This policy explains how Brewpro Ceiling Systems Sdn Bhd ("Brewpro", "we", "us") handles personal data collected through brewpro.my and in the course of quoting and installing stretch ceiling work. We process personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
1. What we collect
- Enquiry details you type into our contact form: name, phone number, email address, the type of space and your project description.
- Project records created if you engage us: site address, measurements, photos of the work area, quotations and invoices.
- Basic technical data generated when you browse this site, such as pages visited and approximate region, where you have consented to analytics cookies (see our Cookie Policy).
2. Why we collect it
- To respond to your enquiry and prepare quotations you have requested.
- To schedule site measurements and installations and to deliver warranty service afterwards.
- To issue invoices and keep the accounting records Malaysian law requires.
- To understand, in aggregate, which parts of this website are useful.
We do not sell, rent or trade personal data. We do not send marketing broadcasts unless you have separately asked for them, and any such message will carry a working unsubscribe route.
3. Who can see it
Access is limited to the Brewpro staff who need it to serve you: the estimator answering your enquiry, the crew attending your site, and our accounts personnel. We share data outside the company only with service providers who help us operate (for example our hosting provider), under confidentiality obligations, or where the law compels disclosure.
4. How long we keep it
Enquiry data that does not become a project is deleted within 24 months. Project and warranty records are retained for the life of the warranty plus one year. Accounting records are kept for seven years as required by the Income Tax Act 1967.
5. Security
Data is stored on access-controlled systems, transmitted over encrypted connections, and backed up in encrypted form. No internet system is perfectly secure, but we treat your site photos and contact details with the same care as our own commercial records.
6. Your rights
Under the PDPA you may request access to the personal data we hold about you, ask us to correct it, or withdraw consent to further processing. Write to [email protected] or post to 23-2 (2nd Floor), Jalan USJ 10/1J, Taipan Business Centre, 47620 Subang Jaya, Selangor, Malaysia. We respond within 21 days.
7. Changes to this policy
If we change how we handle personal data, the revised policy appears on this page with a new revision date. Material changes affecting existing clients are notified by email.