Privacy Policy

Norova ("we", "our", "us") is a classical interior design studio registered and operating in Kuala Lumpur, Malaysia. We take the handling of personal information seriously and hold ourselves to a considered standard in how that information is used, stored, and shared.

This policy applies to information collected through our website at norova.site, through enquiry forms, and in the course of delivering our design services. It does not govern third-party websites that may be linked from our pages.

By using this website or submitting an enquiry, you acknowledge the practices described in this document. If you have questions, please write to [email protected].

We collect information in two ways — directly when you provide it, and automatically through standard website technology.

Information you provide directly

• Your name, email address, and phone number, submitted through our contact form
• Details about your project, home, or design preferences shared during consultations
• Correspondence by email, including documents and images exchanged during the course of service delivery
• Payment and invoicing information, where relevant to service engagement

Information collected automatically

• Browser type, device information, and operating system
• Pages visited, time spent on page, and referring URL
• Approximate location, derived from IP address
• Cookie data, where consent has been given (see Section 5)

Legal basis for processing

We process your information on the basis of your consent, the performance of a service engagement, and our legitimate interest in operating a professional design practice. We retain personal data for a period of five years following the conclusion of any service engagement, or for the duration required by Malaysian law, whichever is longer.

Information collected is used in the following ways:

• Responding to enquiries and discussing the scope of potential design engagements
• Delivering the services described in a confirmed scope of work
• Communicating updates relevant to an ongoing engagement
• Improving this website based on aggregate usage data
• Meeting our obligations under Malaysian commercial and tax law

We do not use your personal data for unsolicited marketing and will not contact you with promotional material unless you have indicated a wish to receive it. You may withdraw such consent at any point by writing to us.

We do not sell, rent, or otherwise transfer personal data to third parties for commercial purposes.

We take reasonable technical and organisational steps to keep personal information secure. These include:

• Secure, encrypted transmission of data via HTTPS across all pages of this website
• Access to client information restricted to studio personnel directly involved in a project
• Regular review of data handling procedures and access controls
• Secure disposal of physical documents and digital files that are no longer required

In the event of a data breach that is likely to affect your rights or interests, we will notify you and, where required, the relevant supervisory authority, within the timeframe set out under applicable law.

This website uses cookies to support basic functionality and, where consent is given, to understand how visitors interact with our pages. Cookies are small text files stored on your device.

We use the following categories:

• Essential cookies — required for the website to function; these cannot be disabled
• Analytics cookies — collect aggregate data about page visits and user behaviour, used to improve the site
• Preference cookies — remember choices such as language or region settings

For full details, and to manage your preferences, please visit our Cookie Policy.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have certain rights in relation to the personal data we hold about you:

To exercise any of these rights, write to [email protected]. We will respond within 21 days.

This website may contain links to external websites, including supplier or material reference pages. We have no control over the content or privacy practices of those sites and are not responsible for how they handle your information. We recommend reviewing the privacy policy of any external site you visit.

Our services are directed at adults. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has submitted information through this website, please contact us so that we may remove it promptly.

We may revise this policy from time to time to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page will be amended accordingly. Where changes are material, we will take reasonable steps to draw your attention to them.

Continued use of this website after a revision constitutes acceptance of the updated terms.

For any questions relating to this privacy policy or the personal data we hold, please contact our studio directly: