Criptora Roofing • KL

Privacy policy

Last updated: 18 March 2026. This policy explains what personal data we collect, why we collect it, and how we look after it. If anything here is unclear, email us at [email protected].

Who we are

This website is operated by Criptora Roofworks Sdn. Bhd., a private limited company registered in Malaysia under company registration number 202401045678 (1565432-A), with its registered office at Unit 12-3A, Menara Suezcap 1, KL Gateway, 2 Jalan Kerinchi, 59200 Kuala Lumpur, Malaysia. References in this policy to "we", "our" and "us" mean Criptora Roofworks Sdn. Bhd. as the data controller.

What we collect, and why

We collect three categories of personal data:

  • Contact information you submit via the enquiry form (name, email, phone, message). We use this to respond to your enquiry, prepare a quote and arrange a site visit.
  • Information generated during a project — site photos, property address, the contents of any quote or invoice we send you. We use this to deliver the contracted service and to honour the workmanship warranty.
  • Anonymous technical data — your IP address, browser type and pages visited — collected via standard web logs and a privacy-respecting analytics tool. We use this to keep the site secure and to understand which pages are useful.

We do not collect financial card data via this website. Where payment is required, we use offline bank transfer or an external payment provider — and they hold the card details, not us.

The Personal Data Protection Act 2010 of Malaysia governs our handling of your personal data. We rely on the following grounds for processing:

  1. Consent — you tick the consent box when submitting the enquiry form.
  2. Contract performance — once you engage us for a service, we process data necessary to deliver that service.
  3. Legitimate interests — for example, retaining quote records for audit purposes, or improving the site through anonymous analytics.

How we store and protect data

Enquiry data submitted via this site is stored on shared hosting servers located in Malaysia, with daily encrypted backups. Access is restricted to named Criptora staff with individual login credentials. Quote and project records are kept in a separate password-protected system. We do not store any data outside of Malaysia.

Sharing with third parties

We don't sell or rent your data. We share data only with:

  • Our hosting provider, who processes routine server logs.
  • Our accountants, where invoicing data is part of statutory record-keeping.
  • Authorities, where we are required by Malaysian law to do so.

How long we keep data

Enquiry records that don't convert into a project are kept for 24 months, then deleted. Project records are kept for the duration of the warranty period plus 12 months, then anonymised. Financial records are kept for the seven years required by Malaysian tax law.

Your rights

Under the PDPA you have the right to:

  • Request a copy of the personal data we hold about you.
  • Ask us to correct data that is inaccurate.
  • Withdraw consent — though doing so may mean we can no longer provide the service.
  • Ask us to delete data, subject to our statutory retention obligations.

To exercise any of these rights, email [email protected] from the address associated with the enquiry. We aim to respond within 21 days.

Contacting the data controller

For any privacy question, write to: Criptora Roofworks Sdn. Bhd., Unit 12-3A, Menara Suezcap 1, KL Gateway, 2 Jalan Kerinchi, 59200 Kuala Lumpur, Malaysia. Or email [email protected].