Start a project

Privacy Policy

This policy describes how Kotak Impian collects, uses, and protects personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Some specifics (such as exact retention periods) are still being finalised and will be updated here; the practices below reflect how the site works today.

What we collect

  • Enquiry details you submit through the quote-request form or by email — your name, email, and any phone number, company, quantities, budget, or project description you choose to share.
  • Abuse-prevention data — when you submit the form we store a one-way hashed fingerprint of your IP address for rate-limiting and spam protection. Your raw IP address is never stored, and we record the time you gave consent.
  • Usage data — only if you accept analytics cookies (see below). Nothing analytical is collected until you opt in.

How we use it

To respond to your enquiry, prepare quotes, and communicate with you about your project; to keep the site secure; and, with your consent, to understand how the site is used so we can improve it. We do not sell your personal data.

Cookies & analytics

By default we set only strictly-necessary cookies needed for the site to function. Analytics and marketing tools load only after you opt in via the cookie banner. You can accept, reject, or choose individual categories, and change your mind any time through Cookie settings in the footer. Where enabled, these may include Google Analytics (usage measurement) and the Meta Pixel (ad measurement); each loads only for the category you allow.

Who processes your data

We use trusted service providers to run the site: Supabase (database hosting, Singapore region) for enquiry storage, Resend for email delivery, and Cloudflare Turnstile for bot protection. With your consent, analytics providers (Google, Meta) may also process usage data. Each processes data only to provide their service to us.

Retention

We keep enquiry data only as long as needed to serve your request and for our legitimate business records, after which it is deleted. Detailed retention schedules are being finalised.

Your rights

Under the PDPA you may request access to or correction of your personal data, withdraw consent, or ask us to delete it. To make a request, email hello@mykotakimpian.com.