Privacy Policy

This Privacy Policy explains how Monara Surfaces Sdn Bhd (“Company”, “we”, “our”, or “us”) collects, uses, discloses, and protects your personal data when you visit our website or interact with us.

We are committed to protecting your personal data in accordance with the laws of Malaysia, including the Personal Data Protection Act 2010 (“PDPA”) as amended by the Personal Data Protection (Amendment) Act 2024 (“Amendment Act”), and any subsidiary regulations and guidelines issued by the Personal Data Protection Commissioner.

By submitting your personal data to us, or by continuing to use our website, you consent to the collection, use, and disclosure of your personal data in accordance with this Privacy Policy. Where we rely on your consent, you may withdraw it at any time as set out in Section 8 below.

1. Personal Data We Collect

We may collect and process the following categories of personal data:

(a) Personal Information

• Name
• Company name
• Email address
• Phone number
• Address
• Any information submitted through enquiry forms, contact forms, or email and messaging communications

(b) Technical Information

• IP address
• Browser type and device information
• Pages visited and browsing activity
• Cookies and website usage data

(c) Source of Personal Data

We collect personal data directly from you when you complete our forms or communicate with us. Where we obtain your personal data from third parties (for example, referrals from designers, contractors, or business partners), we will have obtained it on the basis that such third parties are permitted to disclose it to us.

(d) Obligatory or Voluntary Supply

The supply of personal data marked as mandatory in our forms (for example, name and contact details) is obligatory for us to respond to your enquiry or provide our products and services. If you do not supply such data, we may be unable to process your enquiry or provide the requested products or services. The supply of all other personal data is voluntary.

2. How We Use Your Personal Data

We may use your personal data for the following purposes:

• To respond to your enquiries and requests
• To provide product information, quotations, or customer support
• To process and fulfil orders and manage delivery and after-sales service
• To improve our website, products, and services
• To send updates, marketing materials, or promotional communications (subject to Section 3 below)
• To manage business relationships with customers, designers, contractors, and suppliers
• To comply with legal and regulatory obligations

3. Direct Marketing

Where you have consented, we may use your contact details to send you marketing or promotional communications about our products, services, and offers, including by email, telephone, or messaging applications.

You have the right to require us, at any time and at no cost, to cease using your personal data for direct marketing purposes. You may opt out by:

• Clicking the “unsubscribe” link in any marketing email; or
• Writing to us at the contact details in Section 12.

We will give effect to your opt-out request within a reasonable period.

4. Disclosure of Personal Data

We do not sell your personal data.

We may disclose your personal data to the following classes of third parties:

• Our employees, officers, and authorised representatives
• Our professional advisers, including legal, accounting, and consulting advisers
• Service providers engaged for website hosting, data storage, IT support, analytics, payment processing, delivery, and communications
• Business partners such as designers, contractors, and suppliers, where necessary to fulfil your request
• Government authorities, regulators, law enforcement agencies, or courts, where required or permitted by law

All third parties processing personal data on our behalf are required to keep it confidential and secure, and to process it only for the purposes for which it was disclosed.

5. Cross-Border Transfer of Personal Data

Some of our service providers (for example, cloud hosting, email, and analytics providers) may be located outside Malaysia. As a result, your personal data may be transferred to, stored, or processed in a location outside Malaysia.

Where we transfer your personal data outside Malaysia, we will take reasonable steps to ensure that the recipient provides a level of protection comparable to that required under the PDPA, including by entering into appropriate contractual safeguards, or we will rely on another lawful basis for transfer permitted under the PDPA and the Amendment Act.

6. Cookies and Website Analytics

Our website may use cookies and similar technologies to improve user experience and analyse website traffic. Cookies may collect information such as your website preferences, browsing behaviour, and device or session information.

You may manage or disable cookies through your browser settings or, where available, through the cookie consent banner on our website. Disabling certain cookies may affect the functionality of the website.

7. Data Security

We take practical steps to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction, having regard to the nature of the data and the harm that may result. These steps include, where appropriate, restricted access controls, secure storage, and encryption of data in transit.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

8. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable laws and regulations. As a general guide, enquiry and contact data is retained for up to twenty-four (24) months from the date of last contact, unless a longer retention period is required by law or for legitimate business purposes. We review retention periods periodically and securely dispose of personal data that is no longer required.

9. Your Rights

Under the PDPA, you have the right to:

• Request access to your personal data held by us
• Request correction of inaccurate, incomplete, misleading, or out-of-date personal data
• Withdraw your consent to the processing of your personal data
• Request that we limit the processing of your personal data in certain circumstances
• Prevent the use of your personal data for direct marketing purposes

To exercise any of these rights, please contact us using the details in Section 12. We will respond to your request within the timeframes prescribed by the PDPA. A prescribed fee (not exceeding the maximum permitted under the PDPA) may apply to data access requests. Your request may be subject to applicable legal requirements, and we may need to verify your identity before processing it.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of those websites separately.

11. Changes to This Privacy Policy

We reserve the right to update or revise this Privacy Policy at any time. Any changes will be published on this page with a revised “Last Updated” date. Where changes are material, we will take reasonable steps to notify you. Your continued use of our website after any changes constitutes acceptance of the revised Privacy Policy.

12. Contact Us

If you have any questions, requests, or complaints regarding this Privacy Policy or the handling of your personal data, please contact our data protection contact: