Privacy Policy

1. Introduction

Luma Path ("we", "our", "us") is committed to handling your personal information with care and transparency. This policy explains what information we collect, how we use it, how long we retain it, and what rights you have in relation to it.

This policy applies to all personal information collected through our website at lumapath.pro, through enquiry forms, and in the course of providing our interior design services. By using our website or engaging our services, you acknowledge this policy.

For questions regarding this policy, please contact us at: [email protected]

2. Information We Collect

We collect personal information in the following ways:

• Contact forms: name, email address, phone number (optional), and the message you submit.
• Email correspondence: content of emails sent to us, including any personal details you include.
• Project briefs: information about your property, design preferences, and requirements shared in the course of our services.
• Site visit notes: observations recorded during consultations at your property.
• Cookies and analytics: technical data collected automatically when you visit our website (see Section 5).

We do not collect sensitive personal data (such as financial details, identity document numbers, or health information) unless you voluntarily provide it and it is necessary for a specific service purpose.

3. How We Use Your Information

We use your personal information for the following purposes:

• Responding to your enquiries and providing requested services
• Preparing design proposals, presentations, and project documentation
• Coordinating contractors, suppliers, and other third parties involved in your project (with your knowledge)
• Sending project updates and communicating throughout the engagement
• Improving our website and understanding how visitors use it (via analytics)
• Fulfilling legal obligations under Malaysian law

The legal basis for processing your data is: your consent (for marketing communications and optional cookies), contractual necessity (for service delivery), and legitimate interests (for responding to enquiries and improving our services).

4. Data Sharing

We share your personal information only in the following circumstances:

• Project contractors and suppliers: only when directly required for your project, and only the minimum information necessary.
• Analytics services: anonymised usage data may be processed by third-party analytics providers (such as Google Analytics).
• Legal requirements: if required by Malaysian law, regulation, or a court order.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

5. Cookies

Our website uses cookies to function properly and to help us understand how visitors use the site. Essential cookies are necessary for basic site operation and cannot be disabled. Analytics and preference cookies are optional and require your consent.

You can manage your cookie preferences at any time via our Cookie Policy page.

6. Data Retention

We retain personal information for the following periods:

• Enquiries that did not result in a project: 12 months from the date of last contact.
• Active project data: for the duration of the project plus 3 years thereafter, to accommodate any post-completion queries.
• Financial records: 7 years, as required by Malaysian accounting regulations.
• Analytics data: as per the retention settings of the relevant analytics service (typically 26 months).

After these periods, personal data is securely deleted or anonymised.

7. Data Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption. Project documents are stored in access-controlled systems. Only team members directly involved in your project can access your data.

In the event of a data breach that is likely to result in risk to your rights or freedoms, we will notify you as soon as reasonably practicable and, where required, report to the relevant authority under the Personal Data Protection Act 2010 (Malaysia).

8. Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection principles, you have the right to:

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to correct inaccurate or incomplete information.
• Withdrawal of consent: withdraw consent for processing based on consent at any time (this does not affect the lawfulness of prior processing).
• Limitation: request that we limit how we use your data in certain circumstances.
• Objection: object to processing based on legitimate interests.

To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their individual privacy policies before providing any personal information.

10. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently received such data, please contact us so we can remove it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. When we do, the "Last updated" date at the top of the page will change. Significant changes will be communicated via the website or, where appropriate, by email to clients with active engagements. Continued use of our website or services after a policy update constitutes acceptance of the revised terms.

12. Contact

For any privacy-related questions, requests, or concerns, please contact:

Luma Path
13 Jalan Perak, 50450 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3-2164 8572