Privacy Policy | Kelena Interior Design

Kelena ("we", "us", "our") is committed to handling personal information with care and transparency. This policy explains what data we collect, why we collect it, and how it is used and protected. It applies to all interactions with this website and with the studio directly.

1. Data Controller

The data controller is Kelena, an interior design studio operating from Jalan SS22, Damansara Jaya, 47400 Petaling Jaya, Selangor, Malaysia. For data-related enquiries, contact: privacy@{{DOMAIN}}.

2. Personal Data We Collect

We may collect the following categories of personal data:

Contact details: name, email address, phone number — provided when you submit an enquiry form or contact us directly.
Project information: details about your home, its location, and the nature of the design work you are considering — provided voluntarily during consultation.
Communications: records of correspondence, whether by email, phone, or message.
Website usage data: pages visited, time on site, browser type — collected via cookies and analytics tools if you consent.

We do not collect payment card data directly. Any payments processed through the studio are handled through separate, secure payment arrangements.

3. How We Collect Data

Directly from you — via the contact form, email, or telephone.
Through cookies and analytics — where consent has been provided via the cookie consent tool on this website.
During the course of a project engagement — where you provide project-specific details.

4. Legal Basis for Processing

We process personal data on the following bases under the Personal Data Protection Act 2010 (Malaysia) ("PDPA") and, where applicable, the General Data Protection Regulation:

Consent: for marketing communications and analytics cookies, where you have given explicit consent.
Contractual necessity: to perform services you have engaged us to provide.
Legitimate interest: to respond to enquiries, maintain records, and improve our services.
Legal obligation: where required by Malaysian law.

5. How We Use Personal Data

To respond to enquiries and provide quotations.
To carry out design services and manage project engagements.
To maintain records of our client relationships.
To send project-related communications during an active engagement.
To send occasional studio news or information, where you have consented.
To improve this website using aggregated, anonymised analytics data.

We do not sell personal data to third parties. We do not use personal data for automated profiling or decision-making.

6. Data Sharing

Personal data is shared only in the following circumstances:

Service providers: such as email hosting and project management tools, who process data on our behalf under data processing agreements.
Contractors and suppliers: where necessary to carry out project work, and only the minimum data required.
Legal requirements: where disclosure is required by Malaysian law or a court order.

Project photographs and client details are never used in marketing or shared publicly without written consent from the client.

7. Data Retention

Enquiry records not resulting in an engagement: 12 months.
Client project records: 7 years from project completion (for contractual and legal reasons).
Analytics data: as set by the analytics provider, typically 26 months.
Cookie consent records: 12 months.

8. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

Encrypted transmission (HTTPS) for all website communications.
Access controls limiting who within the studio can access client data.
Secure storage for project files and correspondence.
Prompt notification to affected individuals in the event of a data breach, as required under the PDPA.

9. Cookies

This website uses cookies for basic functionality and, where consent is given, for analytics. For a full explanation of the cookies used and how to manage your preferences, see our Cookie Policy.

10. Your Rights

Under the PDPA and applicable data protection law, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request erasure of your data (subject to legal retention requirements).
Object to processing based on legitimate interest.
Withdraw consent for any processing based on consent.
Receive your data in a portable format where technically feasible.

To exercise any of these rights, contact us at privacy@{{DOMAIN}}. We will respond within 21 days. For unresolved complaints, you may contact the Department of Personal Data Protection Malaysia (PDPD).

11. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their policies separately before sharing personal information.

12. Children's Privacy

Our services are directed at adults (18 and over). We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided us with personal information, please contact us and we will remove it promptly.

13. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We recommend reviewing this policy periodically. Continued use of our website or services following a change constitutes acceptance of the updated policy.

14. Contact Us

For any data protection enquiries, contact:

Email: privacy@{{DOMAIN}}
Address: Jalan SS22, Damansara Jaya, 47400 Petaling Jaya, Selangor, Malaysia