Privacy Policy
Last Updated: 15 April 2025
This policy applies to Canopy & Grain (the "Studio", "we", "us", "our") and describes how we handle personal information in connection with our interior design services and this website.
1. Introduction & Commitment
Canopy & Grain respects the privacy of every person who contacts us, engages our services, or visits our website. We collect only the personal information necessary to provide our services or respond to enquiries, and we handle that information with care and discretion.
This policy applies to all personal data processed by Canopy & Grain, a business registered and operating in Malaysia under the Personal Data Protection Act 2010 (PDPA).
2. Information We Collect
Information You Provide Directly
- Name, email address, phone number submitted via contact forms
- Project details, address, and preferences shared during consultations
- Correspondence by email, phone, or in writing
Information Collected Automatically
- Browser type, IP address, and pages visited (via analytics tools)
- Cookie data as described in our Cookie Policy
Data Retention
Enquiry data is retained for up to 24 months. Client project data is retained for up to 7 years for business record purposes. Analytics data is retained for up to 14 months.
3. How We Use Your Information
- Responding to enquiries and arranging consultations
- Delivering design services and managing active projects
- Sending project updates, invoices, and related correspondence
- Improving our website and understanding how visitors use it
- Complying with applicable legal and regulatory obligations
We do not use personal data for automated decision-making or profiling. We do not sell or rent personal data to any third party.
4. Legal Basis for Processing
We process your personal data on the following bases:
- Consent — when you submit an enquiry form or opt into communications
- Contract performance — when you engage our services
- Legitimate interests — for website analytics and studio operations
- Legal obligation — where required by Malaysian law
5. Data Protection Measures
We take reasonable technical and organisational measures to protect personal information from unauthorised access, disclosure, or loss. These include:
- HTTPS encryption on all web communications
- Access controls limiting who can view client data internally
- Regular review of data handling practices
- Prompt notification of any breach affecting client data, as required by law
6. Sharing Your Information
We do not share personal information with third parties except in the following circumstances:
- With service providers who assist us (e.g., website hosting, email delivery) — bound by confidentiality obligations
- With contractors or craftspeople as required to deliver a project you have engaged us for — only the information necessary for that purpose
- Where required by law or a competent regulatory authority in Malaysia
7. Cookies
Our website uses cookies. Please read our Cookie Policy for full details on how cookies are used and how you can manage your preferences.
8. Your Rights Under Malaysian PDPA
Under the Personal Data Protection Act 2010, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Withdraw consent to processing at any time
- Object to processing for direct marketing purposes
To exercise any of these rights, contact us at privacy@canopyan. We will respond within 21 days.
9. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
10. Children's Privacy
Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us and we will remove it promptly.
11. Policy Updates
We may update this policy from time to time. The current version will always be available on this page with a revised "Last Updated" date. Continued use of our website or services after any update constitutes acceptance of the revised terms.
12. Contact
For privacy-related enquiries, data access requests, or concerns:
- Email: privacy@canopyan
- Post: Canopy & Grain, 30 Jalan Beringin, Bukit Damansara, 50490 Kuala Lumpur, Malaysia
- Phone: +60 3-2096 5271