Privacy Policy
Last revised: 2 June 2026
Paintbase Studio Sdn. Bhd. (“Paintbase”, “we”, “us”) operates the website at paintbase.my. This policy explains what personal data we collect, why we collect it, and the choices you have. We process personal data in accordance with the Personal Data Protection Act 2010 of Malaysia (“PDPA”).
1. Data we collect
We collect personal data in two ways only:
- Data you give us. When you submit our contact form or email us, we receive your name, email address, phone number if you choose to provide it, and whatever you write about your project.
- Data collected automatically. Standard server logs record IP addresses, browser type and pages requested. If you accept analytics cookies, we additionally collect anonymised usage statistics such as pages visited and time on page.
We do not collect sensitive personal data, and we ask that you do not send it to us.
2. Why we process it
- To reply to your enquiry and, if you engage us, to deliver our services and administer the engagement;
- To maintain the security and performance of this website;
- To understand, in aggregate, which pages are useful to visitors;
- To comply with legal obligations, including tax and accounting requirements.
We do not sell personal data. We do not share it with third parties for their marketing. We do not send marketing email unless you have expressly asked for it.
3. Legal basis and consent
Where processing is based on consent — such as analytics cookies — you may withdraw that consent at any time using the “Cookie settings” link in the footer of every page. Processing necessary to respond to your enquiry is based on your request itself.
4. How long we keep data
Enquiry correspondence is retained for up to twenty-four months after the conversation ends, then deleted. Data connected to a paid engagement is kept for seven years to satisfy Malaysian tax and accounting rules. Server logs rotate automatically after ninety days.
5. Where data lives and who can see it
Our website is hosted with a reputable provider on servers located in the Asia-Pacific region. Access to enquiry data is limited to Paintbase staff who need it to respond to you. We use established service providers for email and file storage; each is bound by its own contractual confidentiality and security obligations.
6. Your rights under the PDPA
You may request access to the personal data we hold about you, ask us to correct it, or withdraw consent to further processing. Write to [email protected] with the subject line “Data request” and we will respond within twenty-one days. We may need to verify your identity before acting on a request.
7. Security
We apply reasonable technical and organisational measures appropriate to a studio of our size: encrypted connections (HTTPS) across the site, access controls on internal systems, and prompt security updates. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
8. Third-party links
Pages on this site may link to external websites. We are not responsible for the privacy practices of those sites, and this policy does not extend to them.
9. Changes to this policy
If we change this policy, the revised version will appear on this page with an updated revision date. Material changes will be flagged plainly at the top of the page for thirty days.
10. Contact
Questions about this policy or about your personal data should go to Paintbase Studio Sdn. Bhd., Suite 8-03, Level 8, Menara Hap Seng 2, Jalan P. Ramlee, 50250 Kuala Lumpur, Malaysia, or [email protected].