Legal

Privacy Policy

Last Updated: 14 April 2025

Grael ("we", "us", "our") is committed to handling personal information with care and transparency. This Privacy Policy explains what data we collect when you use our website or engage our services, how we use it, and what rights you have regarding that information. We operate from 26 Jalan Tun Sambanthan, Brickfields, 50470 Kuala Lumpur, Malaysia.

1. Data We Collect

Information you provide directly

When you submit our contact form or reach out by email or phone, we may collect:

Information collected automatically

When you browse our website, we may collect limited technical information through cookies and analytics tools, including your approximate location (country/city level), pages visited, and how long you spent on each page. See our Cookie Policy for details.

2. How We Use Your Data

We use the information we collect for the following purposes:

We do not use your personal information for unsolicited marketing. If you would like to hear from us about studio news or project showcases, you are welcome to subscribe — but this is entirely optional.

Legal basis for processing (Personal Data Protection Act 2010, Malaysia)

Under Malaysia's Personal Data Protection Act 2010 (PDPA), we process your data based on your consent (given when you submit our contact form) and, where applicable, the legitimate interest of responding to a service enquiry.

3. Data Sharing

We do not sell or rent your personal data. We may share limited information with:

Any third party we share data with is required to handle it in accordance with applicable data protection laws.

4. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy. Generally:

5. Data Security

We take reasonable steps to protect your information from unauthorised access, disclosure, or destruction. Our website uses HTTPS encryption. Internal access to personal data is limited to team members who need it to perform their work. In the event of a data breach that affects your rights, we will notify you as required under applicable law.

6. Cookies

Our website uses cookies to understand how visitors engage with the site and to improve your experience. You can manage cookie preferences via our Cookie Policy page. Essential cookies necessary for the site to function cannot be disabled.

7. Your Rights

Under Malaysia's PDPA and applicable data protection principles, you have the right to:

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

9. Children's Privacy

Our services are intended for adults (18+). We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us so we can remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website after changes are posted constitutes acceptance of the revised policy.

11. Contact

Questions or concerns about this policy or how we handle your data: