This statement explains how Dawnplex Bespoke Sdn Bhd (Company Registration No. 1318492-K, “Dawnplex”, “we”, “us”) collects and handles personal information when you visit dawnplex.pro or get in touch with the workshop. It is written to be readable rather than legalistic, and to comply with the Personal Data Protection Act 2010 of Malaysia.
What we collect
We collect only the information you actively give us. That is, in practice, the contents of the enquiry form on the contact page: your name, your email address, an optional phone number, your choice of commission category, and the body of your message.
Browser-level information — IP address, approximate geographic location, browser type, the page that referred you — is collected by the hosting infrastructure for security and capacity-planning purposes. We do not pair this information with the enquiry contents.
Cookies
The site sets one functional cookie for the session-based CSRF protection on the enquiry form, and a separate consent cookie that records your cookie-banner choice. We do not run analytics, advertising tags or tracking pixels of any kind. See the cookie policy for the full list.
Why we hold it
Enquiry information is held so that we can respond to your enquiry, prepare a sketch and a quotation, and (if you accept) progress your commission through to delivery and after-sales. We do not use it for marketing without your express, separate consent.
How long we hold it
For enquiries that do not progress to a commission, we hold the original message for twelve months and then delete it. For active commissions, we hold project records for seven years after delivery in line with our warranty obligations and the tax-record requirements of the Inland Revenue Board of Malaysia.
Who else sees it
Within Dawnplex, your enquiry is read only by the design team and the workshop scheduler. We do not share it with any third party, with two exceptions: our delivery partner receives your address when a piece is ready to ship, and our accountant sees invoice-level information for statutory reporting.
Your rights
Under the Personal Data Protection Act 2010 you may at any time ask us to confirm what personal information we hold about you, correct it if it is wrong, or delete it (subject to our statutory record-keeping obligations). Send the request to [email protected] and we will respond within fourteen calendar days.
Security
The site runs on hardened shared hosting with TLS encryption and server-side input validation. The enquiry form is protected against cross-site request forgery and stores nothing client-side beyond the consent and CSRF cookies described above.
Changes to this policy
If we materially change how we handle personal information, we will post the new version of this page and update the “Last reviewed” date at the top. For questions, write to [email protected] or send a letter to our workshop in Rawang.