Privacy Policy

1. Introduction

Cove & Detail ("we", "us", "our") is an interior design studio registered in Malaysia. We are committed to handling your personal information responsibly and in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This policy explains what data we collect, why we collect it, how it is used, and what rights you have in relation to it. If you have questions, contact us at privacy@coveandd.

2. Data We Collect

Information you provide directly

• Name and contact details (email address, phone number) submitted through our enquiry form
• Project information and descriptions you share during consultations
• Property address when a site visit is arranged
• Payment information processed through our payment provider
• Correspondence via email or telephone

Information collected automatically

• Browser type and device information
• Pages visited and time spent on site (via analytics cookies, where consent is given)
• IP address (anonymised where possible)
• Referral source (how you arrived at our website)

3. How We Use Your Data

We use personal data for the following purposes, under the legal bases indicated:

• Responding to enquiries — to reply to your contact form submission or telephone enquiry (Legitimate interest / pre-contractual necessity)
• Service delivery — to provide the consultation, design, and project management services you have engaged us for (Contractual necessity)
• Invoicing and accounting — to issue invoices and maintain financial records (Legal obligation)
• Project documentation — to maintain records relating to completed work (Legitimate interest)
• Website analytics — to understand how visitors use our site and improve the experience (Consent, where provided)

We do not use your data for unsolicited marketing without your consent, and we do not sell personal data to third parties.

4. Data Retention

• Enquiry data where no project followed: deleted after 12 months
• Project files and correspondence: retained for 7 years from project completion (in accordance with Malaysian accounting and liability requirements)
• Payment records: retained for 7 years as required by Malaysian law
• Analytics data: retained per the analytics provider's standard retention period (typically 26 months)

5. Data Sharing

We share personal data only where necessary and with appropriate safeguards:

• Contractors and suppliers — property address and relevant project details shared only as needed for service delivery, under confidentiality obligations
• Payment processor — payment data handled by our payment provider in accordance with their privacy policy; we do not store card details
• Analytics — anonymised usage data shared with Google Analytics (where consent is given)
• Professional advisors — accountants and legal advisors, under confidentiality obligations
• Regulatory authorities — where required by Malaysian law

We do not share client project details, property addresses, or personal information for marketing or research purposes.

6. Data Security

We take reasonable technical and organisational measures to protect your data:

• Email and file storage systems protected by multi-factor authentication
• Client project files stored in password-protected cloud storage with access restricted to the project team
• Physical documents relating to client projects stored securely on studio premises
• Staff access to personal data limited to what is necessary for their role

In the event of a data breach that affects your personal data, we will notify you promptly in accordance with our obligations under the PDPA.

7. Cookies

Our website uses cookies for basic functionality and, where consent is given, for analytics. For full details, see our Cookie Policy. You can manage your cookie preferences at any time through that page.

8. Your Rights

Under the Malaysian Personal Data Protection Act 2010, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request that inaccurate data be corrected
• Right to withdraw consent — for processing based on consent (such as marketing or analytics)
• Right to request deletion — subject to our legal and contractual obligations to retain certain records
• Right to object — to processing based on legitimate interest, in certain circumstances

To exercise any of these rights, contact us at privacy@coveandd. We will respond within 21 days.

If you are dissatisfied with our handling of a request, you may raise a complaint with the Department of Personal Data Protection Malaysia (JPDP): www.pdp.gov.my.

9. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of third-party websites and encourage you to read their privacy policies separately.

10. Children's Privacy

Our services are intended for adults (18 years and over). We do not knowingly collect personal data from individuals under 18. If you believe we have done so inadvertently, please contact us to have the data removed.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by posting the updated policy on this page with a revised date. Continued use of our services following any update constitutes acceptance of the revised policy.

12. Contact

Data Controller: Cove & Detail

48 Jalan Tun Razak, 50400 Kuala Lumpur, Malaysia
Email: privacy@coveandd
Telephone: +60 3-2168 5932