Cedarvault ("we", "us", "our") respects your privacy. This policy describes what personal information we collect when you use our website or engage our household records cataloging services, why we collect it, and what we do with it. Please read it carefully. If you have questions, write to us at [email protected].
This policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia and applies to personal data collected in connection with our operations in Sarawak and Malaysia.
1. Data Controller
The data controller responsible for your personal data is:
Cedarvault
Lot 15, Jalan Padungan, 93100 Kuching, Sarawak, Malaysia
We collect personal data in two ways — directly when you provide it to us, and automatically when you use our website.
Information you give us
Full name (from our contact form or when booking a session)
Email address
Phone number (optional, if provided)
Message content (if you write to us through the form)
Appointment details (dates, session type, household address for home visit services)
Information collected automatically
IP address and general location (country/region level)
Browser type and device type
Pages visited, time spent, referring URL
Cookie consent preference
Legal basis for processing
Consent — for marketing communications and optional analytics cookies
Legitimate interest — for website security, fraud prevention, and improving our services
Contract performance — to deliver the cataloging session or subscription you have booked
Legal obligation — where required by Malaysian law
3. How We Use Your Data
To respond to your enquiries and arrange sessions
To deliver the cataloging services you have requested, including home or studio visits
To send appointment reminders or follow-up notes at agreed intervals (1 month, 3 months, or quarterly)
To improve our website content and layout using aggregated, anonymised analytics data
To comply with legal obligations under Malaysian law
We do not use your personal data for unsolicited marketing unless you have expressly opted in. We do not sell your data to third parties.
4. Data Sharing and Third Parties
We share your data only where necessary and with parties who are contractually required to protect it.
Google LLC — Google Analytics (anonymised website traffic data) and Google Maps (embedded map on our homepage)
Meta Platforms, Inc. — conversion tracking pixel if you arrive from a Meta ad
Microsoft Corporation — Bing conversion tracking if applicable
Web hosting provider — server logs including IP addresses, retained for up to 30 days
Each of these providers operates under their own data processing terms. We do not control their practices once data is transferred to them.
5. How Long We Keep Your Data
Data type
Retention period
Contact form submissions
3 years from last contact
Appointment and session records
5 years (for subscription continuity and follow-ups)
Website server logs
30 days
Analytics data (anonymised)
Up to 26 months (Google Analytics default)
Cookie consent records
12 months in your browser's localStorage
When data is no longer needed, it is deleted or anonymised.
6. How We Protect Your Data
Our website uses HTTPS encryption for all data in transit
Access to client records is restricted to authorised staff only
We do not store payment card data — payments are handled by a licensed third-party processor
In the event of a data breach that may affect your rights, we will notify you and the relevant authority as required under Malaysian law
7. Cookies
We use essential, analytics, marketing, and preference cookies. Full details, along with controls to manage your preferences, are in our Cookie Policy. You may update your preferences at any time on that page.
8. Your Rights Under Malaysian PDPA
Under the Personal Data Protection Act 2010, you have the right to:
Access the personal data we hold about you
Correct inaccurate or incomplete data
Withdraw consent at any time, where consent is the basis for processing
Request deletion of your data, subject to any legal retention requirements
Object to processing for direct marketing purposes
Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP)
To exercise any of these rights, write to [email protected]. We will respond within 21 days.
9. Links to Other Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before submitting any personal data.
10. Children's Privacy
Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us immediately and we will delete the information.
11. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last updated" date at the top of this page. Continued use of our website after changes are published means you accept the updated policy.
12. Contact Us About Privacy
For any privacy-related questions, data access requests, or concerns:
Lot 15, Jalan Padungan, 93100 Kuching, Sarawak, Malaysia
You may also contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my if you believe your data rights have not been respected.