Privacy Policy

1. Introduction

Pusaka Works ("we", "us", "our") is committed to handling your personal data with care and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy explains what personal data we collect, how we use it, how we protect it and what rights you hold in relation to it.

This policy applies to all personal data collected through our website at pusakajw.cyou, through our contact form, and in the course of delivering the services we provide to clients.

For questions about this policy, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information — name, email address and telephone number submitted through our contact form or provided directly to us
• Correspondence — messages and notes exchanged during enquiries and service delivery
• Service records — information necessary to deliver the storage mapping, preservation or digitisation service, such as inventory lists and appointment records
• Website usage data — anonymised analytics data about how visitors use the site, collected through cookies where consent is given

Legal basis for processing (PDPA Malaysia): We process personal data on the basis of consent (where you submit a contact form or agree to cookie use), contract performance (to deliver a service you have engaged us for) and legitimate interest (to communicate with enquiring parties and maintain service records).

Retention: Contact enquiry data is held for 24 months from last contact. Service records are held for 7 years from project completion in line with standard business record-keeping practice. You may request deletion earlier (see Your Rights below).

3. How We Use Your Data

• To respond to your enquiry and discuss which service may suit your situation
• To schedule and confirm appointments
• To deliver the service you have engaged us for, including producing written maps, indexes and handover packs
• To issue invoices and maintain financial records
• To improve our website using anonymised analytics data
• To comply with our legal obligations under Malaysian law

We do not sell your personal data to third parties. We do not use your data for unsolicited marketing without your prior consent. We do not share client document content with any third party.

4. Data Sharing

We share personal data only in the following circumstances:

• Service providers — accounting software and email service providers who process data on our behalf under data processing agreements
• Legal requirement — where we are required to disclose data by law, court order or regulatory authority in Malaysia

We do not transfer personal data outside Malaysia except where a service provider requires it and appropriate safeguards are in place.

5. Data Security

We protect personal data using the following measures:

• Access to client records is restricted to members of the Pusaka Works team who require it to deliver the service
• Digital client project files are stored on encrypted devices
• Client document scans are delivered on encrypted local media and are not retained by us after project handover
• Our website uses HTTPS encryption for all data transmitted through contact forms

In the event of a personal data breach that is likely to affect your rights, we will notify you as required under the PDPA and report to the relevant authority within the required period.

6. Cookies

Our website uses cookies to function properly and to understand how visitors use the site. We use essential cookies (required for the site to operate) and, with your consent, analytics cookies to measure page visits. We do not use marketing cookies without your explicit consent.

For full details, see our Cookie Policy.

7. Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request correction of inaccurate or incomplete data
• Right to withdraw consent — to withdraw consent to processing at any time, where processing is based on consent
• Right to prevent processing — to request that we stop processing your data for direct marketing purposes
• Right to lodge a complaint — with the Department of Personal Data Protection Malaysia (Jabatan Perlindungan Data Peribadi)

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies before submitting personal data to them.

9. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently collected such data, contact us at [email protected] and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be noted at the top of this page with a revised date. Continued use of our services after a change is posted constitutes acceptance of the updated policy.

11. Contact

Data controller: Pusaka Works

No. 8, Jalan Perda Utama, Bandar Perda, 14000 Bukit Mertajam, Pulau Pinang, Malaysia

Email: [email protected]