Privacy Policy

1. Introduction

At AEVI CASA, we respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data in accordance with the Personal Data Protection Act 2012 (PDPA), including all amendments as of 2024.

By interacting with us—including visiting our website, submitting an enquiry, or engaging our services—you consent to the practices described in this Policy.

2. What Personal Data We Collect

We collect personal data you voluntarily provide, such as:

Full name
Contact information (email, mobile, address)
Residential/project location
Design and lifestyle preferences
Project requirements and specifications
Payment and billing details (where applicable)

We also collect data automatically through our website:

Device and browser type
IP address
Cookies and site usage analytics
Date/time of access

3. Purpose of Collection and Use

We collect and use your data for the following purposes, under lawful bases including consent, contract performance, and legitimate interests:

To provide design consultations and fulfill project delivery
To prepare quotations, design layouts, and 3D renderings
To communicate project updates and service-related notices
To improve our services and customer experience
To conduct internal audits, quality control, and data analysis
To send marketing communications (only with your express consent)
To comply with legal and regulatory obligations

4. Deemed Consent & Legitimate Interests

As per the latest PDPA amendments, you may be deemed to have consented to the collection, use, or disclosure of your personal data:

Deemed consent by notification: If we notify you of a new purpose and you don’t opt out within a reasonable period.
Deemed consent by conduct: If your action implies consent (e.g., submitting a contact form requesting design services).
Legitimate interests: We may process data where it is necessary for our business operations and does not override your rights (e.g., fraud prevention, IT security, customer service improvements).

5. Disclosure of Personal Data

We do not sell or rent your data. Your information may be shared with:

Subcontractors and design partners involved in your project
Payment processors and logistics providers
Marketing and web service vendors (for operational use only)
Legal or regulatory authorities, where required by law

All vendors are bound by confidentiality and PDPA obligations.

6. Data Protection and Security

We implement administrative, physical, and technical safeguards to protect your data from:

Unauthorised access or modification
Disclosure or loss
Cybersecurity threats

Our staff are trained in data protection practices, and third parties are vetted for compliance.

7. Data Retention

We retain your data only as long as necessary for the purposes stated in this Policy, or as required by applicable laws (e.g., financial records retention). After that, it will be securely deleted or anonymised.

8. Access, Correction & Withdrawal of Consent

Under the PDPA, you have the right to:

Request access to your personal data
Correct errors or update your data
Withdraw consent for future use

9. Data Breach Notification

In the unlikely event of a data breach that results in (or is likely to result in) significant harm, we will:

Notify the Personal Data Protection Commission (PDPC) within 3 calendar days
Inform affected individuals where required, detailing the nature of the breach and mitigation steps

10. Use of Cookies

Our website uses cookies and tracking tools to enhance performance and analyze traffic. You may disable cookies in your browser settings, though some site features may not function optimally.

11. Third-Party Websites

Our website may contain links to external websites. We are not responsible for the privacy practices of these third parties. Please review their privacy policies separately.

12. Updates to This Policy

We reserve the right to update this Policy to reflect changes in law or our practices. The latest version will be available on our website with the effective date clearly indicated.