Privacy Policy — Damai Tap

1. Introduction

Damai Tap ("we", "us", "our") is a residential plumbing business registered and operating in George Town, Penang, Malaysia. This Privacy Policy explains how we collect, use, and protect personal information you provide when using this website or contacting us in connection with our plumbing services. By using this site, you agree to the practices described below.

This policy applies to data collected through the website at damaitap.live and any communication sent to us via the contact form, email, or telephone.

2. What Personal Data We Collect

We collect only the data necessary to respond to service enquiries and schedule visits. This includes:

Full name
Email address
Telephone number (if provided)
Service-related details you include in a contact form message (e.g. address, nature of the plumbing fault)
Technical data collected automatically: IP address, browser type, pages visited, and visit duration — via analytics cookies if consent is given

We do not collect payment card details. If a payment is required following a visit, it is handled in person.

3. How We Collect Data

Data is collected in the following ways:

Contact form submissions on this website
Direct email sent to our address
Telephone calls
Cookies and analytics tools where consent has been given (see our Cookie Policy)

4. Legal Basis for Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), we process your personal data on the following bases:

Consent: When you submit the contact form, you consent to us using your data to respond to your enquiry.
Legitimate interests: We may retain contact details to follow up on a service visit or respond to queries about completed work, where you would reasonably expect this.
Contractual necessity: When you book a service, we use your contact and address information to fulfil the service agreement.

5. How We Use Your Data

We use your personal data for the following purposes:

To respond to your service enquiry
To schedule and confirm plumbing visits
To communicate about the scope, timing, or outcome of work
To follow up on completed repairs within the 14-day review period
To analyse website traffic in aggregate (if analytics cookies are accepted)

We do not use your data for unsolicited marketing. We do not sell or share your personal data with third parties for commercial purposes.

6. Data Retention

Contact form submissions and service correspondence are retained for up to 24 months from the date of contact. After this period, records are deleted unless there is an ongoing legal or contractual reason to retain them. Technical analytics data is retained in aggregate and not linked to identifiable individuals after 12 months.

7. Data Sharing

We do not sell your personal data. We may share limited data with the following third parties only as needed:

Google Analytics (if analytics cookies are accepted): To understand website usage in aggregate. Google's privacy policy is available at google.com/policies/privacy.
Email service provider: Used to send and receive messages. Email content may be stored on servers outside Malaysia; where this occurs, reasonable security protections are applied.

No other data sharing takes place.

8. Data Security

We take reasonable steps to protect your data from unauthorised access, disclosure, or loss. These steps include:

HTTPS encryption for all data transmitted through this website
Access to customer data limited to the business operator and the three working technicians on a need-to-know basis
No storage of data on shared or public devices

In the event of a data breach that is likely to result in significant risk to you, we will notify affected individuals and, where required, report to the relevant authority within a reasonable timeframe.

9. Cookies

This website uses cookies. Essential cookies are required for the site to function and cannot be disabled. Optional cookies (analytics, marketing, preference) require your consent. See our Cookie Policy for full details and to manage your preferences.

10. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights regarding your personal data:

Access: You may request a copy of the personal data we hold about you.
Correction: You may request that inaccurate or incomplete data be corrected.
Withdrawal of consent: You may withdraw consent for processing at any time, where processing is based on consent. This does not affect the lawfulness of prior processing.
Erasure: You may request deletion of your data, subject to any legal retention obligations.
Objection: You may object to processing for legitimate interests where your particular circumstances justify this.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

If you believe your rights have not been respected, you may contact the Department of Personal Data Protection Malaysia (JPDP) at pdp.gov.my.

11. Third-Party Links

This website may contain links to external sites (for example, Google Maps). We are not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policy of any external site you visit.

12. Children's Privacy

This website is intended for use by adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data through this site, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with a revised "Last Updated" date. Continued use of this website after changes are published constitutes acceptance of the updated policy.

14. Contact

Data Controller: Damai Tap
Address: 27, Jalan Burmah, 10350 George Town, Penang, Malaysia
Email: [email protected]
Phone: +60 4-845 6273