Privacy Policy

1. Overview

Mora Studio ("we", "us", "our") respects the privacy of everyone who visits our website or engages with our interior design services. This Privacy Policy explains what personal data we collect, the purposes for which we use it, and the choices and rights available to you.

This policy applies to all personal data processed by Mora Studio through our website at morastud.pro, our client correspondence, and our service delivery activities. It is prepared in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Data Controller

The data controller responsible for your personal information is:

3. Personal Data We Collect

We collect personal data only when it is necessary for providing our services or responding to your enquiries. The categories of data we may collect include:

We do not collect sensitive personal data (such as financial account details, identity card numbers, or health information) through our website.

4. How We Use Your Data

We use your personal data for the following purposes:

• Responding to your enquiries and scheduling consultations
• Delivering and managing our interior design services
• Sending service updates, project progress communications, and relevant follow-ups
• Improving our website, content, and service offerings based on aggregated usage patterns
• Complying with legal obligations and resolving any disputes

We do not use your data for unsolicited marketing communications, and we do not sell your personal information to any third party.

5. Legal Basis for Processing

Under the PDPA 2010, we process personal data on the following bases:

• Consent — where you have actively submitted a form or agreed to the use of optional cookies
• Contractual necessity — to carry out the design and renovation services you have engaged us for
• Legitimate interest — for the purpose of improving our services and communicating about ongoing projects, in a way that does not override your rights
• Legal compliance — where we are required by law to retain or process certain records

6. Sharing Your Data

Mora Studio does not sell or rent personal data. We may share data in the following limited circumstances:

• Service providers — trusted vendors who assist with our operations (for example, cloud hosting, email platforms) under data processing agreements that require them to protect your information
• Project partners — renovation contractors or suppliers involved in delivering your project, who receive only the project-relevant details needed to carry out their role
• Legal requirements — where disclosure is required by Malaysian law, court order, or regulatory authority

Any third party who receives your data is obligated to handle it in a manner consistent with this policy and applicable law.

7. Data Retention

We retain your personal data only for as long as is necessary for the purpose it was collected, or as required by law. In general:

• Enquiry and contact form submissions are retained for up to 2 years after the last interaction
• Client project data is retained for 7 years following project completion, in accordance with Malaysian commercial record-keeping requirements
• Website analytics data is anonymised and retained in aggregated form

When data is no longer required, it is securely deleted or anonymised.

8. Your Rights

Under the PDPA 2010 and applicable data protection principles, you have the right to:

To exercise any of these rights, please contact us using the details in Section 12. We will respond within a reasonable timeframe, generally within 21 days. We may ask you to verify your identity before processing a request.

9. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These include secure data storage, access controls, and using encrypted channels for data transmission.

While we take care to protect your data, no system can be entirely free from risk. If you believe your data has been compromised, please contact us promptly.

10. Cookies

Our website uses cookies to support its operation and to understand how it is used. Cookie use is governed separately by our Cookie Policy, which explains what cookies are placed, why, and how you can manage your preferences.

11. Changes to This Policy

We may update this Privacy Policy from time to time as our services evolve or legal requirements change. The revision date at the top of this page reflects when it was last updated. Continued use of our website or services after changes are published constitutes acceptance of the revised policy. Where changes are material, we will make reasonable efforts to notify you directly.

12. Contact Us

If you have questions or concerns about this policy, or if you wish to exercise any of your rights, please contact us: