Privacy Policy

Introduction

Woven Yard ("we", "us", "our") is an interior design practice based at 36 Jalan Taman Seputeh, 58000 Kuala Lumpur, Malaysia. We are committed to handling personal information responsibly and in compliance with the Personal Data Protection Act 2010 (PDPA), Malaysia.

This Privacy Policy explains what personal data we collect, how we use it, and the rights you have in relation to your information. If you have questions, please contact us at privacy@wovenyar.

Data We Collect

We collect the following categories of personal data when you use our website or contact us:

• Identity data — your full name
• Contact data — email address, phone number
• Enquiry data — the content of messages you send us
• Technical data — IP address, browser type, pages visited, time and date of visits (via cookies and analytics tools)
• Usage data — how you interact with our website

We do not collect sensitive personal data (such as health, racial origin, or financial account details) through our website or contact forms.

How We Collect Data

Personal data is collected through the following means:

• Contact and enquiry forms on our website
• Email and telephone communications
• Cookies and similar tracking technologies (with your consent)
• Third-party analytics platforms (Google Analytics)

Legal Basis for Processing

We process your personal data on the following legal bases under PDPA 2010:

• Consent — you have given clear consent for us to process your personal data for a specific purpose (e.g., signing up for updates or accepting analytics cookies)
• Contractual necessity — processing is necessary to take steps prior to or to fulfil a contract with you (e.g., responding to a service enquiry)
• Legitimate interests — processing is necessary for our legitimate business interests, such as understanding how our website is used, provided these interests do not override your rights

How We Use Your Data

We use collected personal data for the following purposes:

• Responding to your enquiries and messages
• Providing interior design consultation and services to clients
• Managing ongoing client projects and communications
• Improving our website and understanding how it is used
• Complying with legal obligations

We do not use your data for automated decision-making or profiling. We do not sell personal data to third parties.

Data Sharing

We do not sell, rent, or trade personal data. We may share data in the following limited circumstances:

• Service providers — third-party platforms that help us operate our website and communications (e.g., Google Analytics, email providers), bound by data processing agreements
• Legal requirements — where required by Malaysian law, court order, or regulatory authority
• With your consent — in any other circumstance where you have given explicit agreement

Data Retention

We retain personal data for the following periods:

• Enquiry and contact data: up to 24 months from last contact, unless an ongoing client relationship exists
• Client project records: up to 7 years following project completion for legal and business purposes
• Analytics data: as set by the respective third-party platform (typically 26 months for Google Analytics)
• Cookie consent records: 12 months

Data Protection Measures

We implement appropriate technical and organisational measures to protect personal data, including:

• Secure, password-protected systems for storing client data
• Access limited to authorised Woven Yard team members
• HTTPS encryption on our website
• Regular review of data held and deletion of unnecessary records

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and the relevant authority in accordance with PDPA obligations.

Cookies

Our website uses cookies to understand how visitors use the site and to remember consent preferences. Cookie types include essential (always active), analytics (optional), and preference (optional) cookies. You may manage your cookie preferences at any time through our Cookie Policy page.

Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Withdrawal of consent — withdraw consent to processing at any time (this will not affect the lawfulness of processing before withdrawal)
• Objection — object to processing based on legitimate interests in specific circumstances
• Erasure — request deletion of personal data where there is no compelling reason for continued processing

To exercise any of these rights, contact us in writing at privacy@wovenyar. We will respond within 21 days.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their respective policies before providing personal data.

Children's Privacy

Our services are intended for persons aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.

Changes to This Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. The most current version will always be available on this page, with the Last Updated date revised accordingly. Continued use of the website after an update constitutes acceptance of the revised policy.

Contact

For privacy-related enquiries, data access requests, or complaints:

If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).