1. Who we are

Hydroline Pipeworks Sdn Bhd (registration 202401037612 (1428675-K)) is the data controller for the personal information described below. We operate the website at warplink.one. The Personal Data Protection Act 2010 of Malaysia (PDPA) governs how we handle your data. If you have questions, write to [email protected].

2. What we collect, and why

2.1 Data you give us

Contact form submissions: name, phone, email, the address of the property and a description of the work. We use this to schedule the visit and send a quote. We do not have a CRM — the message goes to a shared inbox that the dispatcher and the engineer assigned to your job can access.
Payment details: handled by the financial institution at the point of sale (FPX, DuitNow, bank transfer reference). We never see and never store a card number.

2.2 Data the website collects automatically

Server logs: IP address, browser, referrer URL, time of request. Kept for 30 days for security and capacity planning.
Cookies: a single first-party cookie remembers your cookie-preference choice. We do not run third-party advertising tags. See our Cookie Policy.

3. The legal basis

We process your data because (a) you have given us your data so we can deliver a service you asked for, or (b) we have a legitimate operational reason to keep records of completed jobs for warranty and accounting purposes.

4. Who sees the data

Inside Hydroline: the dispatcher and the engineer assigned to your job. Outside Hydroline: our accountant for jobs that produce a tax invoice; our hosting provider only as part of standard server operation. We do not sell, rent or trade any personal information.

5. How long we keep it

Contact form submissions that did not become a paid job: deleted after 90 days.
Records of paid jobs: kept for 7 years for accounting and warranty traceability.
Server logs: 30 days.

6. Your rights under the PDPA

You may at any time ask us to:

Confirm what data we hold about you and supply a copy.
Correct information that is wrong or out of date.
Delete information we no longer have a lawful reason to keep.
Stop using your contact details for any further communication that is not directly related to a paid job.

Email [email protected] and we will respond within 21 days as required by the PDPA.

7. Security

Server access is restricted to a small number of named accounts protected by multi-factor authentication. Backups are encrypted at rest. We review access logs quarterly.

8. Children

This website is not directed at children under 16 and we do not knowingly collect data from them.

9. Updates to this policy

If we change anything material we will update the date at the top of this page and, where appropriate, notify customers with active jobs by email.

Privacy Policy