Privacy policy

Last updated: 3 November 2026

This policy explains how Interior.my handles your personal data, in line with the Personal Data Protection Act 2010 (PDPA).

What we collect

• Your name, email address and phone number.
• Your floor plan, inspiration photos and design preferences (property type, rooms, style, household, budget, notes).
• Messages you send us through the contact form (name, email, phone if you give it, your message and, for a commercial quote, the type, size and location of the space).
• Payment status from ToyyibPay. We never see or store your card or bank details.
• Job applications through our careers page (your details, CV and portfolio link), used only to consider your application.
• Basic technical data needed to run and protect the website (for example a bot check by Cloudflare Turnstile).

Why we use it

Only to prepare and deliver your design, to contact you about your order, to answer your messages and quote requests, and to handle payments, revisions and refunds. We do not sell your data and we do not use your plan for advertising.

Who processes it for us

We use trusted service providers to run the service: Cloudflare (website, database, file storage and email), and AI model providers Anthropic and OpenAI (to help read plans and produce text and images for your design). They process data only to provide their service to us.

When we advertise on Facebook and Instagram, we use the Meta Pixel and Meta Conversions API to measure our ads: Meta receives the pages you visit on interior.my, and when you send a message, place or pay for an order, that event with your email address and phone number in hashed (scrambled) form. Meta uses this to show our ads to the right people and to tell us how they perform. Pages with private links (your order page, feedback links) are never measured. You can control ad settings in your Facebook / Instagram account and block cookies in your browser.

How long we keep it

Unfinished orders are deleted after 7 days. Your floor plan, photos and finished proposal are deleted 90 days after delivery. We keep basic order records (name, email, amount, dates) as long as needed for accounting and legal reasons. Contact form messages are kept as long as needed to answer them and follow up on a quote; you can ask us to delete them at any time.

Your rights

You can ask to see, correct or delete your personal data, or withdraw consent, by emailing [email protected]. We reply within 21 days.

Security

Data is sent over encrypted connections and stored with access limited to the people and systems that prepare your design. Your order page uses a private, unguessable link: please do not share it publicly.