Privacy Policy

1. Introduction

Ember Nilsk ("we", "us", "our") is committed to handling the personal information of our clients and website visitors with care and transparency. This Privacy Policy describes what personal data we collect, why we collect it, how we use it, and your rights in relation to it.

This policy applies to personal data collected through our website at ember-nilsks.pro, through telephone enquiries, and through our service delivery process.

We operate in Malaysia and comply with the Personal Data Protection Act 2010 (PDPA) and applicable Malaysian data protection regulations.

2. Data We Collect

We collect personal data through the following means:

• Contact form: name, email address, phone number, and any details provided in your message
• Telephone enquiries: name and contact number
• Service delivery: address of the property where services are carried out, and any observations recorded in written reports
• Website analytics: anonymised data on page visits, device type, and general location (city level), collected via cookies if consent is provided

We do not collect sensitive personal data such as identity card numbers, financial account information, or health data.

3. Why We Collect and Use Your Data

We use the personal data we collect for the following purposes and on the following legal bases:

• To respond to your enquiry — legitimate interest in conducting our business and providing you with requested information
• To schedule and confirm service appointments — performance of the service agreement between you and Ember Nilsk
• To deliver written reports and service summaries — performance of contract
• To send appointment reminders — legitimate interest in operational communication
• To improve our website and services — legitimate interest, using anonymised analytics data
• To comply with legal obligations — legal obligation

We do not use your personal data for automated decision-making or profiling.

4. Data Retention

We retain personal data for the following periods:

• Enquiry data (contact form, telephone): 12 months from the date of last contact, unless a booking is made
• Client records and service reports: 5 years from the date of service, to support any follow-up enquiries or insurance-related needs
• Analytics data: aggregated and anonymised; not tied to identifiable individuals

After these periods, data is securely deleted or anonymised.

5. Sharing Your Data

We do not sell, rent, or trade your personal data. We may share it with the following parties only as necessary:

• Our team members (Emil Nazri, Hafizuddin Sukor, Nurul Liyana) for the purpose of delivering the booked service
• Analytics service providers (e.g. Google Analytics), subject to your cookie consent, in anonymised form
• Legal or regulatory authorities, if required by applicable Malaysian law

Any third-party service providers we use are required to handle your data in accordance with applicable data protection standards.

6. Cookies

Our website uses cookies to understand how visitors interact with it. Essential cookies are necessary for basic site operation and are always active. Optional analytics and preference cookies are only set if you provide consent via the cookie notice on our site.

For full details on the cookies we use and how to manage them, please see our Cookie Policy.

7. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include:

• HTTPS encryption for all data transmitted via our website
• Access controls limiting who within our team can access client records
• Secure storage of digital files
• Regular review of data handling practices

In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify the relevant authorities and, where required, affected individuals, in accordance with Malaysian PDPA requirements.

8. Your Rights

Under the Malaysian Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right to access: request a copy of the personal data we hold about you
• Right to correction: request that inaccurate or incomplete data be corrected
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to prevent processing: request that we stop processing your data for direct marketing purposes
• Right to complain: lodge a complaint with the Department of Personal Data Protection Malaysia (PDPD)

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days as required under the PDPA.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies separately before providing any personal data.

10. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us at [email protected] and we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable regulations. The updated policy will be published on this page with a revised "Last Updated" date. Continued use of our website or services after changes are published constitutes acceptance of the updated policy.

12. Contact for Data Enquiries

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:

Ember Nilsk
63 Jalan Kuchai Lama, 58200 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3 7983 2647