Privacy Policy

This policy explains what personal data we collect through oakio.pro and our workshop front desk, why we collect it, and the rights you hold under the Malaysian Personal Data Protection Act 2010 (PDPA). It is written in plain language on purpose; if anything is unclear, ask us.

1. Who is responsible

Oakio Woodworks Sdn. Bhd., Lot 23, Jalan Kilang Midah 4, Taman Midah Industrial Park, Cheras, 56000 Kuala Lumpur, Malaysia, is the data user for all personal data described here. Contact: [email protected] or +60 3-9174 2286.

2. What we collect

We collect only what a furniture project needs:

• Enquiry details — your name, email address, optional phone number and the project description you type into our quote form.
• Project records — measurements of your premises, photos of the installation space, drawings and correspondence, if you engage us.
• Billing information — invoicing name, address and payment references, kept for statutory accounting periods.
• Basic site data — server logs (IP address, pages requested, timestamps) kept briefly for security, and the cookies described in our Cookie Policy.

We do not collect data from anyone under 18 knowingly, and we never ask for identity card numbers for a quotation.

3. Why we use it

• To answer your enquiry and prepare quotations and drawings.
• To schedule measurements, deliveries and installations at your premises.
• To honour the workmanship warranty, which requires keeping project records for five years.
• To meet tax and company-law record obligations.

We do not send marketing newsletters, and we do not sell, rent or trade personal data. Ever.

4. Who sees it

Within the company, only the front desk and the project team assigned to your job. Outside it: our delivery subcontractor receives your address and phone number on installation day, our accountant sees invoices, and authorities may receive data where the law compels us. All three are bound to confidentiality.

5. How long we keep it

Enquiries that do not become projects are deleted after twelve months. Project files are kept for the five-year warranty term plus two years, then destroyed. Accounting records follow the seven-year statutory period under Malaysian law.

6. Security

Data lives on access-controlled systems; paper drawings are stored in the workshop office and shredded at end of retention. Transmission to this website is encrypted (HTTPS). No system is perfect, but we limit both what we hold and who can touch it.

7. Your rights under the PDPA

You may request access to the personal data we hold about you, ask us to correct it, withdraw consent for further processing, or require us to stop contacting you. Write to [email protected] with the subject “PDPA request”; we respond within 21 days. Withdrawing consent mid-project may limit our ability to complete the work, and we will explain any such consequence before acting.

8. Changes

If this policy changes materially, the effective date above changes with it and the new version is posted on this page. Continued use of the site after a change means acceptance of the revised policy.