In plain language: what information we collect, what we do with it, and what we promise never to do.
Last updated 27 May 2026 · Issued by Airbrix Bespoke Sdn Bhd (1284756-V).
Airbrix Bespoke Sdn Bhd is a Malaysian company with its workshop and registered office at Lot 24, Jalan Tiang U8/93, Taman Perindustrian Bukit Jelutong, 40150 Shah Alam, Selangor. We design and manufacture bespoke furniture. This site, airbrix.pro, is our public-facing studio shopfront.
This policy is written to satisfy our obligations under the Malaysian Personal Data Protection Act 2010 (PDPA) and to give you a clear, jargon-light view of what we do with your information.
Your name, email address, optional phone number, the collection or product you're interested in, and the message you wrote. Nothing else. We don't ask for an IC, a postcode, an age, or a marketing preference.
Standard server logs: IP address, browser type, the pages you visited, the date and time. These are kept for 30 days in rotated logs and are used solely to diagnose technical problems and detect abuse.
Aggregated, anonymised page-view statistics. We don't run any third-party advertising trackers and we don't link cookie data to anyone's name or email.
If you commission a piece, we keep your delivery address, billing details, and a written record of the project specifications. Card numbers are processed by our payment gateway and never stored on our systems.
Three studio managers and the founders. Our delivery lead sees your address only when a delivery is scheduled. The accountant sees billing information for tax purposes. Workshop staff see project drawings but not personal details.
Our website hosting is provided by a Malaysian-based shared-hosting company in Cyberjaya. Email delivery uses a mailbox provider compliant with PDPA equivalency standards. Payment processing for online deposits is handled by a Bank Negara-licensed payment service provider. We're happy to name any of these in writing on request.
Enquiry-form messages are kept for 18 months after the last contact. Project records are kept for the duration of the 7-year warranty plus one year. Server logs are rotated every 30 days. Cookie data lasts at most 13 months.
You can ask us, in writing, to: confirm what data we hold about you; correct it if it is inaccurate; withdraw your consent for us to process it; or delete it (subject to warranty obligations). Send the request to [email protected]. We respond within 14 working days.
If you believe we've mishandled your personal data, you can complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi Malaysia). We'd appreciate the chance to fix it first — please write to us before escalating.
If we make a material change, we will date-stamp the policy at the top and (if you've given us your email for studio updates) write to tell you. Cosmetic changes — fixing typos, re-wording for clarity — happen quietly.