Legal
Privacy Policy
Last updated: 15 April 2025
1. Introduction
Plith ("we", "us", "our") is committed to handling the personal information of clients, enquirers, and website visitors with care and transparency. This Privacy Policy explains what data we collect, how we use it, and what rights you have in relation to it.
This policy applies to personal data collected through our website at plithjf.site, through direct communications with our studio, and during the delivery of our interior design services.
Our processing of personal data is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia.
2. Data We Collect
We collect only the information that is reasonably necessary for us to respond to your enquiry or deliver our services. This may include:
- Your name, email address, and phone number (submitted via our contact form or direct communication)
- The address or description of the property you're enquiring about (shared voluntarily during project discussions)
- Notes and records from consultations and site visits, with your knowledge
- Technical data collected automatically: browser type, IP address, pages visited, and visit duration (via analytics cookies, if consented)
We do not collect sensitive personal data (as defined under PDPA) through standard service operations.
3. How We Use Your Data
Personal data collected is used for the following purposes:
- To respond to your enquiry and discuss your project
- To deliver and manage the interior design services you've engaged us for
- To communicate project updates, schedules, and documentation
- To send follow-up information about our services where you have expressed interest
- To improve our website through anonymised analytics data
- To comply with applicable legal and regulatory obligations
The legal basis for processing is typically consent (for enquiries) or performance of a contract (for active project engagements).
4. Data Retention
We retain personal data for as long as necessary for the purposes described above:
- Enquiry data (no project commenced): up to 12 months from last contact
- Active and completed project data: up to 5 years from project completion, for contractual and legal record purposes
- Analytics data: as configured in our analytics platform, typically 14 months
After these periods, data is securely deleted or anonymised.
5. Data Sharing
We do not sell personal data. We may share it in the following limited circumstances:
- With contractors, suppliers, or tradespeople directly involved in delivering your project — only the information they need to carry out their work
- With analytics service providers (where cookies are consented to), under data processing agreements
- If required by law, regulation, or court order
Any third party with whom we share personal data is expected to treat it with equivalent care and in compliance with applicable data protection law.
6. Data Security
We take reasonable precautions to protect personal data from unauthorised access, loss, or misuse. This includes:
- HTTPS encryption on our website
- Access controls limiting who can view client data
- Secure handling of physical project documentation
No method of transmission over the internet is entirely secure. If you are concerned about the sensitivity of information you wish to share, please contact us to discuss alternative arrangements.
7. Cookies
We use cookies to improve website functionality and, where consented, to understand how visitors use our site. Full details are available in our Cookie Policy.
You can manage your cookie preferences at any time through that page or through your browser settings.
8. Your Rights
Under Malaysia's PDPA and where applicable, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Withdraw consent for data processing at any time (without affecting processing already carried out)
- Request that we cease using your data for direct marketing purposes
- Ask questions about how your data is being used
To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.
9. Project Photography
We do not photograph or publish images of completed projects without your explicit written consent. If you wish to grant or withdraw such consent, please contact us directly.
10. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their policies before submitting any personal information.
11. Children's Privacy
Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.
12. Updates to This Policy
We may update this policy from time to time. Where changes are material, we will notify existing clients by email. The updated policy will always be accessible at plithjf.site/privacy-policy.html.
13. Contact
For privacy-related queries, please contact us:
- Email: [email protected]
- Address: Plith, 12 Jalan Damai, Off Jalan Ampang, 55000 Kuala Lumpur, Malaysia