Privacy Policy

1. Introduction

Forma Haus ("we", "us", "our") is committed to handling personal information responsibly. This Privacy Policy describes what information we collect when you use our website or engage with our services, how we use it, and your rights in relation to it.

If you have any questions about this policy or how we handle your data, please contact us at [email protected].

2. Data We Collect

We collect personal data through the following means:

• Contact form submissions: name, email address, phone number (optional), and any message content you provide.
• Email and telephone enquiries: name and contact details you share when reaching out to us directly.
• Cookies and analytics: technical data about how visitors use our website. See section 5 for details.

We do not collect sensitive categories of personal data unless you choose to share them. We do not purchase marketing lists or acquire data from third-party brokers.

3. How We Use Your Data

We use the personal information we collect for the following purposes:

• To respond to enquiries and schedule consultations
• To deliver the interior design services you have engaged us for
• To communicate project updates and relevant information during an active engagement
• To send occasional updates about our work, if you have consented to receive them
• To understand website usage patterns and improve our online presence

The legal basis for processing your data is consent (where you have provided it), legitimate interest (responding to your enquiries), and contract performance (delivering services you have engaged us for).

4. Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this policy:

• Enquiry records: up to 12 months if no project engagement follows
• Project-related communications and documents: up to 5 years following project completion
• Financial records: in accordance with applicable Malaysian legal requirements (typically 7 years)

5. Cookies

Our website uses cookies to function properly and to understand how visitors use the site. Essential cookies are necessary for the website to work. We also use optional analytics cookies to review site usage in aggregate form.

You can manage your cookie preferences through the cookie consent banner on our homepage or via our Cookie Policy page. Declining optional cookies will not affect your ability to use the website.

6. Data Sharing

We do not sell, rent, or trade your personal data. We may share limited information with the following parties only where necessary to deliver our services:

• Website analytics platforms (Google Analytics) — aggregate, anonymised data only
• Suppliers or contractors — limited contact details where required for Implementation Support engagements, with your knowledge
• Professional advisors (accountants, legal counsel) — where necessary for business administration and subject to confidentiality obligations

Any third parties we engage are required to handle your data with appropriate care and only for the purposes we specify.

7. Data Protection Measures

We take reasonable precautions to protect personal data from unauthorised access, loss, or misuse. These include:

• Secure, encrypted communications where possible
• Access restricted to team members who require it for their work
• Secure cloud storage with access controls
• Prompt notification if a data breach is detected

8. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Withdraw consent to processing at any time
• Request that we cease processing your data for direct marketing
• Lodge a complaint with Malaysia's Personal Data Protection Commissioner

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

10. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our website, please contact us and we will remove it promptly.

11. Policy Updates

This policy may be updated occasionally to reflect changes in our practices or applicable law. The updated date at the top of this page indicates when it was last revised. Continued use of our website after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related enquiries: