Privacy policy.

1. Who we are

VaporDex Home Services Sdn. Bhd., registration number 202301045783, with its registered address at Lot 14-3, Jalan Maarof, 59000 Bangsar, Kuala Lumpur, is the data controller responsible for the personal data described in this policy.

2. Data we collect

We collect only what is needed to scope, schedule and follow up on a service visit:

• Your name, contact phone number and email address
• The service address you are asking us to visit
• A description of the problem or project (free-text and photos you choose to attach)
• Job records, photos and invoices generated by the work itself
• Cookie identifiers if you accept cookies on this website

3. How we use it

Your data is used to:

• Respond to your enquiry and confirm a scoping visit
• Quote, schedule and deliver the requested service
• Issue invoices and tax receipts compliant with Malaysian law
• Send service-related WhatsApp updates and a single aftercare check-in
• Maintain a job history that is referenced during warranty callbacks

We do not use your data for marketing campaigns we run for other people. We do not sell or rent customer lists. Ever.

4. Who sees it

Only the VaporDex team — technicians, dispatchers, the office accountant and the renovation coordinator. We engage external parties strictly on a need-to-share basis:

• Material suppliers receive your delivery address when products are dispatched directly
• Our accountant accesses invoicing data for the purpose of audit and tax filing
• Our website hosting provider stores form-submission data in transit

5. How long we keep it

Active customer records are kept for seven years from your most recent job, in line with Malaysian Companies Act record-keeping requirements. Web enquiry data is deleted after 12 months if it does not progress to a booking.

6. Your rights

Under the PDPA you may at any time:

• Ask for a copy of the personal data we hold about you
• Request correction of inaccurate information
• Withdraw consent to non-essential communications (such as the aftercare WhatsApp)
• Ask us to delete records that are no longer required for active service

Send any request to [email protected]. We respond within 14 working days.

7. Security

Customer records are stored in a password-protected dispatch system accessible only to staff. Backups are encrypted. We do not store payment card details — bills are settled by bank transfer or DuitNow QR.

8. Cookies

This website uses a minimal set of cookies. Details are in the cookie policy.

9. Changes to this policy

If we materially change how we handle personal data, we update this page and the date at the top. The current copy is always the operative one.

10. Contact

Questions on data handling can go to [email protected] or to our registered office.