Privacy Policy & Personal Data Protection Notice

Privacy Policy & Personal Data Protection Notice

Last Updated: 14 September 2026


This Privacy Policy and Personal Data Protection Notice (“Privacy Policy”) explains how CHAIR MAN SDN. BHD. (“Chair Man”, “we”, “us” or “our”) collects, uses, processes, stores, discloses and protects personal data.


We are committed to protecting your privacy and handling personal data responsibly in accordance with the Personal Data Protection Act 2010 (Act 709) of Malaysia (“PDPA”), as amended from time to time, and other applicable laws, regulations, standards and guidelines.


This Privacy Policy applies to customers, prospective customers, website visitors, suppliers, contractors, consultants, designers, architects, business partners, representatives of corporate customers and other individuals who interact with us.


By interacting with us, using our website, submitting information to us, requesting a quotation, placing an order, communicating with us or otherwise providing personal data to us, you acknowledge that you have read this Privacy Policy.

Last Updated: 14 September 2026


This Privacy Policy and Personal Data Protection Notice (“Privacy Policy”) explains how CHAIR MAN SDN. BHD. (“Chair Man”, “we”, “us” or “our”) collects, uses, processes, stores, discloses and protects personal data.


We are committed to protecting your privacy and handling personal data responsibly in accordance with the Personal Data Protection Act 2010 (Act 709) of Malaysia (“PDPA”), as amended from time to time, and other applicable laws, regulations, standards and guidelines.


This Privacy Policy applies to customers, prospective customers, website visitors, suppliers, contractors, consultants, designers, architects, business partners, representatives of corporate customers and other individuals who interact with us.


By interacting with us, using our website, submitting information to us, requesting a quotation, placing an order, communicating with us or otherwise providing personal data to us, you acknowledge that you have read this Privacy Policy.

1. Who We Are

Registered Company Name: CHAIR MAN SDN. BHD.


  • SSM Registration Number: 1486512-A

  • Tax Identification Number (TIN): C 29950294050

  • Business Nature / MSIC Code: 47581

  • Business Address: D6-3A-16, Bangunan Perdagangan D6, 801, Jalan Sentul, 51000 Kuala Lumpur, Malaysia

  • Contact Number: +60 17-760 5955

  • Email Address: sendtochairmanacc@gmail.com


For purposes of applicable data protection laws, we generally act as the data controller in respect of personal data described in this Privacy Policy.

2. What Is Personal Data?

“Personal data” generally means information relating directly or indirectly to an identifiable individual. Depending on the circumstances, the personal data we collect may include:


2.1 Identity Information


  • Full name

  • Salutation

  • Gender, where relevant

  • Nationality

  • Identification card or passport information where reasonably required

  • Signature


2.2 Contact Information


  • Telephone and mobile number

  • WhatsApp number

  • Email address

  • Residential, correspondence, delivery or business address

  • Social media account or username


2.3 Business and Professional Information


  • Company name, job title, department and industry

  • Business address and company registration information

  • Employer information

  • Information contained in business cards, email signatures or professional profiles


2.4 Transaction and Project Information


  • Requests for quotation, purchase orders, sales orders and invoices

  • Delivery information and product selections

  • Furniture specifications, drawings and floor plans

  • Interior design information, project location and project photographs

  • Material, finish and colour selections

  • Installation requirements and project correspondence

  • Warranty, repair or after-sales information

  • Complaints and feedback


Where you provide drawings, plans, photographs or other project documents to us, those documents may incidentally contain personal data.


2.5 Financial and Payment Information


  • Billing information and payment status

  • Bank transfer references

  • Bank account details where refunds or payments are required

  • Credit-related information for customers requesting credit arrangements

  • Transaction records


We generally do not store complete credit or debit card details where payments are processed through third-party payment providers.


2.6 Communication Information


We may retain communications made through email, telephone, WhatsApp, messaging applications, social media, website enquiry forms, meetings and customer service enquiries. This can include the contents of messages, documents, photographs and attachments submitted to us.


2.7 Website and Technical Information


  • Internet Protocol (IP) address

  • Browser type, device type and operating system

  • Approximate geographical location derived from technical information

  • Website pages viewed, date and time of access, and referring website

  • Session information and cookie identifiers

  • Website usage and interaction information


2.8 CCTV and Premises Information


Where CCTV is operated at our showroom, office, warehouse or other premises, images or video recordings of visitors may be collected for security, safety, loss prevention and operational purposes. Appropriate notices may be displayed at premises where CCTV is in use.


2.9 Marketing Information


  • Your marketing preferences

  • Whether you have consented to receive promotional communications

  • Your interaction with marketing emails, advertisements or campaigns

  • Products, services or projects in which you have expressed interest


2.10 Other Information


We may collect other information that you voluntarily provide or that is reasonably required in connection with our business relationship with you. We generally do not intend to collect sensitive personal data unless it is reasonably necessary and permitted by law.

3. How We Collect Personal Data

We may collect personal data directly from you when you:


  • Visit or use our website, or submit an online enquiry

  • Contact us by WhatsApp, telephone, email or social media

  • Request a quotation or visit our showroom

  • Meet our sales, project or design team

  • Purchase products or services from us, or enter into a contract with us

  • Submit drawings, specifications or project documents

  • Make payment or request credit terms

  • Participate in a promotion, event, survey or campaign

  • Make a complaint or warranty claim

  • Apply to become a supplier, contractor or business partner

  • Correspond or otherwise interact with us


We may also obtain personal data from third parties, including your employer or company, architects, interior designers, contractors, consultants, developers, hotel, restaurant or property operators, project owners, suppliers, logistics providers, business partners, publicly available directories, social media and professional networking platforms, government or regulatory authorities, and credit reporting or business information providers where legally permitted.


If you provide personal data relating to another person to us, you represent that you are authorised to provide that information and, where required, have informed that person about its disclosure to us.

4. Purposes for Which We Process Personal Data

4.1 Enquiries and Customer Service


  • Responding to enquiries and providing product information

  • Providing samples or catalogues

  • Preparing quotations

  • Arranging meetings or showroom visits

  • Communicating regarding products, services and projects


4.2 Sales and Contract Administration


  • Processing orders and administering contracts

  • Issuing quotations, sales orders and invoices

  • Collecting payments and processing deposits

  • Managing credit terms

  • Maintaining transaction records


4.3 Project Management


  • Reviewing drawings and specifications

  • Coordinating furniture selections and product customisation

  • Production and manufacturing coordination

  • Project scheduling and site measurement

  • Delivery planning and installation

  • Defect rectification, after-sales service and warranty support


4.4 Logistics and Delivery


  • Arranging local or international transportation

  • Coordinating warehouses

  • Customs and freight matters where applicable

  • Delivery scheduling

  • Verifying recipients and delivery addresses


4.5 Supplier and Business Partner Management


  • Evaluating suppliers and purchasing products or materials

  • Managing contractors and coordinating manufacturers

  • Processing supplier payments

  • Conducting due diligence where appropriate


4.6 Accounting and Finance


  • Accounting, bookkeeping and auditing

  • Tax reporting and debt recovery

  • Account reconciliation and financial management

  • Fraud prevention


4.7 Marketing and Business Development


Subject to applicable law and your choices, we may use relevant contact information to send information about our products and services, share new collections and product launches, send invitations to events or exhibitions, share completed projects, inform you about promotions, contact existing or prospective business customers, conduct customer relationship management and measure marketing performance. You may opt out of direct marketing communications at any time.


4.8 Website Operation and Analytics


  • Operating and maintaining our website

  • Analysing website traffic and understanding visitor behaviour

  • Improving website performance and diagnosing technical issues

  • Preventing fraud and security threats

  • Measuring advertising effectiveness


4.9 Portfolio and Project Documentation


Subject to contractual arrangements and applicable permissions, we may photograph completed furniture installations or projects for internal records, portfolio purposes, website content, social media, presentations, marketing materials, awards or publications. Where identifiable individuals are prominently featured, additional permission may be obtained where appropriate.


4.10 Legal and Regulatory Purposes


  • Complying with laws and regulations

  • Responding to lawful requests from authorities

  • Establishing, exercising or defending legal rights

  • Investigating suspected fraud or wrongdoing

  • Enforcing agreements

  • Protecting our employees, customers, property and business


4.11 Business Administration


  • Internal reporting, business planning and record keeping

  • Risk management and insurance

  • Corporate restructuring

  • Mergers, acquisitions or sale of businesses or assets

5. Basis for Processing

Depending on the circumstances, we process personal data because:


  • You have provided consent;

  • Processing is necessary to provide products or services requested by you;

  • Processing is necessary to perform a contract or take steps toward entering into a contract;

  • Processing is required or permitted by law;

  • Processing is necessary to protect our legitimate business interests, subject to applicable law; or

  • Processing is otherwise permitted under the PDPA.


Where consent is required, you may withdraw your consent subject to applicable legal and contractual limitations.

6. Whether Providing Personal Data Is Mandatory

Some information requested by us is necessary for us to provide products or services, prepare quotations, process orders, arrange deliveries, administer contracts or comply with legal obligations. Where information is identified as mandatory and you do not provide it, we may be unable to:


  • Respond adequately to your request;

  • Provide a quotation;

  • Open or maintain an account;

  • Process your order;

  • Provide credit terms;

  • Arrange delivery;

  • Perform contractual obligations; or

  • Provide certain products or services.


Other information may be provided voluntarily.

7. Disclosure of Personal Data

We do not sell personal data. We may disclose personal data where reasonably necessary to parties including:


  • Our directors, officers and employees;

  • Related or associated companies;

  • Furniture manufacturers, suppliers and product vendors;

  • Fabric and material suppliers;

  • Contractors and installers;

  • Freight forwarders, shipping companies, couriers, warehousing providers and logistics companies;

  • Professional consultants;

  • Architects, designers or contractors involved in your project;

  • Accountants and auditors;

  • Lawyers;

  • Insurance providers;

  • Banks and payment service providers;

  • Information technology, cloud storage and website hosting providers;

  • CRM and business software providers;

  • Marketing, advertising and analytics service providers;

  • Debt recovery agencies;

  • Government departments, courts, regulators and law-enforcement agencies; and

  • Other persons where disclosure is authorised or required by law.


We seek to disclose only information reasonably necessary for the relevant purpose. Where service providers process personal data on our behalf, we take reasonable measures to require appropriate confidentiality and data protection safeguards.

8. International and Cross-Border Data Transfers

Our business involves international suppliers, manufacturers, service providers and technology platforms. Accordingly, personal data may in certain circumstances be transferred to, stored in or accessed from countries outside Malaysia, including countries in which our manufacturers, suppliers or service providers operate.


For example, information relevant to a furniture order may need to be provided to an overseas manufacturer in order to manufacture, customise, package or ship your products.


Where personal data is transferred outside Malaysia, we will take reasonable steps required under applicable law to ensure that the transfer is permitted and that appropriate safeguards are applied. These safeguards may include contractual protections, confidentiality obligations, security measures, obtaining consent where required, or relying on another transfer mechanism permitted by law.

9. Cookies and Similar Technologies

Our website may use cookies, pixels and similar technologies. Cookies are small files placed on your device when you visit a website.


  • Essential cookies: required for website functionality, security and basic operation.

  • Preference cookies: used to remember selections or settings.

  • Analytics cookies: used to understand website traffic, visitor behaviour and website performance.

  • Advertising cookies: where applicable, used to measure marketing campaigns or deliver advertising that may be more relevant to visitors.


Third-party services such as analytics, social media or advertising platforms may also place cookies subject to their own privacy policies. Where required, visitors will be provided with an opportunity to manage non-essential cookies. You may also manage cookies through your browser settings. Disabling certain cookies may affect website functionality.

10. Third-Party Websites and Social Media

Our website may contain links to third-party websites, social media services or other platforms. Examples may include Instagram, Facebook, LinkedIn, WhatsApp, Google or other external services.


These third parties operate independently from us and have their own privacy policies. We are not responsible for the privacy practices, security or content of third-party websites or services. You should review their privacy policies before providing personal information.

11. Direct Marketing

Where permitted, we may contact you regarding products, projects, events, updates or services that may be relevant to you. Marketing communications may be sent through email, WhatsApp, SMS, telephone, social media or other electronic communication channels.


You may request that we stop sending direct marketing communications at any time by:


  • Using an unsubscribe facility where available;

  • Replying to the communication;

  • Informing the relevant member of our team; or

  • Contacting us using the details provided in this Privacy Policy.


Opting out of marketing does not prevent us from sending transactional or service-related communications relating to an existing enquiry, order, payment, delivery or contractual relationship.

12. Security of Personal Data

We take reasonable and practical measures to protect personal data against loss, misuse, unauthorised access, unauthorised disclosure, alteration, destruction and other unauthorised processing. Measures may include, where appropriate:


  • Access controls, password protection and authentication procedures;

  • Restricted employee access;

  • Data backups and security software;

  • Cloud security measures;

  • Confidentiality obligations and staff awareness;

  • Physical security and document access controls; and

  • Supplier or service-provider security requirements.


However, no internet transmission or electronic storage system can be guaranteed to be completely secure. You should also take reasonable precautions when communicating information electronically.

13. Personal Data Breaches

We maintain procedures intended to identify, assess and respond to personal data breaches.


Where a personal data breach occurs and notification is required under applicable Malaysian law, we will notify the relevant authorities and/or affected individuals in accordance with applicable legal requirements.

14. Retention of Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or to comply with legal, accounting, tax, contractual or regulatory requirements. Retention periods may vary depending on:


  • The nature of our relationship with you;

  • The nature of the information;

  • Applicable limitation periods;

  • Tax and accounting requirements;

  • Warranty periods;

  • Ongoing disputes;

  • Legal obligations; and

  • Legitimate business requirements.


When personal data is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it, subject to applicable law and practical technical limitations such as backup systems.

15. Accuracy of Personal Data

We take reasonable steps to maintain personal data that is accurate, complete, not misleading and up to date where necessary.


You are encouraged to inform us whenever your personal information changes.

16. Your Rights

Subject to applicable Malaysian law, you may have the right to:


16.1 Request Access


Request information about personal data that we hold about you and obtain access to that data, subject to exceptions permitted by law.


16.2 Request Correction


Request correction of personal data that is inaccurate, incomplete, misleading or outdated.


16.3 Withdraw Consent


Where processing is based on consent, withdraw your consent to future processing, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent does not necessarily affect processing carried out lawfully before the withdrawal.


16.4 Limit Processing


Request that we limit certain processing of your personal data where permitted by law.


16.5 Opt Out of Direct Marketing


Request that we stop using your personal data for direct marketing purposes.


16.6 Make an Enquiry or Complaint


Contact us with questions, concerns or complaints relating to our handling of personal data. We may need to verify your identity before acting on certain requests. A reasonable fee may be charged where permitted by applicable law.

17. Children’s Personal Data

Our products and services are generally intended for businesses and adults and are not directed toward children.


We do not knowingly seek to collect personal data directly from children unless reasonably necessary and with appropriate authorisation. If you believe that personal data relating to a child has been provided to us inappropriately, please contact us.

18. Employees of Corporate Customers and Business Contacts

Where our customer, supplier or business partner is a company or other organisation, we may process the personal data of its directors, employees, representatives and authorised personnel. Such information may be used for:


  • Managing the business relationship;

  • Communications;

  • Contract administration;

  • Quotations and orders;

  • Project coordination;

  • Deliveries;

  • Payments;

  • Credit management;

  • Customer support; and

  • Related business purposes.


The organisation providing such information should ensure that its personnel have been appropriately informed regarding the disclosure of their information to us.

19. Recordings, Photography and Events

We may occasionally conduct events, exhibitions, showroom activities, project photography or other business activities during which photographs or videos are taken. Where appropriate, reasonable notice will be provided.


Photographs or videos may be used for legitimate business, archival, portfolio, social media or marketing purposes subject to applicable permissions and laws. Individuals may contact us regarding concerns about identifiable images involving them.

20. Automated Processing and Analytics

We may use software and digital systems to organise enquiries, analyse customer interactions, improve business processes or measure marketing performance.


Unless separately disclosed, we do not intend to make decisions that produce significant legal or similarly significant effects on individuals solely through automated processing. If our practices change materially in this regard, this Privacy Policy may be updated accordingly.

21. Business Transfers

If all or part of our business is sold, transferred, merged, reorganised or otherwise undergoes a corporate transaction, personal data may be disclosed or transferred as part of that transaction, subject to appropriate confidentiality and legal safeguards.

22. Legal Disclosures

We may process or disclose personal data where reasonably necessary to:


  • Comply with a legal obligation;

  • Respond to a court order;

  • Respond to regulators or government agencies;

  • Cooperate with law-enforcement authorities;

  • Protect our legal rights;

  • Prevent or investigate fraud;

  • Protect the safety of individuals; or

  • Establish, exercise or defend legal claims.

23. Changes to This Privacy Policy

We may amend this Privacy Policy from time to time to reflect:


  • Changes in law or regulation;

  • Changes in our business operations;

  • New services or technologies;

  • Changes to our data-processing practices; or

  • New regulatory guidance.


The latest version will be published on our website with the date of the most recent update. Where changes are material, we may provide additional notice where appropriate. You are encouraged to review this Privacy Policy periodically.

24. Contact Us

Questions, requests or complaints concerning personal data may be directed to:


Personal Data / Privacy Contact — CHAIR MAN SDN. BHD.


  • SSM Registration No.: 1486512-A

  • D6-3A-16, Bangunan Perdagangan D6, 801, Jalan Sentul, 51000 Kuala Lumpur, Malaysia

  • Telephone: 017-619 6616

  • Email: sendtochairmanacc@gmail.com


Please include sufficient information for us to identify you and understand your request. We may request additional information to verify your identity before providing access to or making changes to personal data.

25. Consent and Acknowledgement

Where consent is required by law, your provision of personal data and/or affirmative consent allows us to process personal data for the purposes communicated to you, subject to your rights under applicable law.


Where processing is necessary for contractual, legal or other permitted purposes, certain processing may continue notwithstanding withdrawal of consent where permitted by law.

26. Language

This Privacy Policy is intended to be made available in Bahasa Malaysia and English in accordance with applicable requirements under the Malaysian Personal Data Protection Act 2010.


In the event of any inconsistency between the English and Bahasa Malaysia versions, the English version shall prevail, to the extent permitted by law.


© 2026 CHAIR MAN SDN. BHD. All rights reserved.