Privacy Policy

Vantora Creative Sdn Bhd (Company No. 202501019613) ("Vantora Creative", "we", "us", or "our") is a company incorporated in Malaysia. We are the data controller responsible for the personal data collected through our websites and products, including vantoracreative.com, crea-match.com (Creamatch), and verbrol.com(Verbrol) (collectively, the "Services").

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the Malaysian Personal Data Protection Act 2010 ("PDPA") and its subsidiary legislation.

We may collect the following categories of personal data:

• Identity & contact data — name, email address, phone number, company, job title, and billing details.
• Account data — login credentials, profile information, and preferences for Creamatch and Verbrol.
• Creator data (Creamatch) — social media handles, audience metrics, content samples, payout and bank details, and tax information required for escrow and payments.
• Campaign & usage data — briefs, deliverables, messages, and activity within the Services.
• Technical data — IP address, browser type, device information, and pages visited, collected via cookies and similar technologies.
• Market intelligence data (Verbrol) — publicly available social and web data aggregated from third-party sources for trend and listening analysis.

We process personal data for the following purposes:

• To provide, operate, and maintain the Services;
• To match brands with creators, manage campaigns, and process escrow payments and payouts;
• To generate trend, social listening, and market intelligence insights;
• To communicate with you about your account, campaigns, support requests, and service updates;
• To process payments, issue invoices, and comply with tax and accounting obligations (including SST);
• To improve and secure our Services, prevent fraud, and ensure quality through our two-stage QA process;
• To send marketing communications where you have consented, which you may withdraw at any time; and
• To comply with applicable laws and regulatory requirements.

We process personal data on the basis of your consent, the performance of a contract with you, our legitimate business interests, and compliance with legal obligations. By using the Services or providing your personal data to us, you consent to the processing described in this Policy. Where required, we will obtain your explicit consent before processing sensitive personal data.

We do not sell your personal data. We may disclose personal data to:

• Brands and creators as necessary to fulfil a campaign on Creamatch;
• Service providers who support us, such as payment gateways (including FPX providers), escrow partners, cloud hosting, analytics, and communication tools;
• Professional advisers and authorities where required by law, regulation, or legal process.

All third parties are required to protect your personal data and may only process it in accordance with our instructions and applicable law.

Some of our service providers may store or process data outside Malaysia. Where personal data is transferred outside Malaysia, we take reasonable steps to ensure it is afforded a level of protection comparable to that required under the PDPA.

Our websites use cookies and similar technologies to operate the Services, remember your preferences, and analyse traffic. You can manage or disable cookies through your browser settings, although some features of the Services may not function properly as a result.

We retain personal data only for as long as necessary to fulfil the purposes set out in this Policy, including to satisfy any legal, accounting, or reporting requirements. When personal data is no longer required, we will securely delete or anonymise it.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Under the PDPA, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Withdraw your consent to the processing of your personal data;
• Limit the processing of your personal data, including for direct marketing; and
• Make a complaint to us or the relevant authority.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding.

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Your continued use of the Services after changes are posted constitutes your acceptance of the revised Policy.

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at hello@vantoracreative.com. Vantora Creative Sdn Bhd (Company No. 202501019613), Kuala Lumpur, Malaysia.