This notice applies if you are based in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with data protection laws similar to the GDPR. It supplements our Privacy Policy and explains your specific rights under GDPR.
Who controls your data
Top Systems Group is operated by Tophome Furnishings Sdn Bhd (SSM 199901014043 / 0488943V), Melaka, Malaysia.
53-2, Jalan Bukit Beruang Indah 1, Taman Bukit Beruang Indah, 75450 Bukit Beruang, Melaka, Malaysia
Email: darren@topsystemsfurniture.com
What we collect and why
When you submit an inquiry, we collect your name, company, and email address, along with the details of your inquiry and any optional project file you choose to attach. We use this information solely to respond to your business inquiry.
Lawful basis: Legitimate interests — responding to a business-to-business inquiry you have initiated. We do not use your data for marketing without your explicit consent.
Your inquiry, including any attached files, is sent from our website server directly to our team by email. Attached files are not stored on the website.
Form security (Cloudflare Turnstile): The contact form uses Cloudflare Turnstile, a security check that stops automated spam. To run the check, Cloudflare receives technical information from your browser, such as your IP address and browser details, but not the content of your inquiry. To limit repeated submissions, our website server also keeps a one-way coded (hashed) version of your IP address and the times of recent submissions; old records are deleted automatically.
Lawful basis: Legitimate interests — protecting the contact form from spam and abuse.
Website usage (Microsoft Clarity and Google Analytics): We use Microsoft Clarity to understand how visitors use this website: pages viewed, clicks, scrolling, and session recordings, with form inputs masked. We also use Google Tag Manager to load Google Analytics 4, which measures pages viewed, how visitors arrived, device and browser type, and approximate location. Both set first-party cookies. Neither is used for advertising or retargeting.
Lawful basis: Consent. If your device is set to a European time zone (including Iceland, the Canary Islands, Madeira and the Azores), neither Clarity nor Google Tag Manager (with Google Analytics) loads, and no analytics cookies are set, until you choose “Accept analytics” in the bar at the bottom of the screen. If you choose “Decline”, they stay off. Your choice is saved in your browser’s local storage on that device, and you can change it at any time with the button below.
To change your analytics choice on this device:
Data transfers outside the EEA
The contact form security check is run by Cloudflare, a US-based company. Cloudflare participates in the EU–US Data Privacy Framework. Details at cloudflare.com/privacypolicy.
Website usage data collected by Microsoft Clarity is processed by Microsoft, a US-based company. Microsoft participates in the EU–US Data Privacy Framework. Details at privacy.microsoft.com/privacystatement.
Data collected by Google Analytics is processed by Google, a US-based company. Google participates in the EU–US Data Privacy Framework. Details at policies.google.com/privacy.
Our team is based in Malaysia. Malaysia is not an EEA-adequate country. Data shared with us is processed solely for the purpose of responding to your inquiry.
Your rights
Under GDPR you have the right to:
- Access — request a copy of personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data ("right to be forgotten")
- Restriction — ask us to limit how we use your data
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests
To exercise any right, email darren@topsystemsfurniture.com. We will respond within 30 days.
No automated decision-making
We do not use automated decision-making or profiling. All inquiries are reviewed by a person.
Complaints
If you believe we have handled your data incorrectly, you have the right to lodge a complaint with the supervisory authority in your country of residence. In the UK this is the ICO (ico.org.uk). In the EEA, contact your national data protection authority.