Privacy Policy

1. Data We Collect

When you submit an enquiry through our website contact form, we collect the following personal data:

• Your name
• Your email address
• Your phone number (where provided)
• The content of your message, including any information you share about your project or property

We also collect non-identifying usage data through website analytics (see Section 5 on cookies). This includes pages visited, session duration, and browser type. It does not identify you individually.

Legal basis for processing: Data submitted through the contact form is processed on the basis of your consent (by choosing to submit the form) and on the basis of legitimate interest in responding to a service enquiry. If a service agreement is entered into, processing continues on the basis of that contract.

Retention: Enquiry data is retained for up to 24 months from the date of last contact. Project data related to a completed engagement is retained for up to 5 years for record-keeping purposes. You may request deletion at any time (see Section 6).

2. How We Use Your Data

• To respond to your enquiry and assess whether our services are a suitable fit
• To deliver the service you have commissioned — including site visits, written documentation, and sourcing coordination
• To communicate with you about the progress of your project
• To maintain records of completed engagements for internal reference
• To improve our website based on aggregate, anonymised usage data

We do not use your data for automated decision-making, profiling, or direct marketing without your explicit consent.

Data sharing: We do not sell or share personal data with third parties for their own marketing use. In the course of service delivery, project-related information may be shared with contractors or joiners where you have directed us to do so. Any such sharing is limited to what is necessary for that purpose.

3. Data Protection Measures

Personal data submitted through our website is transmitted over encrypted connections (HTTPS). Stored data is held on access-controlled systems. We restrict access to personal data to studio team members who require it in the course of project delivery.

In the event of a data breach that is likely to result in harm to you, we will notify you and, where required by applicable law, the relevant supervisory authority, within the timeframes required by law.

4. Third-Party Services

Our website may use analytics tools that process anonymised usage data. These tools may set cookies. Please refer to our Cookie Policy for details.

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend that you review their policies directly.

5. Cookies

We use cookies to support basic website functionality and, where you have consented, to collect anonymised usage data. You can manage your cookie preferences at any time through our Cookie Policy page.

Essential cookies necessary for the site to function are set without requiring consent. All other cookies are set only if you have accepted them.

6. Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and, where applicable, comparable data protection frameworks, you have the following rights:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interest.
• Right to erasure: You may request deletion of your personal data, subject to any legal obligation we have to retain records.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

If you are not satisfied with our response, you may lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) at www.pdp.gov.my.

7. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this policy from time to time. When we do, the revised version will be published on this page with an updated date at the top. We recommend checking periodically if you are an active client. Continued use of our website after any update constitutes acceptance of the revised policy.

9. Contact

For questions about this policy or to exercise your data rights:

• Email: [email protected]
• Phone: +60 3-6201 5894
• Address: Senari, Plaza Damas, Sri Hartamas, 50480 Kuala Lumpur, Malaysia