Privacy Policy

1. Introduction

Somn Studio ("we", "us", "our") is committed to protecting the personal information you share with us. This Privacy Policy explains what data we collect, how we use it, how long we retain it, and what rights you have in relation to it. Somn Studio operates as an interior design practice based at 8 Jalan Ampang Hilir, 55000 Kuala Lumpur, Malaysia. Our practice is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia. By using our website or engaging our services, you confirm you have read and accepted this policy.

2. Data We Collect

We collect personal data in the following ways:

• Contact form submissions: Name, email address, phone number, and any message content you provide.
• Project engagement: Address or location of the property being designed, preferences, budget information, and other details relevant to delivering our services.
• Website usage: Through cookies and analytics tools, we may collect anonymised data on how visitors interact with our website (pages visited, session duration, browser type). See our Cookie Policy for more detail.
• Email correspondence: Content of messages you send to us and responses we provide.

We do not collect sensitive personal data (such as national identification numbers or financial account information) through our website. Payment details, where relevant, are handled through separate secure channels.

Legal basis: We process personal data with your consent (where you have provided it), for the performance of a contract (when delivering design services), and based on legitimate interests (responding to enquiries, improving our services).

Retention: Contact enquiry data is retained for up to 24 months. Project-related data is retained for up to 5 years following project completion, as may be required for professional records.

3. How We Use Your Data

• To respond to enquiries and schedule initial consultations
• To deliver the interior design services you have engaged us for
• To send service-related communications (project updates, document delivery)
• To improve our website and service delivery based on usage patterns
• To comply with applicable legal and professional obligations

We do not use your personal data for marketing communications unless you have separately opted in to receive them.

4. Data Sharing

We do not sell your personal data. We may share it in limited circumstances:

• Service providers: Third-party suppliers (e.g., contractors, furniture suppliers) may receive limited project details necessary to deliver your design. We do not share more than is needed.
• Analytics: Anonymised website usage data may be processed by tools such as Google Analytics, subject to their own privacy policies.
• Legal compliance: If required by law, court order, or regulatory authority, we may disclose relevant information.

5. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. This includes access controls on project files, secure email transmission, and periodic review of our data handling practices. In the event of a data breach that is likely to result in a risk to your rights, we will notify you and the relevant authorities in accordance with applicable law.

6. Cookies

Our website uses cookies to understand how visitors interact with our content. Essential cookies are necessary for the site to function. Analytics cookies are optional and require your consent. For full details, please see our Cookie Policy.

7. Your Rights

Under the Malaysian Personal Data Protection Act 2010 (PDPA), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request that we cease processing your data for direct marketing purposes
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Department of Personal Data Protection (JPDP) of Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

9. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our website, please contact us and we will promptly remove it.

10. Changes to This Policy

We may update this policy from time to time. Changes will be reflected with a revised "Last Updated" date at the top of the page. Continued use of our website after a policy change constitutes acceptance of the revised terms. For significant changes, we will make efforts to notify you directly.

11. Contact

For all privacy-related enquiries: