Privacy Policy

Sequoia Carpentry Sdn Bhd · Effective 17 May 2026 · Version 1.0

1. Who We Are

Sequoia Carpentry Sdn Bhd ("Sequoia Carpentry", "we", "us") is a carpentry contractor registered in Malaysia. This privacy policy describes how we collect, use, and protect personal data when you interact with us, particularly via WhatsApp.

2. What We Collect

When you message us via WhatsApp:

• Your WhatsApp phone number and display name as provided by WhatsApp Business API
• The content of messages, images, documents, and voice notes you send
• Timestamps of your messages and conversation status (open, pending, resolved)
• Any contact information or project details you voluntarily share in conversation

3. How We Use It

• To respond to your enquiries about our carpentry services
• To quote, schedule, and deliver work you commission
• To maintain a record of our conversations for service continuity and quality
• To comply with Malaysian tax, business, and consumer-protection law

4. Where Your Data Lives

Customer message content and conversation records are stored on infrastructure under our direct control in Singapore (the operational base of our group). We do not sell, rent, or share your data with third parties for marketing.

The systems we rely on:

• WhatsApp Business Cloud API (Meta Platforms, Inc.) — transports messages between you and us. Subject to Meta's own privacy policy.
• Chatwoot (open-source, self-hosted by us) — our internal conversation surface.
• Internal operational notes — kept on storage we own and operate.

5. Sharing

We share your data only when:

• You explicitly ask us to (e.g., with a supplier to fulfil your order)
• It is necessary to deliver a service you have engaged us for
• We are legally required to (court order, statutory request)

6. Retention

We retain WhatsApp conversation records for the duration of our customer relationship plus 7 years for tax and regulatory compliance under Malaysian law, after which records are deleted or anonymised.

7. Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you may:

• Request a copy of your personal data we hold
• Ask us to correct inaccurate data
• Withdraw consent to processing (which may end our ability to serve you)
• Request deletion, subject to legal retention requirements

To exercise any of these rights, message us on the same WhatsApp number, or write to the contact below.

8. Security

Messages travel over WhatsApp's end-to-end encrypted channel. Once received, conversation records are stored on hardware we operate and protect with strong authentication and access controls. Sensitive personal documents (identity card numbers, banking details) should not be sent over WhatsApp — please use a more secure channel for such items.

9. Cross-Border Transfer

Our message infrastructure is operationally based in Singapore. Sequoia Carpentry Sdn Bhd (Malaysia) and Sequoia Contractor Pte Ltd (Singapore) are sister entities under common ownership. Data transfer between them is permitted under PDPA s.129 because both entities are bound by equivalent data protection commitments described in this policy.

10. Changes

If we materially change this policy, we will note the new effective date at the top and, where practical, message active conversations to inform you. The current version is always available at this URL.

11. Contact

For privacy questions:

• WhatsApp: +60 19-834 8500 (Sequoia Carpentry MY)
• Email: privacy@sequoia-group.co

A sister policy applies to Sequoia Contractor Pte Ltd (Singapore) for SG-side interactions: /privacy/sg/ · Terms of Service: /terms/