event of a merger or acquisition, your data may be transferred to the successor entity, who will be bound by this policy.

Your publicly published vCard content (name, contact links, etc.) is visible to anyone with the link — this is the core function of the Service and is entirely within your control. You may update or remove this content at any time.

We retain your account data for as long as your account remains active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain certain records for legal or accounting purposes.

Uploaded files (photos, PDFs) are deleted alongside your account upon deletion. Anonymised or aggregated usage statistics that cannot identify you may be retained indefinitely.

Under GDPR (and equivalent legislation), you have the following rights regarding your personal data. To exercise any of them, contact us at support@vbizcard.my.

You also have the right to lodge a complaint with your local data protection authority (e.g. the ICO in the UK, or your national supervisory authority within the EEA).

We use an essential session cookie to keep registered users signed in and to protect account functions. This cookie is necessary for the Service to work and is not used by us to track your activity across unrelated websites.

Public editorial pages and eligible free-plan pages may display advertising supplied through Google AdSense. When an advertising page or ad tag loads, Google and its advertising partners may place or read cookies, use web beacons, process IP addresses, or use similar identifiers to deliver, measure, limit and improve advertising. Depending on your location, our settings and your consent choices, advertising may be personalised or non-personalised.

Information collected through Google advertising services may be shared with or processed by Google and participating advertising partners in accordance with their own policies. Read how Google uses information from sites that use its services and review Google’s Privacy Policy for more information.

Where applicable law requires it, we use a consent-management process to request or record your advertising choices before personalised advertising is served. Visitors can manage Google ad-personalisation choices through Google Ads Settings. Browser controls can also be used to block or delete cookies, although doing so may affect sign-in and other site functions. Business-plan account pages are not intended to display Google ads.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Passwords are stored as cryptographic hashes and are never stored in plain text.

No method of transmission over the internet is 100% secure. If you believe your account has been compromised, please contact us immediately at support@vbizcard.my.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For significant changes, we will notify registered users by email or via an in-app notice.

Your continued use of the Service after any changes constitutes your acceptance of the revised policy.