Privacy Policy
Last Updated: 10 May 2025 · Effective: 10 May 2025
Krienta ("we", "us", "our") is an interior design practice registered in Malaysia, providing window dressing and soft furnishings consultancy services. We are committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA"). This policy explains what data we collect, how we use it, and the rights available to you as a data subject.
Questions about this policy may be directed to [email protected].
1. Data We Collect
We collect personal data through our website contact form and through the course of delivering our services. The categories of data we may hold include:
- Name and contact details (email address, phone number)
- Postal or residential address, where provided for service delivery
- Home details shared for consultation purposes (photographs, floor plans, notes)
- Correspondence records, including email and written communications
- Website usage data collected through analytics cookies (see Section 5)
We do not collect sensitive personal data as defined under the PDPA. We do not collect payment card details directly; where applicable, payments are handled through third-party payment processors subject to their own privacy terms.
2. How We Use Your Data
Personal data is used for the following purposes:
- Service delivery — responding to enquiries, scheduling visits, producing direction documents and specifications, coordinating with makers on your behalf
- Communication — sending project updates, confirming appointments, and following up after project completion
- Record-keeping — maintaining project files for reference during and after the engagement
- Website improvement — using aggregated, anonymised analytics data to understand how visitors use our website
- Legal and regulatory compliance — where required by Malaysian law
We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties. We will not send marketing communications without your consent.
3. Legal Basis for Processing
Under the PDPA, we process personal data on the following bases:
- Consent — where you have provided your details voluntarily through our website form
- Contractual necessity — where processing is necessary to deliver a service you have engaged us for
- Legitimate interests — for record-keeping, project management, and website analytics, where these do not override your rights
- Legal obligation — where we are required to process data by Malaysian law
4. Data Sharing
We share personal data only as necessary for service delivery:
- Curtain and upholstery makers — specifications and measurements necessary to produce your order. No personal contact information is shared without your knowledge.
- Fabric suppliers — where sourcing requires direct contact with a supplier on your behalf
- Analytics providers — anonymised, aggregated website usage data only
We do not transfer personal data outside Malaysia unless required by law or with your explicit consent.
5. Cookies
Our website uses cookies to store your consent preferences and to collect aggregated website usage data. We use essential cookies (required for the website to function) and optional analytics and preference cookies. You can manage your cookie preferences at any time through our Cookie Policy page.
6. Data Retention
Project files, including correspondence, specifications, and photographs, are retained for a period of five years after the completion of an engagement. Contact form submissions that do not result in an engagement are retained for up to twelve months. Website analytics data is retained in anonymised form. You may request deletion of your data at any time (see Section 7).
7. Your Rights
Under the PDPA and applicable Malaysian law, you have the right to:
- Request access to the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your personal data, subject to legal retention obligations
- Withdraw consent to data processing at any time, without affecting the lawfulness of prior processing
- Object to processing carried out on the basis of legitimate interests
- Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP)
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.
8. Data Security
We store project files and correspondence using password-protected systems. Our website uses HTTPS encryption. Access to personal data is limited to Krienta personnel directly involved in the project. In the event of a data breach that may affect your rights, we will notify you and the relevant authority in accordance with PDPA requirements.
9. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We recommend reviewing their privacy policies before providing any personal data.
10. Children
Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.
11. Policy Updates
We may update this policy from time to time to reflect changes in our practices or applicable law. The current version will always be available on this page. Material changes will be communicated by updating the Last Updated date above. Continued use of our website or services after any change constitutes acceptance of the updated policy.
12. Contact
Data controller:
Krienta
Jalan Telawi 5, Bangsar Baru, 59100 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3-2287 8439