Most studios take a deposit, then show you a design. We build your homepage first, free, and you decide once you have seen it.
One of the homepages we built free this year, and the one we have permission to show. Pana Harrison, reinsurance brokers. We built it before anything was agreed. Their director saw it, and the whole revamp came out of that. Live since July 2026. Read how it happened →
Client work appears here only with written permission
Upcial is a boutique, SSM-registered web design studio in Penang, Malaysia, building high-trust, PDPA-compliant, BNM-aware websites for insurance brokers, reinsurance brokers, loss adjusters and financial services firms.
The risk is ours to carry first
Most firms are asked to pay a deposit, then hope. We invert it. Before any contract, we build a real, working concept of your website. Not a pitch deck, not a mood board. You judge the design on its merits. If it isn't right, you've signed nothing and paid nothing.
The deposit only follows the design. 60% to begin the build, paid after you've seen the concept and chosen to proceed. The 40% balance is due on your final sign-off, before your site goes live. You never pay it for a site you haven't approved.
We build one concept at a time. Each is researched and designed by the principal personally, so requests are taken in order received. When you request yours, you hold a place in the queue, not a spot on a mailing list.
Accepting two engagements for Q3 2026, limited so senior attention never thins.
What we can show you today
We don't publish client work without explicit written permission. That is the same discretion we extend to you. Here is what we can put on the record now.
In May we showed their director two directions on the same day, three weeks before the first invoice. Version 1 was the full-bleed handshake every broking site already uses. He declined it. Version 2 took their own line, we bring clarity to complex risk, and made the page perform it: the words a client turns up carrying drift loose across the screen and resolve on scroll into that one sentence. Live on their own domain since 31 July.
We showed them the website every broker has. They said no.
How we work
Your free concept becomes the approved design direction. The nine phases below turn it into your finished, launched website. Every engagement runs the same governance framework, built for firms where confidence and compliance matter as much as design. Most take six to twelve weeks, depending on scope.
Foundation
Establish clarity and direction
Discovery
Structured intake of positioning, audience, regulatory context, and objectives.
Stakeholder
mapping
Align decision-makers and approvers with your internal governance chain.
Compliance
review
Flag the sector context (BNM-aware, PDPA, brand governance) for your compliance team.
Strategy
Plan the right experience
Information
architecture
Map structure, content hierarchy, and user journeys with purpose.
UX
wireframing
Low-fidelity layouts that establish flow and conversion logic, validated before design.
Content
structuring
Organise and refine content to communicate with precision and credibility.
Delivery
Build, validate and launch
Development
Hand-coded to production standards, with performance, accessibility and SEO built in.
Cross-browser
QA
Systematic quality assurance across devices and browsers before sign-off.
Launch
governance
Controlled go-live with DNS management and a documented handover pack.
What we build
Every engagement, whatever the scope, follows all nine phases and includes compliance review, sign-off governance, and a documented handover. The scope adapts to your organisation. The standard does not.
For firms establishing their presence. Clear, complete, and held to the same standard as every other engagement.
For established firms where the website is a primary credibility signal.
For firms where the website is a board-level asset, not just a marketing tool.
Building for an insurance broker, an adjuster or a licensed financial adviser? What we build for regulated firms, and who signs off at each gate →
Want to see how these sit against what the rest of the Malaysian market charges? The 2026 price bands, and when a freelancer is the better buy →
Optional modules
Most engagements include one or two. All are fixed-price and confirmed in your proposal before work begins.
Content & branding
Copywriting (up to 10 pages)
RM 800
Photography (half-day shoot)
RM 1,800
Marketing & analytics
SEO keyword integration
RM 1,200
GA4 + Search Console
RM 600
Operations & conversion
Live chat widget
RM 600
Meeting scheduler
RM 500
Compliance & localisation
PDPA compliance pages
From RM 350
Bilingual website
From RM 1,800
Ongoing support
Maintenance retainer
From RM 500/mo
Every module is scoped and priced in your proposal before work begins, agreed in writing, with no surprises mid-engagement.
Who you are trusting
The firms we work with aren't buying a website. They're building a trust document, visible to regulators, scrutinised by prospects, and held to the standards of their sector.
Upcial is a web design studio in Penang, Malaysia. We work only with insurance brokers, reinsurance firms and financial services practices. For these firms a website is a credibility asset first, and a marketing tool second.
One senior person handles your project from the first call to the handover pack. Nothing is passed down to junior staff. Nothing about the scope is left vague. You have one person to hold to account. We take on only a few projects at a time, so that attention never thins.
Every engagement follows a nine-phase governance framework. Compliance review in Phase 03, stakeholder sign-off at each gate, fixed-price delivery from day one. And before any contract, we build a working concept of your website, so you see the design before you commit.
Koay Shi Chian spent fifteen years in B2B sales and account management, most of it with regulated and enterprise clients. That included ORIX Corporation, one of Asia's largest financial services groups, and IFCA MSC Bhd, a Bursa-listed Malaysian software firm. He saw from the inside how a compliance-led firm chooses a vendor, and what its due diligence asks for. That is why Upcial works only in this sector, and why governance comes first.
The questions we're asked most
The questions corporate buyers raise most often before commissioning a website in a regulated sector. If yours isn't here, ask it on the discovery call.
Upcial builds websites for financial services firms in Malaysia, and only for them: insurance brokers, reinsurance brokers, loss adjusters and licensed financial advisers. We design a working concept of your website before any contract, so you see it before you commit. Every engagement has a fixed price, agreed upfront. Every one includes a compliance review covering BNM-aware checks, PDPA and brand governance. And every one runs through nine phases, with your sign-off at each gate.
Upcial offers three engagement tiers: Essential (RM 12,000–15,000), Premium (RM 16,000–24,000), and Flagship (RM 28,000+, scoped per brief). All tiers follow the same nine-phase governance framework, include a compliance review, and carry a fixed price agreed upfront. 60% deposit to begin, 40% balance on final sign-off before the site goes live.
Yes. PDPA-compliant website design is part of every engagement: we review PDPA compliance in Phase 03, before any design work starts. That covers your contact forms, your privacy policy, your data collection notices, and how data is handled in your sector. The law is Malaysia's Personal Data Protection Act 2010, as amended in 2024.
Yes, and here is what that means in practice. In Phase 03 we flag the rules that apply to your sector. That includes statutory disclosures and the BNM Financial Consumer Alert List. We write down what we find, and your compliance team reviews it. We provide design and governance. We do not give regulatory advice.
A Premium engagement runs 8 to 12 weeks across nine phases. Each phase has one deliverable and your sign-off. Essential usually takes 6 to 8 weeks. Flagship is scoped per engagement.
Upcial is a web design studio in Penang, and takes work anywhere in Malaysia, including Kuala Lumpur, Petaling Jaya, Johor Bahru, Kota Kinabalu and Labuan. We work with you remotely, and you get a written report at every phase.
Free to use · No call required
The standards we build to, written down and open to anyone. Read your own site against them, with no form and no follow-up unless you ask.
Commission your website
Every engagement begins with a 30-minute discovery call. Tell us about your organisation and we'll reply within one working day. Concepts are built one at a time, in order received.
Free · No call required
Eighteen things a regulated firm's website must get right. Statutory disclosures, PDPA notices, and the trust signals corporate clients look for. Evaluate your current site against it, privately.