Privacy Policy

Sondira ("we", "us", "our") is a joinery design practice based at Jalan Doraisamy, Chow Kit, 50300 Kuala Lumpur, Malaysia. This Privacy Policy explains how we collect, use, store, and protect the personal information of people who visit our website or engage our services.

We take data handling seriously and collect only the information needed to communicate with enquirers and deliver our design services. For questions about this policy, contact us at [email protected].

1. Information We Collect

We collect the following personal data when you submit a contact form or correspond with us directly:

• Full name
• Email address
• Phone number (if provided)
• Details of your joinery project or enquiry (if included in your message)

We also collect technical data automatically when you visit our website, including:

• IP address and approximate location
• Browser type and operating system
• Pages visited and time spent on each page
• Referring website or search terms

Legal basis: Contact form submissions are processed on the basis of your consent. Website analytics are collected on the basis of our legitimate interest in understanding how the site is used. Service-related correspondence is processed as necessary for the performance of a contract or pre-contractual steps.

Retention: Enquiry data is retained for 24 months from last contact. Project documentation and related correspondence for active and completed clients is retained for 7 years in line with standard business record-keeping practice. Website analytics data is retained for 26 months.

2. How We Use Your Information

• To respond to your enquiry and discuss your joinery project
• To prepare and deliver briefs, sketches, and documentation packages under an engagement
• To share necessary project details with the cabinet maker engaged for your work (limited to what is required for the engagement)
• To invoice and process payments for services rendered
• To improve our website and understand how visitors use it
• To comply with legal obligations under Malaysian law

We do not use your personal data for unsolicited marketing. We do not share your data with advertising networks or data brokers.

3. Data Protection

• Website data is transmitted over HTTPS with SSL/TLS encryption
• Project files and correspondence are stored on access-controlled platforms with encryption at rest
• Access to client data is limited to Sondira team members directly involved in your engagement
• In the event of a data breach that affects your personal information, we will notify you within a reasonable timeframe as required under the Personal Data Protection Act 2010 (Malaysia)

4. Cookies

This website uses cookies. Essential cookies are required for basic site functionality. We may also use analytics cookies to understand how the site is used. You can manage your cookie preferences via the banner displayed on your first visit or through your browser settings.

For full details on the cookies used and how to manage them, see our Cookie Policy.

5. Your Rights

Under the Personal Data Protection Act 2010 (PDPA, Malaysia), you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may ask us to correct inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.
• Right to limit processing: In certain circumstances you may request that we restrict how we use your data.
• Right to lodge a complaint: If you have concerns about how we handle your data, you may contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

To exercise any of these rights, email [email protected]. We will respond within 21 days.

6. Third-Party Links

Our website may contain links to external sites — for example, to Google Maps for our location or to font delivery services. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party site you visit.

7. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If we become aware that we have received data from a minor, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the revised version will be posted on this page with an updated "Last Updated" date. Continued use of our website or services after a change constitutes acceptance of the revised policy.