Privacy Policy

§ 1 Data Controller

The data controller responsible for personal data processed through this website is:

Ceiling Mork
19 Jalan Sri Hartamas 1, 50480 Kuala Lumpur, Malaysia
Telephone: +60 3 6203 7415
Email: [email protected]

§ 2 Personal Data We Collect

We collect personal data only where it is necessary to respond to your enquiry or to provide services. The categories of data collected include:

• Full name, as provided in a contact or enquiry form
• Contact telephone number
• Email address
• Property address or general area, where provided for service scheduling
• Description of the service requested or property context, as voluntarily written by you
• Technical data collected automatically — browser type, approximate location, pages visited, and visit duration — via analytics tools where consent has been given

We do not collect sensitive personal data as defined under the PDPA, including financial, health, or identification data such as MyKad or passport numbers.

§ 3 How We Use Personal Data

Personal data submitted through this website is used for the following purposes:

• To respond to your enquiry and arrange a service visit
• To confirm appointment details by telephone or email
• To provide the electrical service you have requested
• To send a written summary or diagram following a completed service, where applicable
• To contact you regarding a subsequent or related service, where you have not objected
• To improve this website through aggregated, anonymised analytics data

We do not use personal data for automated decision-making or profiling, and we do not use your personal data for purposes materially different from those described above without seeking your consent.

§ 4 Legal Basis for Processing

Under the PDPA 2010, we process personal data on the following bases:

• Consent — where you voluntarily submit a contact form or provide data for service scheduling
• Contractual necessity — where processing is required to deliver a service you have requested
• Legitimate interests — for business operations, appointment management, and service quality follow-up, where such interests are not overridden by your rights

§ 5 Data Sharing and Disclosure

We do not sell, rent, or trade personal data to third parties. Personal data may be shared in the following limited circumstances:

• With service technicians employed or engaged by Ceiling Mork, solely to fulfil a scheduled appointment
• With our technology service providers (e.g., email delivery, website hosting, analytics), who are contractually required to handle data securely and only for specified purposes
• Where required by law, regulation, or lawful order from a Malaysian authority

§ 6 Cookies and Tracking

This website uses cookies and similar tracking technologies. These are described in detail in our Cookie Policy. Analytics and advertising cookies are only activated where you have provided consent through the cookie notice on this website. You may withdraw that consent at any time by clearing your browser cookies.

§ 7 Data Retention

We retain personal data for as long as is reasonably necessary to fulfil the purpose for which it was collected, or as required by applicable law. In practice:

• Enquiry and contact form data is retained for up to 24 months from the date of submission
• Service records associated with a completed job are retained for up to five years, consistent with standard business recordkeeping
• Analytics data is retained in anonymised form only and does not constitute personal data under the PDPA

When personal data is no longer needed, it is deleted or anonymised in a manner consistent with PDPA obligations.

§ 8 Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Withdraw consent to the processing of your personal data, where consent was the basis for processing
• Request the cessation of processing your personal data for direct marketing purposes
• Be informed of the types of personal data held and the purposes for which it is used

To exercise any of these rights, contact us using the details in Section 9 below. We will respond within 21 days of receipt. We may ask you to verify your identity before fulfilling a request.

§ 9 Security of Personal Data

We apply reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. These include restricted access to contact records, secure email practices, and the use of reputable service providers with appropriate data handling standards. No method of transmission over the internet is entirely without risk; we take this obligation seriously and review our practices periodically.

§ 10 Changes to This Policy

We may update this privacy policy from time to time. The most recent version will always be available at this URL. Material changes will be noted at the top of the document with a revised effective date. Continued use of this website after a change constitutes acceptance of the updated policy.