This policy explains how Amber Loft Studio Sdn Bhd (Company No. 202101038462 / 1425519-T), of 22, Jalan Ampang Hilir, 55000 Kuala Lumpur, Malaysia ("the Studio", "we"), handles personal data in connection with this website, lawncare.my, and our design and build services. We process personal data in accordance with the Personal Data Protection Act 2010 of Malaysia ("PDPA").
1. What we collect
We collect only what a design practice genuinely needs:
- Enquiry details — your name, email address, mobile number, project type and anything you write in the brief field of our contact form.
- Project information — if you engage us: your property address, floor plans, photographs of your premises, and billing details.
- Technical data — basic server logs (IP address, browser type, pages visited) generated automatically when you browse this site, and the cookies described in our Cookie Policy.
2. Why we collect it
We use personal data to respond to enquiries, prepare proposals, perform design and construction contracts, obtain permits from building managements and local authorities on your behalf, invoice for our services, honour warranty obligations, and comply with Malaysian law, including tax and company record-keeping requirements.
3. Consent and choice
Submitting our contact form constitutes consent to be contacted about your enquiry. We do not send marketing newsletters, and we will never add you to a mailing list simply because you asked us a question. You may withdraw consent at any time by writing to [email protected].
4. Who sees your data
Within the Studio, access is limited to the team working on your enquiry or project. We disclose data to third parties only where a project requires it — for example, consulting engineers, your building's management office, or local authorities processing renovation permits — and only the minimum each party needs. We do not sell, rent or trade personal data to anyone, ever.
5. Where and how long we keep it
Enquiry data is stored on secured systems located in Malaysia. Enquiries that do not become projects are deleted within twelve months. Project records, including contracts and drawings, are retained for seven years after handover to serve warranty claims and satisfy statutory record-keeping, after which they are securely destroyed.
6. Security
We protect personal data with access controls, encrypted storage for project files, and staff confidentiality undertakings. No internet transmission is perfectly secure, but we take reasonable practical steps — the standard the PDPA requires — to guard against loss, misuse and unauthorised access.
7. Your rights
Under the PDPA you may request access to the personal data we hold about you, ask us to correct inaccurate data, and withdraw consent to further processing. Write to [email protected] or post a request to the address above; we respond within twenty-one days.
8. Changes to this policy
If we change this policy, the revised version will appear on this page with a new revision date. Material changes affecting active clients will be notified by email.
9. Contact
Questions about this policy: [email protected] or +60 12-336 8154.