At Lum Chang Brandsbridge Malaysia [Sdn. Bhd.] (“Lum Chang Brandsbridge Malaysia”, “we”, “our” or “us”), we recognise the importance of protecting the privacy and personal data of our clients, website visitors, business partners, suppliers, contractors, job applicants, and other individuals who interact with us.
This Privacy Policy explains how we collect, use, process, disclose, store, and safeguard your personal data when you visit our website, submit an enquiry, communicate with our team, engage our services, apply for career opportunities, or interact with us in connection with our business operations.
This Privacy Policy is intended to support our compliance with the Personal Data Protection Act 2010 of Malaysia, including any applicable amendments, regulations, guidelines, codes of practice, and other relevant data protection requirements.
By using our website, submitting your personal data to us, or continuing to communicate with us, you acknowledge that you have read and understood this Privacy Policy.
1. Personal Data We May Collect
We may collect personal data directly from you, from your organisation, from our website, from business communications, or from other lawful sources when you interact with us.
The types of personal data we may collect include:
- Full name
- Company name
- Job title or designation
- Email address
- Contact number
- Business address
- Billing address
- Project location or site address
- Enquiry details
- Service requirements
- Project brief, tender information, design requirements, drawings, floor plans, site photos, or related documents
- Communication records between you and our team
- Quotation, proposal, invoice, contract, and payment-related information
- Website usage data, such as IP address, browser type, device information, pages visited, time spent on the website, and interaction data
- Marketing preferences and communication preferences
- Information submitted through contact forms, enquiry forms, email, WhatsApp, phone calls, or social media channels
- Any other information you voluntarily provide to us
For job applicants, we may also collect:
- Resume or CV
- Employment history
- Education background
- Professional qualifications
- Portfolio or project experience
- References, where applicable
- Expected salary
- Availability or notice period
- Other information submitted as part of the recruitment process
We will only collect personal data that is necessary, relevant, and appropriate for the purposes stated in this Privacy Policy.
2. How We Collect Your Personal Data
We may collect your personal data when you submit an enquiry form on our website, contact us by phone, email, WhatsApp, social media, or other communication channels, request a quotation, proposal, consultation, or project discussion, or engage us for retail, commercial, interior fit-out, furniture fabrication, maintenance, or related services.
We may also collect your personal data when you visit our website, interact with our online advertisements, subscribe to updates, attend meetings, participate in site visits, submit project briefs, provide business documents, or apply for career opportunities with us.
In some cases, we may receive your personal data from your employer, colleagues, business partners, referrals, public business directories, suppliers, contractors, consultants, or other lawful sources.
3. Purpose of Collecting and Processing Personal Data
We collect and process your personal data for business, operational, administrative, marketing, recruitment, and legal purposes.
This includes responding to your enquiries, preparing quotations and proposals, arranging meetings and site visits, providing our services, managing project coordination, maintaining communication with clients and partners, processing contracts, handling invoices and payments, improving our website, and supporting our overall business operations.
We may also use your personal data to send service updates, company news, marketing communications, recruitment updates, or other information that may be relevant to your relationship with us.
Your personal data may also be processed for internal reporting, audit purposes, risk management, legal compliance, fraud prevention, security protection, dispute resolution, and the protection of our legitimate business interests.
Where required, we will obtain your consent before using your personal data for marketing or any other purpose that requires consent under applicable law.
4. Website, Cookies, and Tracking Technologies
Our website may use cookies and similar technologies to improve your browsing experience, analyse website traffic, and understand how visitors interact with our content.
Cookies help us remember browsing preferences, improve website functionality, measure page performance, understand user behaviour, and support online advertising or remarketing activities.
You may disable cookies through your browser settings. However, some parts of our website may function less effectively if cookies are disabled.
We may also use tools such as Google Analytics, Meta Pixel, LinkedIn Insight Tag, or similar platforms to understand website activity and improve our digital marketing performance. These tools may collect data based on your interaction with our website and online advertisements.
5. Disclosure of Personal Data
We may disclose your personal data to third parties where it is necessary for the purposes stated in this Privacy Policy.
These third parties may include our employees, authorised personnel, related companies, affiliates, group companies, contractors, subcontractors, consultants, architects, designers, engineers, project partners, suppliers, vendors, logistics providers, IT service providers, website hosting providers, cloud storage providers, payment processors, auditors, accountants, tax advisers, legal advisers, insurers, and professional consultants.
We may also disclose your personal data to government authorities, regulators, law enforcement agencies, statutory bodies, or any other party where required or permitted by law, regulation, court order, or legal process.
We will take reasonable steps to ensure that third parties who process personal data on our behalf protect your personal data and use it only for authorised purposes.
6. Cross-Border Transfer of Personal Data
Your personal data may be transferred, stored, or processed outside Malaysia where necessary, especially when we use cloud-based systems, international service providers, group company systems, or digital platforms.
Where personal data is transferred outside Malaysia, we will take reasonable steps to ensure that your personal data continues to be protected in accordance with applicable data protection requirements.
7. Security of Personal Data
We take reasonable security measures to protect your personal data from unauthorised access, misuse, loss, alteration, disclosure, or destruction.
These measures may include access controls, password protection, secure data storage, internal confidentiality practices, limited access for authorised personnel, regular review of data handling practices, and the use of reputable third-party platforms and service providers.
While we take reasonable steps to protect your personal data, no method of internet transmission, electronic storage, or digital communication is completely secure. You are encouraged to take care when sharing personal data online.
8. Retention of Personal Data
We will retain your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, unless a longer retention period is required or permitted by law.
The retention period may depend on the nature of your relationship with us, the duration of the project, post-project obligations, contractual requirements, legal requirements, tax requirements, accounting requirements, audit requirements, business record-keeping needs, and dispute resolution purposes.
When your personal data is no longer required, we will take reasonable steps to securely delete, anonymise, or dispose of it.
9. Accuracy of Personal Data
We aim to keep your personal data accurate, complete, and up to date.
You are responsible for ensuring that the personal data you provide to us is accurate and current. Please notify us if there are any changes to your personal data, such as your contact number, email address, company details, billing information, or other relevant details.
10. Your Rights
Subject to the Personal Data Protection Act 2010 and other applicable laws, you may request access to your personal data, request correction of inaccurate or incomplete personal data, withdraw your consent where processing is based on consent, request that we limit the processing of your personal data where applicable, request information on how your personal data has been used or disclosed, opt out of marketing communications, or request data portability where applicable under Malaysian law.
To exercise your rights, you may contact us using the details provided in Section 15 below.
We may request additional information to verify your identity before processing your request. We may also decline certain requests where permitted by law, such as where the request is unreasonable, affects the rights of others, or conflicts with our legal obligations.
11. Marketing Communications
We may use your contact details to send you updates, promotional materials, industry insights, event invitations, or information about our services.
You may opt out of receiving marketing communications from us at any time by clicking the unsubscribe link in our emails where available, contacting us directly, or informing our team that you no longer wish to receive marketing updates.
Even after you opt out of marketing communications, we may still contact you for service-related, contractual, administrative, or legal matters.
12. Third-Party Websites
Our website may contain links to third-party websites, platforms, or services.
This Privacy Policy only applies to Lum Chang Brandsbridge Malaysia’s website and activities. We are responsible for how we handle your personal data, but we are not responsible for the privacy practices, content, or security of third-party websites.
You are encouraged to review the privacy policies of third-party websites before providing any personal data to them.
13. Personal Data of Third Parties
If you provide personal data belonging to another person, such as your colleague, employee, representative, contractor, or referee, you confirm that you have obtained their consent to disclose their personal data to us.
You also confirm that they have been informed about the purposes of disclosure, made aware of this Privacy Policy, and that the personal data provided is accurate and up to date.
14. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business operations, legal requirements, or data protection practices.
The updated version will be posted on this page with the revised “Last Updated” date. You are encouraged to review this Privacy Policy periodically to stay informed about how we protect your personal data.
16. Consent
By using our website, submitting your personal data to us, communicating with us, engaging our services, or continuing to interact with us, you acknowledge that you have read and understood this Privacy Policy.
Where required by law, we will seek your consent before collecting, using, or disclosing your personal data for specific purposes.