Privacy Policy

1. Introduction

Pendora ("we", "the studio") is an interior design practice based at Lebuh Pantai, George Town, Pulau Pinang, Malaysia. This Privacy Policy describes how we collect, use, and protect personal information provided in connection with enquiries and engagements relating to our heritage shophouse interior design services.

This policy applies to information collected through our website and through direct correspondence. By submitting an enquiry to Pendora, you acknowledge that your information will be handled as described here. Questions about this policy may be directed to [email protected].

2. Information We Collect

We collect only the personal information necessary to respond to enquiries and to conduct the services you engage us for. This includes:

• Name and contact details (email address, phone number where provided)
• Property address and description, where relevant to a service enquiry
• Correspondence and project-related documents shared with the studio
• Technical information collected automatically when you visit our website (see Section 5)

We do not request sensitive personal data and do not require it for any of our services.

Legal basis (Malaysia PDPA 2010): Processing of personal data is conducted on the basis of consent (where you submit an enquiry form), contractual necessity (where you engage our services), and legitimate interest (to respond to communications and maintain project records).

Retention: Enquiry data is retained for up to 24 months from last contact. Project documentation is retained for up to 7 years in accordance with standard professional practice obligations.

3. How We Use Your Information

Personal information is used for the following purposes:

• Responding to enquiries about our services
• Conducting heritage assessments, documentation, and on-site coordination services where engaged
• Communicating project progress and findings
• Maintaining accurate records of engagements for professional and legal purposes
• Improving our website based on aggregate usage data

We do not use personal information for direct marketing without your explicit agreement. We do not sell, rent, or share personal data with third parties for their own marketing purposes.

Where third-party specialist trades are engaged as part of a coordination service, only the property address and scope of works — not personal contact details — are shared, unless you specifically agree otherwise.

4. Data Protection Measures

Pendora takes reasonable technical and organisational measures to protect personal information against unauthorised access, loss, or disclosure. These include:

• Secure, password-protected file storage for project documentation
• Email encryption in transit (TLS) for all correspondence
• Access to personal data limited to studio staff directly involved in your engagement
• Regular review of data handling practices

In the event of a data breach involving your personal information, we will notify you and the relevant authority in accordance with our obligations under Malaysian law within a reasonable timeframe.

5. Cookies

Our website uses cookies to understand how visitors engage with our content. We use essential cookies (required for the site to function), analytics cookies (to understand visitor behaviour in aggregate), and preference cookies (to remember your consent choice).

You may accept or decline non-essential cookies using the banner displayed on your first visit. Your preference is stored in your browser's local storage. For full details, please read our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to personal data we hold about you:

• Access: to request a copy of the personal data we hold about you
• Correction: to request correction of inaccurate or incomplete data
• Withdrawal of consent: to withdraw consent to processing where consent is the legal basis, without affecting lawfulness of prior processing
• Objection: to object to processing conducted on the basis of legitimate interest
• Erasure: to request deletion of your data, subject to any legal obligations we have to retain it

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. Complaints about our handling of personal data may be referred to the Department of Personal Data Protection Malaysia.

7. Third-Party Links

Our website may include links to external resources — such as heritage conservation organisations or government property portals. We are not responsible for the privacy practices of third-party websites. We encourage you to read the privacy policy of any external site before submitting personal information.

8. Children's Privacy

Pendora's services are directed at property owners and adult decision-makers. We do not knowingly collect personal information from individuals under 18 years of age. If you believe a minor has submitted personal information to us, please contact us at [email protected] and we will remove it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. Continued use of our website or services following a change constitutes acceptance of the revised policy. For significant changes, we will make reasonable efforts to notify active clients directly.

10. Contact

For privacy-related enquiries, contact the studio at: