Privacy Policy

1. Introduction

Novala ("we", "us", "our") is committed to protecting the personal information you share with us when enquiring about or using our interior design services. This policy explains what information we collect, how we use it, and the choices you have. It applies to all interactions with our website at novalaa and with our team directly.

Our processing activities are conducted in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Data Controller

The data controller is Novala, located at 19 Jalan Datuk Sulaiman, Taman Tun Dr Ismail, 60000 Kuala Lumpur, Malaysia. For data-related enquiries, contact us at privacy@novalaa.

3. Information We Collect

We collect personal data in the following ways:

• Contact forms: Name, email address, phone number, and any project details you provide when submitting an enquiry.
• Direct communications: Information shared via email, phone, or in-person meetings during the course of a project.
• Site usage data: Technical data such as browser type, IP address, and pages visited, collected via cookies and analytics tools (subject to your consent).

We do not collect sensitive personal data, financial account information, or data from minors under the age of 18.

4. Legal Basis for Processing

• Consent: Where you have provided explicit consent, such as subscribing to updates or accepting analytics cookies.
• Contractual necessity: Processing required to fulfil a service engagement you have entered into.
• Legitimate interests: For improving our services and maintaining communication with prospective clients, where these interests are not overridden by your rights.
• Legal obligation: Where required by applicable Malaysian law.

5. How We Use Your Information

• To respond to enquiries and provide design consultation services
• To communicate about your project throughout the engagement
• To send service-related updates or follow-up information (with your consent where required)
• To improve our website and understand how visitors interact with it
• To comply with applicable legal and regulatory obligations

We do not use your personal data for automated decision-making or profiling.

6. Data Retention

We retain enquiry data for up to 12 months if no project engagement follows. For active or completed client projects, we retain relevant records for up to 7 years from project completion to comply with Malaysian business record-keeping requirements. Analytics data is retained for a maximum of 26 months.

7. Third-Party Services

We may share data with trusted third-party service providers only where necessary:

• Google Analytics: Website analytics (if analytics cookies accepted)
• Email service providers: For sending transactional communications
• Cloud storage providers: Secure document storage for project files

We do not sell personal data to any third party. All processors are required to handle data in accordance with applicable data protection standards.

8. Data Protection Measures

We implement appropriate technical and organisational measures to protect your personal data, including:

• HTTPS encryption for all data transmitted via our website
• Access controls limiting who within Novala can access personal data
• Password-protected systems for storing client project documentation
• Regular review of our data handling practices

9. Cookies

Our website uses cookies to function properly and, with your consent, to understand how it is used. For full details of the cookies we use, please see our Cookie Policy.

10. Your Rights Under PDPA Malaysia

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent to processing at any time (where consent is the legal basis)
• Request erasure of your personal data, subject to legal retention requirements
• Object to processing based on legitimate interests

To exercise any of these rights, contact us at privacy@novalaa. We will respond within 21 days as required under the PDPA.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

12. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted information through our website, please contact us promptly and we will remove it.

13. Changes to This Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated on this page with an updated effective date. Continued use of our website following any update constitutes acceptance of the revised policy.

14. Contact for Privacy Enquiries

For questions about this policy or about how we handle your personal data:

• Email: privacy@novalaa
• Address: 19 Jalan Datuk Sulaiman, Taman Tun Dr Ismail, 60000 Kuala Lumpur, Malaysia
• Phone: +60 3-7726 9351