Privacy Policy
Last updated: 13 April 2025
This policy describes how Pendulux collects, uses, and protects personal information provided by visitors to this website and clients of the workshop. We take data handling seriously and aim to be straightforward about what we do and why.
1. Data Controller
The data controller for personal information collected through this website is:
Pendulux
56 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia
Email: [email protected]
Telephone: +60 3-2148 7392
2. What Personal Data We Collect
We collect the following categories of personal information:
- Name — provided when you submit the contact form or visit the workshop in person
- Email address — provided via the contact form
- Telephone number — provided optionally via the contact form or directly at the workshop
- Message content — any information you include in your enquiry
- Technical data — browser type, IP address, and pages visited, collected via analytics cookies where consent has been given
We do not collect payment card information. Payments are processed in person at the workshop by the client directly.
3. Legal Basis for Processing
Our legal basis for processing personal data varies by purpose:
- Contractual necessity — processing required to respond to an enquiry or carry out repair work you have requested
- Legitimate interest — maintaining records of work carried out and clients served, for the purposes of workshop management
- Consent — analytics cookies, where you have accepted cookies via the consent banner on this site
This website operates under the Personal Data Protection Act 2010 (PDPA) of Malaysia. We comply with the seven principles of the PDPA and your rights as a data subject under Malaysian law.
4. How We Use Your Data
- To respond to enquiries submitted via the contact form
- To manage and document repair and restoration work undertaken on your behalf
- To provide written updates on work in progress, as agreed
- To maintain internal records for workshop purposes (job logs, parts history)
- To improve this website using anonymised analytics data, where consent has been given
We do not use your data for automated decision-making. We do not send marketing communications unless you have separately requested to be contacted for that purpose.
5. Data Sharing
We do not sell personal data to third parties. Data may be shared in limited circumstances:
- With parts suppliers, where your contact information is necessary to arrange a specific order on your behalf — this is discussed with you before any communication takes place
- With Google Analytics, where analytics cookies have been accepted — anonymised usage data only
- Where required by law, regulation, or court order
6. Data Retention
Contact form submissions are retained for 12 months. Job records (including client contact details associated with repair work) are retained for 5 years for workshop management and dispute resolution purposes. Analytics data is retained for 14 months, consistent with Google Analytics default settings. After the relevant retention period, data is deleted or anonymised.
7. Cookies
This website uses cookies. Essential cookies are required for the site to function correctly. Analytics and preference cookies are optional and only placed where you have given consent via the cookie banner. Full details are available in our Cookie Policy.
8. Data Security
This website uses HTTPS encryption for all data in transit. Access to stored personal data is restricted to workshop staff. We review our data handling practices regularly. In the event of a data breach that affects your personal data, we will notify you as required under applicable law.
9. Your Rights
Under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data, where no legal or contractual requirement to retain it exists
- Withdraw consent where processing is based on consent
- Object to processing carried out under legitimate interest grounds
To exercise any of these rights, write to us at [email protected]. We will respond within 21 days. For complaints, you may also contact the Department of Personal Data Protection Malaysia (JPDP).
10. Third-Party Links
This website may contain links to external websites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit from a link on this page.
11. Children's Privacy
This website is not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through this site, please contact us at [email protected] so we can arrange deletion.
12. Changes to This Policy
We may update this policy from time to time. The current version will always be available at this address with a revised date at the top. We recommend checking back periodically if you are a returning client.
13. Contact for Privacy Matters
For any questions about this policy or how we handle your personal data:
Email: [email protected]
Address: 56 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia