Privacy Policy

1. Introduction

Calico Dept ("we", "us", "our") is committed to handling your personal information with care and transparency. This policy explains what personal data we collect, how we use it, and what rights you have in relation to your information. We operate under Malaysian personal data protection law, specifically the Personal Data Protection Act 2010 (PDPA).

If you have questions about this policy, contact us at privacy@calicodep.

2. Data We Collect

We collect personal data in the following ways:

• Information you submit via our contact form (name, email, phone number, message content)
• Email correspondence and communications initiated by you
• Information shared during in-person briefings and property walkthroughs
• Technical data collected automatically when you visit our website (IP address, browser type, pages visited, time on site) via cookies and analytics tools

We do not collect sensitive personal data (such as financial details or identity documents) through our website.

3. How We Use Your Data

Personal data is used for the following purposes:

• Responding to enquiries submitted through our contact form
• Managing client projects and communicating about service delivery
• Sending information about our services that you have requested
• Improving website performance and user experience through analytics
• Complying with applicable legal obligations

We do not use your personal data for automated decision-making or profiling. We do not sell or rent your personal data to third parties.

4. Legal Basis for Processing

We process your personal data on the following grounds:

• Consent: When you submit a contact form or agree to cookies
• Legitimate interest: To respond to enquiries, manage client relationships, and improve our services
• Contract performance: When processing is necessary to deliver a service you've engaged us for
• Legal obligation: Where required by Malaysian law

5. Data Retention

We retain personal data for as long as reasonably necessary:

• Contact enquiry data: 12 months from initial contact if no project is initiated
• Active client project records: Duration of the project plus 3 years
• Financial and legal documentation: As required by Malaysian tax and business law (minimum 7 years)
• Website analytics data: 26 months (in line with standard analytics retention)

6. Data Sharing

We do not share personal data with third parties except in the following circumstances:

• Contractors and tradespeople involved in your project, where necessary for delivery of services you've engaged us for
• Third-party software providers (e.g., website analytics, email platforms) who process data on our behalf under data processing agreements
• Regulatory or legal authorities where required by law

Third-party tools used on our website may include Google Analytics. Their privacy policies apply to data processed by those services.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Secure HTTPS connections on our website
• Access controls limiting internal access to personal data
• Regular review of third-party service providers

In the event of a data breach that poses risk to individuals, we will notify affected parties and the relevant authority as required under Malaysian PDPA provisions.

8. Cookies

Our website uses cookies to improve functionality and understand visitor behaviour. You can manage cookie preferences via our cookie consent tool or through your browser settings. For full details, please see our Cookie Policy.

9. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for processing based on consent (this does not affect prior processing)
• Request that we cease processing your data for direct marketing purposes
• Lodge a complaint with the Department of Personal Data Protection (JPDP) if you believe your rights have been infringed

To exercise any of these rights, contact us at privacy@calicodep. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies separately.

11. Children's Privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of our website following any changes constitutes acceptance of the updated policy.

13. Contact

Calico Dept
14 Jalan Solaris 3, Mont Kiara, 50480 Kuala Lumpur, Malaysia
Email: privacy@calicodep
Phone: +60 3-6205 7184