Privacy policy

This policy explains how Flowbox Home Works Sdn Bhd (Company Reg. No. 202101017842 (1421683-T), "Flowbox", "we", "us") handles personal data collected through the flowbox.my website, our phone and WhatsApp lines, and in the course of providing plumbing and electrical services. We process personal data in accordance with the Malaysian Personal Data Protection Act 2010 ("PDPA").

1. What we collect

We keep collection deliberately minimal. Depending on how you interact with us, we may hold:

• Contact details — your name, email address and phone number, as submitted through our enquiry form or given over the phone or WhatsApp.
• Job information — your service address, descriptions and photographs of the problem, access notes, and records of the work we performed there.
• Billing records — quotations, invoices and payment references. We do not store card numbers; card payments are processed by the payment terminal provider.
• Website usage data — limited technical data via cookies, only where you have consented. See our cookie policy for specifics.

2. Why we collect it

We use personal data to respond to enquiries and provide quotations; to schedule, perform and follow up on service visits; to honour our 90-day workmanship guarantee (which requires matching a fault to an earlier job record); to issue invoices and maintain accounting records required by Malaysian law; and to contact you about a booking you have made. We do not use your data for unsolicited marketing, and we do not enrol you in mailing lists you did not ask for.

3. Legal basis and consent

We process your data with your consent, given when you submit our form (via the consent checkbox), message us, or engage our services. For data required to perform a contract with you — such as your address for a booked job — processing is necessary for that contract. You may withdraw consent at any time by contacting us, subject to our need to retain certain records under law.

4. Who sees your data

Access is limited to Flowbox staff who need it to do their jobs: the operations coordinator managing the schedule and the technicians assigned to your visit. We do not sell, rent or trade personal data. We disclose it to third parties only when a building management requires occupant and contractor details for access permits (with your knowledge), when our accountants or auditors require records, or when disclosure is required by law or a regulator.

5. Storage and security

Records are stored on access-controlled systems available only to authorised staff. Paper job sheets are digitised and the originals destroyed on a rolling schedule. While no system is perfectly secure, we apply reasonable technical and organisational safeguards proportionate to the modest scope of data we hold.

6. Retention

Enquiry data that does not lead to a job is deleted within 12 months. Job and billing records are kept for 7 years to satisfy tax, audit and warranty obligations, then destroyed. Photographs of work sites are deleted once no longer needed for the guarantee period, unless they document compliance-relevant work (such as DB upgrades), in which case they follow the job record schedule.

7. Your rights

Under the PDPA you may request access to the personal data we hold about you, ask us to correct inaccurate data, and withdraw consent to further processing. Write to [email protected] with the subject "Data Request" and we will respond within 21 days. We may need to verify your identity before releasing information.

8. Third-party links

Our site links to external services such as WhatsApp and Google Fonts. Those services operate under their own privacy policies, which we encourage you to review. This policy covers only data handled by Flowbox.

9. Changes to this policy

If we change how we handle personal data, we will update this page and revise the date at the top. Material changes affecting existing customers will be communicated directly where practical.

10. Contact

Questions about this policy or your data can be directed to [email protected], or by post to Flowbox Home Works Sdn Bhd, No. 12-2, Jalan USJ 10/1E, Taipan Business Centre, 47620 Subang Jaya, Selangor, Malaysia.