Privacy Policy

This Privacy Policy explains how Rune Spaces ("we", "us", "our") collects, uses, stores, and shares personal information when you visit our website at runespace.blog or engage with our interior design services. We are committed to handling your information with care and in accordance with applicable Malaysian privacy law, including the Personal Data Protection Act 2010 (PDPA).

Please read this policy carefully. By using our website or services, you acknowledge the practices described here.

1. Information We Collect

Information you provide directly

When you contact us through our website, by phone, or by email, we may collect:

• Your name and contact details (email address, phone number)
• Your property address or general location, if relevant to the project
• Details about your project, space, or design preferences
• Any other information you choose to share in correspondence

Information collected automatically

When you visit our website, we may automatically collect certain technical data, including:

• Your IP address and approximate geographic location
• Browser type and operating system
• Pages visited, time on site, and referring URL
• Device type and screen resolution

This data is collected through cookies and similar tracking technologies. Please refer to our Cookie Policy for details.

2. How We Use Your Information

We use personal information for the following purposes:

• Responding to your enquiries and providing interior design services
• Scheduling consultations and managing ongoing projects
• Sending project-related communications and updates
• Maintaining records of work completed
• Improving our website and service quality
• Complying with legal and regulatory obligations

We do not use your personal information for unsolicited marketing without your consent.

3. Legal Basis for Processing

We process personal data on the following bases under the PDPA:

• Consent — where you have provided it, including through our contact form
• Contractual necessity — where processing is necessary to fulfil a service agreement with you
• Legitimate interests — for website analytics and service improvement, where these interests are not overridden by your rights
• Legal obligation — where we are required to retain or share information by law

4. Data Sharing

We do not sell your personal information. We may share it in the following limited circumstances:

• Service providers — third parties who assist us in operating our website or services (e.g. analytics tools, email platforms), under data processing agreements
• Project partners — contractors or suppliers, only where necessary to deliver a project you have engaged us for, and only with your awareness
• Legal requirements — where disclosure is required by law, court order, or regulatory authority

5. Data Retention

We retain personal information for as long as necessary to fulfil the purposes set out in this policy, or as required by law. Project-related records are typically retained for seven years after project completion. Website enquiry records are retained for two years unless a project engagement follows.

You may request deletion of your data at any time (see Section 7).

6. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, or loss. These include access controls, encrypted communications, and regular review of data handling practices. No transmission over the internet is fully secure, however, and we cannot guarantee absolute security.

7. Your Rights

Under the PDPA and applicable law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for processing (where consent is the basis)
• Request deletion of your data, subject to legal retention obligations
• Raise concerns or complaints about how your data is handled

To exercise any of these rights, please contact us at [email protected] or by phone at +60 3-2274 8396. We will respond within 21 days.

8. Cookies

Our website uses cookies to support analytics and improve user experience. You may manage or withdraw your consent to cookies at any time through the cookie banner on our homepage or through your browser settings. For full details, see our Cookie Policy.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.

10. Children

Our services are directed at adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently received such data, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact

For privacy-related queries, please contact us at:

Rune Spaces
6 Jalan Scott, Brickfields, 50470 Kuala Lumpur
Email: [email protected]
Phone: +60 3-2274 8396