Who we are
This website is operated by EkoVault Atelier Sdn Bhd (“we”, “us”, “the studio”), a private limited company registered in Malaysia under company number 202101038657 (1432708-K), with its principal place of business at Lot 18-G, Jalan PJU 5/20, The Strand, Kota Damansara, 47810 Petaling Jaya, Selangor, Malaysia. For privacy queries you can write to [email protected] or call +603 7610 8524.
What this policy covers
This policy describes what personal data we collect about you when you interact with our website (ekovault.pro), when you commission furniture from us, when you visit the studio by appointment, and when you correspond with us by any other channel. It is written to comply with the Personal Data Protection Act 2010 of Malaysia and to give you a clear, plain-language picture of what happens to your information.
What we collect, and why
Enquiry data
When you submit the contact form we collect your name, email address, optional phone number, your selected area of interest, your message and any attached files. We use this information solely to reply to the enquiry, prepare a sketch or proposal where appropriate, and follow up on the conversation if you have asked us to.
Commission data
If we agree to take on a commission, we additionally collect your delivery address, billing details where different, the agreed scope and timeline, and any preferences or measurements relevant to the build. This information is retained for the life of the commission plus the warranty period.
Website usage data
Our hosting provider keeps standard server access logs containing IP address, browser user-agent, referring page and pages visited. These are kept for thirty days for the purpose of detecting abuse and diagnosing site faults, then automatically deleted.
Lawful basis
We process enquiry data on the basis of your consent (which you provide by submitting the form), commission data on the basis of contract performance, and website log data on the basis of our legitimate interest in operating a secure website.
Who sees your data
Inside the studio, your data is accessible to the five team members and any contracted accountant or auditor we engage for statutory filings. We do not sell, rent or trade personal data to third parties. Where we use service providers — email hosting (a Malaysian-based provider), accounting software, payment processors for deposits — they are bound by contract to use the data only for the service they provide to us.
How long we keep it
- Enquiries that do not lead to a commission: 18 months from last contact, then deleted.
- Commission records: 10 years from delivery, to support our structural warranty.
- Statutory tax records: 7 years from the relevant financial year, as required by Malaysian law.
- Marketing newsletter subscribers (if applicable): until you unsubscribe.
Your rights
Under the PDPA you have the right to request access to the personal data we hold about you, request corrections, withdraw consent to ongoing processing, and lodge a complaint with the Personal Data Protection Commissioner. To exercise any of these rights, write to [email protected]. We will respond within fourteen working days.
Security
Form submissions are protected by a session-bound token and transmitted over HTTPS. Stored data sits on systems with multi-factor authentication, access logging and full-disk encryption. We do not collect payment card numbers directly — deposits are processed through a Malaysian licensed payment gateway.
International transfers
All personal data is stored on servers physically located within Malaysia. We do not transfer data to any country outside Malaysia for the purposes of operating this website or fulfilling commissions.
Updates to this policy
If we change anything material about how we handle personal data, we will update this page and revise the effective date at the top. If you have an active commission with us, we will additionally notify you by email.