Privacy policy.
Last updated: 5 February 2026. This policy explains what personal data we collect through this website and during our work with you, how we use it, and your rights under the Malaysian Personal Data Protection Act 2010 (PDPA).
1. Who we are
Kindaroo Roofworks Sdn Bhd (“we”, “us”) is a private limited company registered in Malaysia under SSM No. 202401034567 (1551209-K), with offices at Suite 12-B, Menara Aspire, Jalan SS21/35, Damansara Utama, 47400 Petaling Jaya, Selangor, Malaysia. For privacy enquiries, contact us at [email protected].
2. What we collect
We collect the personal data you choose to provide through our enquiry form: your name, contact number, email address, the type of work you are enquiring about, and any additional message text. When you engage us for a project, we additionally hold your property address, photographs of the site, invoice and payment records, and any signed contracts.
When you browse the site, our hosting provider logs your IP address, browser type and pages visited for security and uptime monitoring. We do not run advertising trackers or third-party analytics that build long-lived user profiles.
3. How we use it
- To respond to enquiries and arrange surveys, repairs, replacements or inspections.
- To produce written quotations, contracts, photo reports and invoices.
- To honour our workmanship warranty and respond to warranty service requests.
- To meet our statutory obligations on record-keeping (Companies Act 2016, Income Tax Act 1967).
- Occasionally, to send you a reminder before your annual gutter clearing or pre-monsoon survey, only if you have opted in.
4. Lawful basis
We process your personal data on the basis of your consent (provided when you submit the contact form), our contract with you (where you engage us for services), and our legitimate interests (running the business, defending against claims, and managing warranties).
5. Who we share data with
We share data only where necessary: with insurers who require documentation for claims you have authorised, with our accountant for statutory bookkeeping, and with our hosting and email providers as a normal part of operating this website and our correspondence. We do not sell or rent personal data to anyone, ever.
6. Retention
Enquiry data is held for 24 months unless the enquiry becomes an active project. Project data — contracts, photo reports, invoices — is held for seven years from the close of the project, in line with Malaysian tax law. Warranty-related records are held for the duration of the warranty plus three years.
7. Your rights
Under the PDPA you have the right to access the personal data we hold about you, ask us to correct anything inaccurate, withdraw consent for marketing communications, and lodge a complaint with the Personal Data Protection Commissioner of Malaysia. Reach us at [email protected] with any of these requests; we respond within 21 working days.
8. Security
Our website runs over HTTPS. Form submissions are stored on a server inside Malaysia. Access to client records is limited to named team members with two-factor authentication on every account.
9. Changes
If we change this policy materially we will refresh the date at the top of this page and, where appropriate, notify ongoing clients by email. Continued use of the website after a change indicates acceptance of the updated terms.