Privacy Policy

Tylum ("we", "us", "our") is committed to handling personal data with care and transparency. This policy explains what information we collect, why we collect it, how it is used, and your rights in relation to it. It applies to visitors and clients of our website and services.

1. Who we are

Tylum is an interior design studio based at 10 Jalan Batai, Bukit Damansara, 50490 Kuala Lumpur, Malaysia. We are the data controller for personal information collected through this website and in the course of providing design services. For privacy enquiries, contact us at privacy@tylumjf.

2. What data we collect

We collect only the information necessary to communicate with you and deliver our services:

• Contact details you provide via enquiry forms — name, email address, phone number
• Details about your property or project shared during consultations or correspondence
• Communications between you and Tylum (email, phone, messaging)
• Technical data from website visits — IP address, browser type, pages visited, session duration (via cookies)
• Payment and invoicing information where applicable

3. How we collect data

• Directly from you via the contact form on this website
• Through email, phone, or in-person consultation
• Automatically via cookies and analytics tools when you visit our website

4. Legal basis for processing

We process your personal data on the following grounds under the Personal Data Protection Act 2010 (PDPA) of Malaysia:

• Your consent, where you have provided it (e.g., submitting an enquiry form)
• Performance of a contract, when you engage our services
• Legitimate interest, for website analytics and improving our service quality
• Legal obligation, where required by Malaysian law

5. How we use your data

• Responding to enquiries and scheduling consultations
• Delivering design services as agreed
• Sending project-related communications and updates
• Processing payments and maintaining financial records
• Analysing website usage to improve content and performance
• Complying with legal and regulatory obligations

We do not use your personal data for automated decision-making, and we do not sell it to third parties.

6. Data retention

Client project files are retained for a period of seven years following project completion, in line with standard commercial practice in Malaysia. Website analytics data is retained for 26 months. Enquiry data from non-converting contacts is deleted after 12 months.

7. Sharing of data

We share personal data only where necessary:

• With contractors or suppliers directly involved in your project, with your knowledge
• With service providers who support our operations (hosting, email, accounting) under data processing agreements
• With legal or regulatory authorities where required by law

No personal data is transferred outside Malaysia except where explicitly required by a service tool, and only with appropriate protections in place.

8. Cookies

Our website uses cookies to understand how visitors use the site and to maintain basic functionality. You can manage cookie preferences via our Cookie Policy page, which includes controls for optional cookie categories.

9. Data protection measures

• Website served over HTTPS with current SSL encryption
• Client files stored in password-protected environments with restricted access
• Staff access to personal data limited to those with a direct need
• Breach notification procedures in place, with notification to affected individuals and the Personal Data Protection Commissioner as required

10. Your rights

Under Malaysia's PDPA and applicable data protection principles, you have the right to:

• Access personal data we hold about you
• Request correction of inaccurate data
• Withdraw consent where processing is based on consent
• Request deletion of data in certain circumstances
• Object to specific types of processing
• Lodge a complaint with Malaysia's Personal Data Protection Commissioner

To exercise any of these rights, write to us at privacy@tylumjf. We will respond within 21 days.

11. Third-party links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

12. Children's privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us immediately.

13. Changes to this policy

We may update this policy from time to time. Material changes will be noted on this page with an updated date. Continued use of our website following any update constitutes acceptance of the revised policy.

14. Contact

For any privacy-related questions: privacy@tylumjf
Tylum, 10 Jalan Batai, Bukit Damansara, 50490 Kuala Lumpur, Malaysia