Privacy Policy

Last updated: 19 September 2026

This Privacy Policy explains how Itoli Ceramic Sdn Bhd (“Itoli Ceramic”, “we”, “us”) collects, uses and protects personal data when you use itoliceramic.com, send us an enquiry or quote request, or buy from us. We handle personal data in line with the Personal Data Protection Act 2010 of Malaysia (PDPA).

This policy covers our website and the enquiries that come through it. It does not cover information collected in person at the showroom, by phone or on WhatsApp, except where that information is later stored in the same systems described below.

Who we are

Itoli Ceramic Sdn Bhd is a tiles and sanitary ware supplier with a showroom at AL 121, Showroom E2, 13th Miles, Jalan Subang, Kampung Baru Sungai Buloh, 47000 Shah Alam, Selangor, Malaysia. You can reach us through the contact page, by email at itoliceramicsb@gmail.com, or by phone at +603-6156 8866.

What we collect

We collect only what is needed to answer you and to fulfil an order:

  • Contact and quote requests: your name, company (optional), email address, phone number, the products you added to your quote list and the message you write.
  • Orders and deliveries: billing and delivery address, the contact number of the person receiving the goods, invoice and payment details. Card and online-banking details are handled by the payment provider, not stored by us.
  • Website usage: pages visited, the device and browser used, approximate location from your IP address, and how you reached the site. This is collected through cookies and analytics tools (see Cookies below) and is not used to identify you by name.

How we use it

  • To reply to your enquiry and prepare a quotation.
  • To process, invoice, deliver and support your order, including contacting you to confirm delivery details.
  • To keep records we are required to keep for accounting and tax purposes.
  • To understand how the website is used and improve it.
  • To send you information about our products or promotions, only if you have agreed to receive it. You can opt out at any time by replying to the message or contacting us.

We do not sell personal data to anyone.

Who we share it with

We share personal data only where it is needed to do the things above:

  • Service providers that run parts of the website and our communications for us, such as web hosting, email delivery, form handling and analytics. They act on our instructions.
  • Delivery partners and transporters, who receive the delivery address and a contact number for the recipient.
  • Payment providers and banks, to process your payment.
  • Government authorities or professional advisers, where the law requires it or where it is necessary to protect our rights.

Some of these providers may store data outside Malaysia. Where that happens we take reasonable steps to ensure the data is protected to a standard comparable to the PDPA.

Cookies and analytics

Our website uses cookies and similar technologies. Some are necessary for the site to work, such as remembering the products in your quote list. Others help us measure traffic and understand which pages are useful, through tools such as Google Analytics. You can block or delete cookies in your browser settings; the site will still work, but your quote list may not be remembered between visits.

How long we keep it

Enquiry and quote data is kept for as long as it is needed to deal with the enquiry and for a reasonable period afterwards. Order, invoice and payment records are kept for the period required by Malaysian accounting and tax law, which is generally seven years. Analytics data is kept according to the retention settings of the tool used.

How we protect it

We use reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including secure (HTTPS) connections to the website, access controls on the systems that store enquiries and orders, and limiting access to staff who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights

Under the PDPA you may ask us to:

  • tell you what personal data we hold about you and give you a copy;
  • correct personal data that is inaccurate or out of date;
  • stop using your personal data for marketing;
  • withdraw consent you have given, where our use of the data relies on that consent.

To make a request, contact us using the details above. We may ask you to verify your identity before we act on it. We will respond within the time allowed by the PDPA.

Links to other websites

Our website may contain links to other sites, such as brand partners, map services or social media. This policy does not apply to those sites, and we are not responsible for how they handle your data. Please read their own privacy policies.

Children

Our website and services are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will remove it.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Continued use of the website after a change means you accept the updated policy.

Contact

Questions about this policy or about your personal data can be sent to itoliceramicsb@gmail.com, through the contact page, or by post to the showroom address above.