Privacy Policy

1. Introduction

Oru Space ("we", "us", "our") is committed to handling your personal information with care and transparency. This Privacy Policy explains how we collect, use, store, and protect personal data when you interact with our website or engage our services. It is written in plain language so that you understand your rights and our obligations.

This policy applies to all personal data processed by Oru Space in connection with our interior design services and website at oruspace.site. We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

2. Data We Collect

2.1 Information You Provide

• Name, email address, and phone number submitted via our contact form
• Project details and property information shared during consultations
• Communication records — emails, messages, meeting notes
• Payment information (processed through secure third-party providers; we do not store card details)

2.2 Information Collected Automatically

• Browser type, device type, and IP address
• Pages visited and time spent on our website
• Referring URLs and search terms
• Cookie data (see our Cookie Policy for full details)

3. How We Use Your Data

We use personal information for the following purposes:

• Service delivery: to respond to enquiries, conduct consultations, and deliver design services
• Communication: to send project updates, invoices, and relevant correspondence
• Site improvement: to understand how our website is used and where we can improve it
• Legal compliance: to meet our obligations under Malaysian law

We process your data on the legal basis of contractual necessity (where you have engaged our services), legitimate interest (improving our website and services), and consent (for marketing communications, which you may withdraw at any time).

4. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described above. Project-related records are typically retained for 7 years for accounting and legal purposes. Website analytics data is retained for 26 months. You may request deletion of your data at any time — see Section 7 for your rights.

5. Data Security

We take reasonable measures to protect personal data from unauthorised access, loss, or misuse. These include:

• HTTPS encryption for all data transmitted via our website
• Access controls limiting data access to authorised team members only
• Regular review of our data handling practices
• Secure storage for physical project documents

In the event of a data breach that is likely to affect your rights, we will notify you as required under Malaysian law.

6. Sharing Your Data

We do not sell your personal data. We may share it with:

• Service providers: email hosting, analytics, and accounting software (under data processing agreements)
• Contractors: only where necessary to deliver your project, and only relevant project information
• Legal authorities: where required by Malaysian law or court order

7. Cookies

Our website uses cookies for analytics, preferences, and functionality. For full details on the types of cookies we use and how to manage them, please read our Cookie Policy.

8. Your Rights Under PDPA

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent for data processing where consent is the legal basis
• Request that we cease processing your data for direct marketing purposes
• Lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently before providing any personal information.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us and we will remove it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page will reflect the most recent revision. Continued use of our website after a policy update constitutes acceptance of the revised terms.

12. Contact

For privacy-related questions or to exercise your rights:

• Email: [email protected]
• Post: Oru Space, 33 Persiaran Zaaba, Taman Tun Dr Ismail, 60000 Kuala Lumpur