Legal
Privacy Policy
Last Updated: 14 April 2025
Grael ("we", "us", "our") is committed to handling personal information with care and transparency. This Privacy Policy explains what data we collect when you use our website or engage our services, how we use it, and what rights you have regarding that information. We operate from 26 Jalan Tun Sambanthan, Brickfields, 50470 Kuala Lumpur, Malaysia.
1. Data We Collect
Information you provide directly
When you submit our contact form or reach out by email or phone, we may collect:
- Your name
- Email address
- Phone number (if provided)
- Details about your property or project you choose to share
Information collected automatically
When you browse our website, we may collect limited technical information through cookies and analytics tools, including your approximate location (country/city level), pages visited, and how long you spent on each page. See our Cookie Policy for details.
2. How We Use Your Data
We use the information we collect for the following purposes:
- Responding to your enquiry or project brief
- Communicating project progress, updates, and documentation
- Scheduling consultations or site visits
- Improving the content and usability of our website
- Complying with any applicable legal obligations
We do not use your personal information for unsolicited marketing. If you would like to hear from us about studio news or project showcases, you are welcome to subscribe — but this is entirely optional.
Legal basis for processing (Personal Data Protection Act 2010, Malaysia)
Under Malaysia's Personal Data Protection Act 2010 (PDPA), we process your data based on your consent (given when you submit our contact form) and, where applicable, the legitimate interest of responding to a service enquiry.
3. Data Sharing
We do not sell or rent your personal data. We may share limited information with:
- Service providers: Tools we use to operate our website (e.g. analytics providers). These operate under data processing agreements.
- Project partners: If you engage our Studio-to-Site service, relevant project details may be shared with contractors you have approved for your project.
- Legal authorities: If required by Malaysian law or a valid legal process.
Any third party we share data with is required to handle it in accordance with applicable data protection laws.
4. Data Retention
We retain your personal data only as long as necessary for the purposes described in this policy. Generally:
- Enquiry data: 12 months from last contact, unless a project commences
- Project data: 5 years from project completion, for professional record-keeping
- Financial records: as required by Malaysian tax law
5. Data Security
We take reasonable steps to protect your information from unauthorised access, disclosure, or destruction. Our website uses HTTPS encryption. Internal access to personal data is limited to team members who need it to perform their work. In the event of a data breach that affects your rights, we will notify you as required under applicable law.
6. Cookies
Our website uses cookies to understand how visitors engage with the site and to improve your experience. You can manage cookie preferences via our Cookie Policy page. Essential cookies necessary for the site to function cannot be disabled.
7. Your Rights
Under Malaysia's PDPA and applicable data protection principles, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Withdraw consent to processing (where consent is the legal basis)
- Request deletion of your data (subject to legal retention requirements)
- Object to certain types of processing
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.
8. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
9. Children's Privacy
Our services are intended for adults (18+). We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us so we can remove it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website after changes are posted constitutes acceptance of the revised policy.
11. Contact
Questions or concerns about this policy or how we handle your data:
- Email: [email protected]
- Phone: +60 3-2275 3681
- Address: 26 Jalan Tun Sambanthan, Brickfields, 50470 Kuala Lumpur