Privacy policy.

Who we are

Magnivo Plumbing Sdn Bhd (Registration 1518734-A) is the data controller for personal information submitted on magnivo.bond and through our phone, WhatsApp and email channels. Our address is Lot 22, Jalan Wangsa Melawati 4, Taman Wangsa Melawati, 53300 Kuala Lumpur, Malaysia.

What we collect, and why

• Booking and quote enquiries. When you submit the callout form, we receive your name, contact number, email, broad job type and a short job brief. We use this strictly to reply to your enquiry and to schedule any agreed visit.
• On-site information. If we visit your property, we may take photographs of the work area for our job records and your before/after evidence. Personal items are excluded from frame where reasonably possible.
• Phone and WhatsApp logs. Call records, voice messages and chat history with our published numbers are retained for quality and dispute resolution.
• Site analytics. If you accept analytics cookies, we collect anonymous traffic counts (e.g. which pages are read most). This is opt-in — see our cookie policy.

How long we keep it

Quote and visit records are retained for seven years to support warranty obligations and tax record-keeping. Marketing-related data (analytics) is retained for thirteen months. Anything you ask us to delete (and that we are not legally required to retain) is removed within thirty days.

Who we share it with

We do not sell personal information. We share data only with:

• Our supplier partners, when ordering specific parts you have approved.
• Building management corporations, when work-permit submission requires it.
• Statutory authorities, when a written demand under Malaysian law requires disclosure.

Your rights under the PDPA 2010

You may at any time request: access to your personal data we hold, correction of inaccurate entries, withdrawal of consent to non-essential processing, and erasure subject to legal retention obligations. Send your request to [email protected]; we reply within fourteen working days.

Security measures

Form submissions are protected by a CSRF token and basic spam controls. Office-side data is held on access-controlled storage and shared only with personnel who need it for your job. We do not knowingly store payment card data; payment for our work is received by bank transfer or e-wallet to a named business account.

Changes

If we update this policy, the “last updated” date at the top of the page changes. Material changes will be flagged on the home page for thirty days.