Privacy Document
Pre-Launch Privacy Notice
Learn how Vorsle collects, uses, stores, shares, retains, and protects personal information during our pre-launch activities.
Version 1.0
1. Introduction
Welcome to Vorsle.
Vorsle is a student-led startup initiative based in Malaysia, working towards building a campus-focused marketplace where students can buy, sell, request, and discover pre-loved items within their university communities.
Vorsle is currently operated by its founding team and has not yet completed business registration with the Companies Commission of Malaysia (SSM).
We respect your privacy and are committed to handling your personal information responsibly, transparently, and securely.
This Privacy Notice explains how we collect, use, store, share, retain, and protect personal information submitted through the Vorsle Pre-Launch Website.
It also explains the choices and rights available to you regarding your personal information.
By submitting information through our website, you acknowledge that you have been provided with this Privacy Notice. Where consent is required, we will request it separately.
2. Scope of This Privacy Notice
This Privacy Notice applies to personal information collected through the Vorsle Pre-Launch Website, particularly through:
- Early Access Registration
- Early Seller Interest Registration
- Partnership Enquiry
- Direct enquiries sent to our official contact email addresses
Purpose and Scope
The website is intended to introduce Vorsle, collect expressions of interest, identify potential early sellers, and facilitate discussions with prospective partners before the marketplace becomes publicly available.
Submitting a form does not automatically create a Vorsle Marketplace account, verify student status, guarantee access to a beta programme, or establish a commercial relationship.
This Privacy Notice does not govern the full Vorsle Marketplace application, which may have its own privacy documentation when launched.
Early Access and Early Seller are separate expressions of interest. Registering for one does not enrol you in the other; you may use the same email address for both. Partnership enquiries are handled separately.
3. Who Is Responsible for Your Personal Information?
The Vorsle founding team is responsible for operating the Pre-Launch Website, managing the personal information collected through it, and handling privacy-related requests.
Vorsle is a student-led startup initiative based in Malaysia and has not yet completed SSM business registration.
The founding team oversees the collection, access, use, retention, and protection of information submitted through the website.
For privacy-related questions, concerns, or requests, please contact privacy@vorsle.com.
For general enquiries, please contact hello@vorsle.com.
These contact addresses are operational. The founding team handles enquiries and privacy requests received through them.
We may update our organisational and contact information if Vorsle becomes a formally registered business or changes its operating structure.
4. Personal Information We Collect
We collect only information that is reasonably relevant to the purpose of your interaction with the Pre-Launch Website.
4.1 Early Access Registration
When you register your interest in Vorsle, we may collect:
- Email address (required)
- University or campus (required)
- Other university name, if applicable (optional)
- Preferred name (optional)
- Primary interest, such as buying, selling, both, or exploring (optional)
- Your preference regarding optional marketing and launch updates
- The version of the Privacy Notice presented during registration
- Technical submission identifiers needed to prevent duplicate processing
Your email address and university or campus are required to process an Early Access registration. The other personal-information fields are optional, and declining optional marketing updates does not prevent registration.
4.2 Early Seller Interest Registration
When you express interest in becoming an early seller, we may collect information relevant to understanding your availability and selling interests, including:
- Preferred name (optional)
- Email address (required)
- University or campus (required)
- General categories of items you may wish to sell (at least one required)
- Other university name (required if you select Other / Not Listed)
- Approximate number of items (optional)
- When you may be ready to list items (optional)
- Additional notes you choose to provide (optional)
- Your acknowledgement of this Privacy Notice (required)
- Your choice regarding optional marketing and launch updates, and related acknowledgement and consent records
Submitting seller interest does not create a product listing, establish a seller account, or guarantee participation in an early seller programme.
We cannot process an Early Seller registration without the required information and Privacy Notice acknowledgement. Optional fields and marketing consent are not required to register.
4.3 Partnership Enquiry
When you contact us regarding a potential collaboration, we may collect:
- Contact name (required)
- Contact email address (required)
- Organisation, university, student society, or business name (required)
- Organisation type, such as university, club or student society, NGO, business, or other (required)
- Your role or relationship with the organisation (optional)
- Collaboration interests (at least one required)
- Preferred communication channel (optional; a preference only, with any initial reply sent to your contact email)
- Message describing your proposed collaboration (required)
- Your acknowledgement of this Privacy Notice (required), and related acknowledgement records
Please avoid including sensitive personal information or unnecessary information about other individuals in your enquiry.
We cannot process a partnership enquiry without the required information and Privacy Notice acknowledgement. Optional fields may be left blank.
4.4 Technical and Website Information
When you visit or interact with our website, limited technical information may be processed as necessary for website operation, security, abuse prevention, and troubleshooting.
Depending on the services enabled, this may include:
- IP address
- Browser or device information
- Request timestamps
- Website access and error logs
- Security-related request information
- Submission and retry identifiers
If analytics or optional tracking technologies are introduced, we will assess applicable notice and consent requirements and update our disclosures accordingly.
We do not intend to use the Pre-Launch Website to collect government identification numbers, passwords, payment card details, or sensitive personal information.
5. How We Use Your Personal Information
We use personal information only for purposes connected with Vorsle's legitimate pre-launch activities and other purposes that are appropriately disclosed to you.
5.1 Early Access Registration
We use your information to:
- Record your interest in Vorsle.
- Understand potential demand across participating universities.
- Identify prospective early users.
- Assess potential beta participation.
- Contact you regarding your registration or potential participation when appropriate.
- Send optional promotional or launch updates where you have provided the relevant consent.
Joining Early Access does not guarantee an invitation or access to the marketplace.
5.2 Early Seller Registration
We use your information to:
- Identify students interested in selling items through Vorsle.
- Understand the potential supply of pre-loved items before launch.
- Assess early seller onboarding opportunities.
- Contact prospective sellers about relevant next steps.
- Support planning for the marketplace's initial launch.
5.3 Partnership Enquiries
We use your information to:
- Review partnership and collaboration proposals.
- Communicate with prospective partners.
- Assess potential university, community, sustainability, promotional, or operational collaborations.
- Arrange follow-up discussions where appropriate.
- Maintain relevant records of ongoing discussions.
Submitting an enquiry does not guarantee a response, acceptance, or partnership agreement.
5.4 Website Operations and Security
We may also process limited information to:
- Maintain website functionality.
- Validate form submissions.
- Prevent duplicate registrations.
- Detect spam, misuse, or suspicious activity.
- Troubleshoot technical problems.
- Maintain records necessary to demonstrate relevant consent and processing decisions.
- Respond to applicable legal or regulatory obligations.
We will not use your personal information for unrelated purposes without appropriate notice and, where required, consent.
6. Privacy Notice Acknowledgement and Marketing Consent
We distinguish between information needed to process your enquiry or registration and optional marketing communications.
6.1 Registration and Privacy Notice
Before submitting a form, you will be provided with access to this Privacy Notice.
We may record the version of the Privacy Notice presented to you and the relevant acknowledgement associated with your submission.
This record helps us understand which notice applied at the time your information was collected.
Submitting a form does not constitute agreement to receive unrelated promotional communications.
Early Seller and Partnership forms require an explicit Privacy Notice acknowledgement. Early Access provides the notice before submission and records acknowledgement when you submit. These acknowledgements are separate from optional marketing consent.
6.2 Optional Marketing Communications
Where offered, you may separately choose whether to receive optional Vorsle marketing and launch updates.
Declining optional marketing communications will not automatically prevent you from submitting an Early Access, Early Seller, or Partnership form.
- Marketing consent will be presented separately from the basic registration process.
- Marketing consent will be optional.
- Marketing consent will not be selected by default.
- Your choice will be recorded.
- You will be able to withdraw your marketing consent.
6.3 Withdrawing Marketing Consent
You may request to stop receiving optional marketing communications at any time by contacting privacy@vorsle.com.
Where a marketing email includes an unsubscribe mechanism, you may also use that mechanism.
We will process valid withdrawal requests within a reasonable period and in accordance with applicable requirements.
We may retain limited suppression information where necessary to prevent further unwanted marketing communications.
7. How We Store and Protect Your Information
Vorsle uses technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, misuse, alteration, and inappropriate disclosure.
These measures may include:
- Encrypted connections when information is transmitted.
- Restricted database access.
- Server-side input validation.
- Database-level access controls.
- Separation of operational and public-facing access.
- Access limited to authorised team members.
- Secure management of credentials and environment variables.
- Appropriate monitoring and incident-response procedures.
Information submitted through our registration and enquiry forms is stored in a controlled PostgreSQL database hosted using Supabase.
The website uses Vercel for hosting.
We do not publish submitted registration information or make it accessible to other website visitors.
No electronic system can guarantee absolute security. We therefore review our security arrangements as the website and its operational needs evolve.
9. International Processing and Data Transfers
Vorsle operates from Malaysia, but some of our technology service providers may operate infrastructure or process information outside Malaysia.
The Supabase project was created with Singapore selected as its database region. Other supporting services may process information in other countries depending on their infrastructure and service arrangements.
Where personal information is transferred or processed outside Malaysia, we will take reasonably appropriate steps to assess the transfer and apply safeguards required by applicable law.
These steps may include reviewing the relevant provider's contractual terms, security arrangements, data processing commitments, and available regional hosting options.
We will not treat the use of an international service provider as removing our responsibilities regarding personal information.
10. How Long We Keep Your Information
Vorsle follows a purpose-based data retention approach.
We aim to keep personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal requirements.
10.1 Early Access Information
Early Access registration information will ordinarily be retained for no longer than 12 months from the date of collection.
Where the information is no longer needed before this period ends, it may be deleted or anonymised earlier.
10.2 Early Seller Information
Early Seller registration information will ordinarily be retained for no longer than 12 months from the date of collection, unless a valid and appropriately disclosed ongoing purpose justifies further retention.
10.3 Partnership Enquiries
The founding team reviews whether partnership enquiry information is still needed within 12 months of collection.
Where a genuine collaboration or related discussion remains active, relevant information may be retained for the period reasonably necessary to manage that relationship, subject to appropriate review.
10.4 Retention Exceptions
Information may be retained for longer where reasonably necessary to:
- Comply with applicable legal obligations.
- Resolve a genuine dispute or outstanding request.
- Maintain necessary records of consent withdrawal or communication suppression.
- Manage an ongoing relationship that has a valid continuing purpose.
Any continued retention should be limited to the information necessary for that purpose.
10.5 Deletion and Review
The founding team conducts periodic manual reviews of retained pre-launch information and handles privacy requests manually.
Reviews and deletion requests consider each registration or enquiry purpose. Where the same email is used for more than one purpose, we assess the scope of the request and any continuing need to retain information for the other purposes.
When personal information is no longer required, we will take reasonable steps to securely delete it or anonymise it.
Deletion may not immediately remove information from all temporary backups or technical records. Such information will remain subject to applicable access controls and retention arrangements until removed in accordance with the relevant system lifecycle.
11. Your Privacy Rights and Choices
Subject to applicable law and relevant exceptions, you may contact us to request:
- Access: Information about personal data we hold about you.
- Correction: Correction of inaccurate, incomplete, or outdated personal information.
- Withdrawal of consent: Withdrawal of consent previously provided for processing activities that rely on that consent, including optional marketing communications.
- Deletion: Deletion of personal information that is no longer required or that should otherwise be deleted under applicable requirements.
- Limitation of processing: Where applicable, limitation or cessation of particular processing activities.
- Information about our practices: Clarification about how your personal information is collected, used, retained, or shared.
To submit a privacy request, please email privacy@vorsle.com.
The founding team handles requests for access, correction, withdrawal of consent, and deletion manually, subject to applicable legal requirements and any verification reasonably necessary to protect your information.
For corrections or consent changes, use this privacy contact process rather than relying on repeated form submissions. Repeated Early Access or Early Seller submissions do not update an existing registration or its original consent choices.
For your protection, we may request reasonable information to verify that you are authorised to make a request before disclosing, changing, or deleting personal information.
Please do not email us passwords, identity document photographs, or other sensitive information unless a specific secure verification method has been established and you have been instructed to use it.
We will review and respond to requests in accordance with applicable legal requirements.
Certain requests may be subject to lawful limitations or exceptions. If we cannot fulfil a request, we will explain the reason where appropriate and permitted.
13. Links to External Websites
Our website may contain links to external websites or services, including social media platforms, universities, or other organisations.
These websites operate under their own privacy policies and terms.
Vorsle is not responsible for the privacy practices of third-party websites that we do not control.
We encourage you to review their privacy information before submitting personal details through those services.
14. Information About Other People
If you submit personal information relating to another individual, please ensure you are authorised to provide that information and that doing so is appropriate for the purpose of your enquiry.
Partnership representatives should provide only the contact and organisational information reasonably necessary for the proposed collaboration.
Please do not submit unnecessary student records, identity documents, financial information, or sensitive information about third parties through the Pre-Launch Website.
15. Children and Younger Users
Vorsle is designed primarily for the university and higher education community.
We do not intentionally design our Pre-Launch Website to collect personal information from children.
If we become aware that personal information has been collected from a child in circumstances requiring additional authorisation or safeguards, we will review the information and take appropriate steps under applicable law.
Parents or guardians with concerns may contact privacy@vorsle.com.
16. Changes to This Privacy Notice
We may update this Privacy Notice to reflect:
- Changes in our pre-launch activities.
- Changes in the information we collect.
- Changes to our technology or service providers.
- New operational or security requirements.
- Changes in applicable laws or regulatory guidance.
- Changes to Vorsle's organisational or registration status.
When updates are made, we will revise the version number and Last Updated date.
Where changes materially affect how personal information is processed, we will take appropriate steps to notify affected individuals or obtain additional consent when required.
The latest published version will be available on the Vorsle website.
17. Contact Us
If you have questions about this Privacy Notice or wish to exercise your privacy rights, please contact:
Vorsle — Privacy Enquiries
Email: privacy@vorsle.com
Website: https://vorsle.com
For general enquiries:
Vorsle — General Enquiries
Email: hello@vorsle.com
Vorsle is currently a student-led startup initiative operated by its founding team in Malaysia.
We aim to respond to privacy-related enquiries responsibly, fairly, and within applicable legal requirements.