Privacy Policy

1. Introduction

Bumi Paip ("we", "us", "our") is committed to handling personal information responsibly. This policy explains what data we collect when you use our website or book our plumbing services, how we use it, and the choices available to you. Our services are provided in Malaysia and this policy is framed in accordance with the Personal Data Protection Act 2010 (PDPA), the principal data protection legislation applicable in Malaysia.

For questions about this policy, contact us at [email protected].

2. Data We Collect

We collect only the information needed to schedule, carry out, and follow up on plumbing visits:

• Contact form submissions: name, email address, phone number (optional), and message content.
• Booking communications: details you share by phone or message when arranging a visit (property address, description of the issue, preferred date).
• Website usage data: anonymised analytics data (pages visited, approximate location, device type) collected via cookies with your consent.

We do not collect sensitive personal data such as financial account details, identity document numbers, or health information.

Legal basis: Data collected via the contact form is processed on the basis of your consent (given at submission). Booking and service delivery data is processed on the basis of contract performance. Analytics data is processed on the basis of consent (cookie acceptance).

Retention: Contact enquiry data is retained for up to 24 months from last contact. Job records (visit date, work performed, address) are retained for up to 5 years for business record purposes. Analytics data is retained for up to 14 months.

3. How We Use Your Data

• To respond to your enquiry and provide a service quotation.
• To schedule and carry out the agreed plumbing service at your property.
• To send a booking confirmation or appointment reminder.
• To follow up on a completed visit if relevant (e.g. if we noted an item to monitor).
• To improve our website based on anonymous usage patterns.

We do not use your personal data for unsolicited marketing. If you wish to receive occasional service reminders (e.g. annual inspection nudges), you may opt in by indicating this when you make a booking. You can withdraw that preference at any time by contacting us.

Third-party sharing: We do not sell or rent personal data. We may share data with the following categories of third parties only where necessary: website hosting providers, analytics services (anonymised data only), and payment processors (if applicable). All third parties are required to handle data in accordance with applicable law.

4. Data Protection Measures

• Our website is served over HTTPS (TLS encryption in transit).
• Access to customer records is restricted to staff directly involved in scheduling and service delivery.
• We do not store payment card data on our systems.
• In the event of a data breach that is likely to affect your rights, we will notify affected individuals and, where required, the relevant authorities, within the timeframe prescribed by law.

5. Cookies

We use cookies to operate the website and, with your consent, to collect anonymous usage analytics. Essential cookies (required for site function) are always active. Optional analytics and marketing cookies are only set if you choose to accept them via the cookie banner. You can review and change your preferences at any time on our Cookie Policy page.

6. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data held by us:

• Right of access: request a copy of the personal data we hold about you.
• Right of correction: request correction of inaccurate or incomplete data.
• Right to withdraw consent: withdraw consent for data processing where consent is the legal basis; this does not affect processing carried out before withdrawal.
• Right to limit processing: request that we restrict the way we use your data in certain circumstances.
• Right to stop direct marketing: opt out of any direct marketing communications at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you believe your rights have not been respected, you may lodge a complaint with the Department of Personal Data Protection (JPDP), the supervisory authority for data protection in Malaysia.

7. Third-Party Links

Our website may contain links to external sites (for example, map services or product pages). We are not responsible for the privacy practices of those sites. We recommend reviewing their policies independently.

8. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data through our website, please contact us and we will delete the relevant records promptly.

9. Policy Updates

We may update this policy from time to time. The date at the top of the page reflects the most recent revision. Material changes will be flagged on the website for a reasonable period. Continued use of the website after a revision constitutes acceptance of the updated policy.

10. Contact

Data Controller: Bumi Paip
Address: 38, Jalan Ampang, 50450 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 11-3826 4715