This policy explains how Gardenbase Furniture Industries Sdn. Bhd. ("GardenBase", "we", "us"), of No. 23, Jalan TSB 8, Taman Industri Sungai Buloh, 47000 Sungai Buloh, Selangor, Malaysia, handles personal data collected through the website gardenbase.my and in the course of our furniture business. We process personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
1. What we collect
We collect only what a furniture project genuinely requires:
- Enquiry details — your name, email address, phone number and the description of your project, when you submit our contact form, call, or email us.
- Project information — site addresses, measurements and photographs of your space, gathered with your knowledge during measurement visits.
- Billing records — invoicing name, address and payment references, kept as required by Malaysian tax law.
- Technical data — basic server logs (IP address, browser type, pages requested) generated automatically when you browse this site, and the cookies described in our Cookie Policy.
2. Why we use it
Your data is used to respond to enquiries, prepare quotations and drawings, schedule measurement and installation visits, perform our contractual obligations, honour warranties, issue invoices, and keep records the law obliges us to keep. If you have engaged us before, we may occasionally contact you about the care of furniture we built for you. We do not send marketing blasts and we do not enrol you in newsletters you did not ask for.
3. Who sees it
Within GardenBase, access is limited to the staff working on your project. Outside GardenBase, data is shared only with: delivery and installation crews (your address and phone number, for the visit); our accounting firm (billing records); and authorities where disclosure is required by law. We do not sell, rent or trade personal data to anyone, ever.
4. How long we keep it
Enquiry data that does not become a project is deleted within 24 months. Project and warranty records are kept for the duration of the warranty plus two years. Billing records are retained for seven years as required under Malaysian tax legislation. Server logs rotate automatically within 90 days.
5. How we protect it
Data is stored on access-controlled systems, transmitted over encrypted connections, and backed up securely. Paper drawings and measurement sheets are stored in the workshop office and shredded when no longer needed. No system is perfect, but we treat your data with the same care we ask you to show our furniture.
6. Your rights under the PDPA
You may request access to the personal data we hold about you, ask us to correct it, withdraw consent to further processing, or ask us to delete data we are not legally obliged to keep. Write to [email protected] with "Data Request" in the subject line and we will respond within 21 days as the PDPA requires.
7. Third-party links
Pages on this site may link to external websites, including font services used to display this site's typography. Their privacy practices are their own; this policy covers only gardenbase.my.
8. Changes to this policy
If our practices change, this page changes first, with a new "last updated" date. Material changes affecting existing clients will be communicated by email.
9. Contact
Questions about this policy or your data: [email protected] or +60 3-7832 4415, or in writing to the workshop address above.