Privacy Policy

This policy explains what personal information Geco Studio collects through this website, what we do with it, and what you can ask us to do about it. It is written to meet Malaysia's Personal Data Protection Act 2010 (Act 709).

It covers this site and the enquiries sent through it. It does not cover other sites we link to, or messages you send us through platforms with their own policies, such as WhatsApp or Instagram.

We only collect what you type into the enquiry form, plus two technical details that come with the submission:

• Your name, phone number and email address — required, because an enquiry we cannot answer is of no use to either of us.
• Details about the project, where you choose to give them: site location, project type, property type, build-up area, timeline, budget and anything you write in the message field.
• Which page the enquiry was sent from, so we can see what prompted it.
• The IP address the submission came from, kept only so we can investigate abuse of the form.

We do not run advertising or analytics trackers on this site, and we do not build a profile of you across other sites.

To reply to your enquiry, to understand and scope the work you are asking about, to prepare a proposal, and to keep a record of the conversation while the project is live.

We do not sell your details, and we do not add you to a mailing list because you sent an enquiry.

The form asks you to tick a box before it will send. That tick is your consent for us to store the details and contact you about the enquiry, and nothing is collected before it.

You can withdraw that consent at any time by emailing hi@gecostudio.co. We will stop contacting you and delete what we hold, except where we need to keep records of an engagement already underway — for example a signed proposal, or accounts we are required to keep.

An enquiry is written to two places: a private database that is not readable from the public internet, and the studio's own mailbox so that somebody actually sees it.

Both run on services operated by third-party providers, and their servers may be located outside Malaysia. By sending an enquiry you consent to your details being transferred and stored outside Malaysia for that purpose.

Enquiries that do not turn into projects are kept while there is a reasonable prospect of following up, and deleted sooner if you ask.

Where an enquiry becomes a project, the details are kept for the length of the engagement and for as long afterwards as we are required to keep business records.

Nobody outside the studio, with two exceptions:

• Contractors, suppliers and consultants, where a detail has to be shared to quote or carry out your project — and only what is needed for that.
• The providers who host this site, the database and our email. They process the data on our instructions and for no other purpose.

We will also disclose information where the law requires it.

Under Act 709 you may ask for a copy of the personal data we hold about you, ask us to correct it if it is wrong or out of date, ask us to stop using it, or withdraw your consent.

Send the request to hi@gecostudio.co. We will respond within 21 days. If you are not satisfied with how we have handled it, you may complain to the Personal Data Protection Commissioner.

The enquiry database denies every request that does not come from the site's own server, and the site is served over HTTPS. No transmission over the internet is completely secure, however.

Please do not send identity card numbers, bank details or other sensitive information through the enquiry form. We will never ask for them by email.

If this policy changes, the revised version is published on this page and the date above is updated. Where the change is significant and we hold your details, we will tell you.