Privacy Policy

Lumea is a design studio based in Kuala Lumpur, Malaysia. We provide interior design services for restaurants and cafés. This policy explains how we collect, use, and safeguard information when you visit our website or get in touch with us.

1. Who We Are

Lumea operates from Jalan Mesui, Bukit Bintang, 50200 Kuala Lumpur, Malaysia. You can reach us at [email protected] or by telephone at +60 3-2110 7384. We are responsible for the personal data we hold about you in connection with our website and design services.

2. Information We Collect

We may collect the following categories of information:

• Contact details — your name, email address, and phone number when you fill in the enquiry form on our website.
• Project details — information you share about your venue, concept, timeline, and requirements during initial conversations.
• Technical data — browser type, IP address, pages visited, and time spent on each page, collected automatically through standard server logs and analytics tools.
• Correspondence — records of emails or messages you send to us.

We do not knowingly collect information from individuals under the age of 18.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and provide information about our services.
• To prepare proposals, documents, and correspondence related to your project.
• To improve our website content and user experience based on aggregate usage data.
• To comply with applicable legal obligations in Malaysia.

We do not use your personal data for automated decision-making or profiling.

4. Legal Basis for Processing

We process your personal data on the following grounds:

• Your consent — when you voluntarily submit your contact details through our enquiry form.
• Legitimate interests — to manage our business operations, maintain records, and respond to enquiries from prospective clients.
• Legal obligations — where we are required to retain or process data under Malaysian law.

5. Sharing Your Information

We do not sell, rent, or trade your personal data to third parties. We may share your information in the following limited circumstances:

• With trusted service providers who assist us with website hosting, email delivery, or analytics — these parties are contractually obligated to handle your data securely and only for specified purposes.
• When required by law, court order, or regulatory authority in Malaysia.
• In the event of a business transfer, such as a merger or acquisition, where client records may be part of the transferred assets.

6. Cookies and Tracking

Our website uses cookies to remember your preferences and to gather basic analytics. Cookies are small text files stored on your device. You may accept or decline cookies through the banner displayed when you first visit our website.

For full details on how we use cookies, please refer to our Cookie Policy.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. In practice:

• Enquiry data that does not lead to a project engagement is typically deleted after 12 months.
• Data related to completed projects may be retained for up to seven years for financial and legal record-keeping purposes.
• You may request earlier deletion — see Section 9 below.

8. Data Security

We take reasonable organisational and technical measures to protect your personal data from loss, misuse, and unauthorised access. These include password-protected systems, access controls, and encrypted email where practicable. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), and where applicable, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Withdraw consent for processing at any time (this does not affect processing carried out prior to withdrawal).
• Request that we stop processing your data for direct marketing purposes.
• Request deletion of your data, subject to any legal obligations we must meet.

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable period and in accordance with applicable law.

10. Third-Party Links

Our website may contain links to external websites or references to third-party platforms. We are not responsible for the privacy practices of those sites and encourage you to review their individual privacy policies before sharing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will revise the "last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or about how we handle your personal data, you are welcome to contact us:

• Jalan Mesui, Bukit Bintang, 50200 Kuala Lumpur, Malaysia
• +60 3-2110 7384
• [email protected]