Privacy Policy

Rekaizen Solutions ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose and protect your personal data when you visit www.rekaizen.co, enquire about our services, or engage us as a client. We process personal data in accordance with the Personal Data Protection Act 2010 of Malaysia ("PDPA") and any applicable subsidiary legislation.

1. Who we are

Rekaizen Solutions is a business registered in Malaysia with the Companies Commission of Malaysia (SSM) under registration number PG0532780-W, with its principal place of business at 7A, Jalan 4/1A, Seksyen 4, 43650 Bandar Baru Bangi, Selangor, Malaysia. For any matter relating to this Policy or your personal data, you may contact us using the details in Section 13 below.

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Contact details — name, email address, phone number, WhatsApp number.
• Project information — the site or property address, floor plans, sketches, photographs, design briefs, scope of work, budget range and timeline.
• Communications — messages, attachments, voice notes and call logs exchanged during enquiry and engagement.
• Billing and payment details — billing name, billing address and payment reference. We do not store full credit-card numbers.
• Website usage data — anonymised information such as the pages you visit, your device type and approximate location (city level).

We collect personal data directly from you (through forms, email, WhatsApp, phone or in-person consultation), from documents you share with us, and automatically through our website.

3. Why we process your personal data

We process your personal data only for the following purposes:

• Responding to enquiries and preparing quotations.
• Performing the design, build, supply and installation services you engage us for.
• Managing invoicing, payment, after-sales support and warranty matters.
• Coordinating with suppliers, sub-contractors and delivery partners, only where strictly necessary to deliver your project.
• Complying with our legal, tax and regulatory obligations.
• Improving our website, services and operations.
• With your separate opt-in, sending you occasional updates about our work.

We will not use your personal data for any new purpose without first notifying you and, where required by law, obtaining your consent.

4. Disclosure of personal data

We may disclose your personal data to:

• Our staff, on a need-to-know basis.
• Sub-contractors, fabricators, installers, delivery partners and suppliers, only where required to execute your project.
• Professional advisors (such as accountants, auditors and lawyers) under standard confidentiality obligations.
• Public authorities, courts or regulators where required by law or to protect our legal rights.

We do not sell or rent your personal data to third parties.

5. International transfer

Where a third-party tool we use (for example email delivery or form processing) stores data outside Malaysia, we take reasonable steps to ensure that those providers offer a level of protection comparable to the PDPA.

6. How long we keep personal data

We retain personal data only for as long as is necessary for the purposes set out above, or as required by Malaysian tax and corporate law (typically up to seven years for accounting records). When no longer needed, we securely destroy or anonymise the data.

7. Security

We maintain reasonable technical and organisational measures — including access controls, encryption in transit (HTTPS) and secure cloud storage — to protect personal data against unauthorised access, alteration, disclosure or destruction. No method of internet transmission is 100% secure, so we encourage you not to send sensitive information to us through unencrypted channels.

8. Your rights under the PDPA

Subject to the PDPA, you have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate or incomplete personal data.
• Withdraw consent to processing where consent is the legal basis (this may affect our ability to provide services).
• Limit the processing of your personal data for direct marketing purposes.
• Request information about the disclosure of your personal data.

To exercise any of these rights, contact us at hello@rekaizen.co. We will respond within 21 days (or such longer period as the PDPA may allow), and may charge a small prescribed fee for data access requests.

9. Cookies and analytics

Our website uses only essential cookies for basic functionality. We do not use advertising or third-party tracking cookies. If we integrate analytics in the future, we will update this Policy and seek consent where required.

10. Children

Our services are directed at adults. We do not knowingly collect personal data from individuals under 18. If you believe we have done so inadvertently, please contact us and we will delete the data.

11. Third-party links

Our website may link to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before sharing personal data with them.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted on this page for at least 30 days.

13. Contact us

For questions about this Privacy Policy or your personal data: