Legal

Privacy Policy

Last Updated: 15 April 2025  ·  Effective: 15 April 2025

Atria Works ("we", "us", "our") respects the privacy of everyone who engages with our services. This policy explains what personal data we collect, why we collect it, how it is used and protected, and what rights you have over it. It applies to all persons who visit our website at atriawor or engage us for interior design services.

This policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Data We Collect

We collect personal data in the following ways:

• Contact forms: Name, email address, phone number, and message content when you submit an enquiry via our website.
• Service engagement: Name, address, phone number, payment details, and project-related communications when you commission a service.
• Site usage: Anonymous analytics data collected via cookies (browser type, pages visited, time on site). This data cannot identify you individually.
• Email correspondence: Any personal information you include in messages sent to us directly.

2. How We Use Your Data

• To respond to enquiries submitted via our website contact form.
• To deliver the interior design services you have engaged us for.
• To manage ongoing project communication and documentation.
• To send service-related information, invoices, or follow-up correspondence.
• To improve our website based on anonymous usage analytics.
• We do not use your personal data for marketing purposes without your explicit consent.

3. Legal Basis for Processing

We process personal data on the following grounds:

• Consent: When you voluntarily submit a contact form or agree to marketing communications.
• Contract performance: When processing is necessary to deliver services you have engaged us for.
• Legitimate interest: For internal analytics and service improvement.
• Legal obligation: Where required to retain records for tax or business compliance under Malaysian law.

4. Data Retention

• Enquiry data from the contact form is retained for up to 12 months.
• Project documentation and client correspondence is retained for 7 years for legal and accounting compliance.
• Analytics data is retained in anonymised form for up to 24 months.
• Data is securely deleted after these periods unless a legal obligation requires longer retention.

5. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with:

• Service providers: Trusted third parties who assist with website hosting, email delivery, or business operations — under strict confidentiality agreements.
• Contractors: Only the minimum data necessary (name, contact number) when coordinating your renovation on your behalf, and only with your knowledge.
• Legal authorities: Where required by Malaysian law or court order.

6. Cookies

Our website uses cookies to understand how visitors use our site and to remember preferences. For full details, including how to manage or disable cookies, please see our Cookie Policy.

7. Data Security

• All data transmitted via our website is encrypted using HTTPS/TLS.
• Access to client data is restricted to Atria Works team members with a legitimate reason to access it.
• Project documentation is stored on access-controlled systems and is not shared publicly.
• In the event of a data breach, affected individuals will be notified in accordance with PDPA obligations.

8. Third-Party Links

Our website may contain links to external sites. Atria Works is not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party websites you visit.

9. Children's Privacy

Our services are intended for adults. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that data from a minor has been submitted, we will delete it promptly.

10. Your Rights Under PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or outdated data.
• Withdraw consent to data processing at any time (this does not affect processing already completed).
• Request deletion of data we are no longer legally required to retain.
• Object to processing carried out under legitimate interest.

To exercise any of these rights, contact us at privacy@atriawor. We will respond within 21 days.

11. Changes to This Policy

We may update this policy from time to time. The most recent version will always be available at this URL with an updated "Last Updated" date. Continued use of our website after changes constitutes acceptance of the revised policy.

12. Contact

For any privacy-related queries or requests:

• Email: privacy@atriawor
• Post: Atria Works, 16 Jalan PJU 5/9, Kota Damansara, 47810 Petaling Jaya, Selangor, Malaysia