Privacy Policy

This policy explains what personal information we collect when you contact Ekovault — through this website, by phone, by WhatsApp, or in person at the workshop — and what we do with it. It is written in plain language because we’d rather you read it than skim it.

1. Who we are

Ekovault is the trading name of Ekovault Sustainable Plumbing Sdn Bhd, a Malaysian-registered private limited company (Company Reg. 1623085-V). Our workshop and registered correspondence address is Lot 32, Jalan SS22/19, Damansara Jaya, 47400 Petaling Jaya, Selangor, Malaysia. We are the data controller for any personal information you share with us.

2. What we collect, and when

When you submit the website contact form, we receive your name, email address, optionally your phone number, the service line you selected, and the message body. We also log the date and time of submission and a session token used for spam-prevention.

When you call our hotline or WhatsApp, we record the number you contacted us from and the conversation content needed to schedule and complete the work. When you book a callout, we additionally collect the service address, access instructions, and any property details relevant to the plumbing work.

We do not knowingly collect identity-card numbers, dates of birth, financial-card details, or any special-category data through this website. Bank-transfer details on invoices stay within our accounting software.

3. Why we use it

We use the information you provide for the following purposes: replying to your enquiry; preparing and delivering a written quote; scheduling and completing the work; issuing invoices; warranty record-keeping; and follow-up calls if the work needs revisiting. We do not sell or rent your information to any third party.

4. Who we share it with

The only external parties who see customer data are: (a) our accounting platform provider, for tax-invoice processing; (b) our email and messaging providers (Google Workspace, WhatsApp Business), to the extent that any communication passes through them; and (c) parts suppliers and manufacturer warranty registrars, when a unit you bought through us needs warranty registration in your name. None of these parties use your data for their own marketing.

5. How long we keep it

Contact-form submissions that do not become a job are deleted within 90 days. Job records (quote, invoice, warranty registration) are kept for seven years to satisfy tax and consumer-protection regulations under Malaysian law. WhatsApp conversation history is kept on the device for the duration of the customer relationship.

6. Your rights under the PDPA

Under Malaysia’s Personal Data Protection Act 2010, you have the right to (a) access the personal information we hold about you; (b) ask us to correct it if it’s wrong; (c) withdraw consent to further processing where we relied on consent; and (d) request deletion of records we no longer have a legal basis to retain. To exercise any of these rights, email [email protected] with the subject line “PDPA request”. We’ll respond within fourteen working days.

7. Security

The website is served over HTTPS. Form submissions are protected by a session-bound anti-forgery token. Internal customer records sit in an access-controlled cloud accounting system and on encrypted laptops belonging to the office co-ordinator. We do not store payment-card information on our systems.

8. Cookies

This website uses a small number of strictly necessary cookies for session and consent tracking. See the Cookie Policy for the detail.

9. Changes to this policy

We’ll update this page if our processing meaningfully changes, and we’ll change the “Last reviewed” date at the top so the change is visible. Material changes (a new third-party processor, for example) will be flagged on our home page for thirty days.

10. Contact

Any questions, complaints, or PDPA requests can be sent to [email protected], by phone on +60 3-7886 2945, or in writing to the workshop address above.