Privacy Policy

1. Introduction

Permata Advisory Sdn. Bhd. ("Permata", "we", "our") is committed to protecting the personal data of individuals who enquire about or engage our residential advisory services. This Privacy Policy explains what information we collect, why we collect it, how it is used, and what rights you have in relation to it.

This policy applies to personal data collected through our website, by email or telephone, and in the course of providing our services. It is governed by Malaysian law, including the Personal Data Protection Act 2010 (PDPA).

If you have questions about how we handle your data, please contact us at [email protected].

2. Data We Collect

Depending on the service you enquire about or engage, we may collect the following categories of personal data:

• Full name and preferred form of address
• Email address and telephone number
• Current location and nationality
• Residential preferences and requirements (districts, lease duration, budget range)
• Employment or relocation context (where relevant to service delivery)
• Communication records including emails, call notes, and written correspondence
• Technical data from website visits (IP address, browser type, pages accessed, via cookies)

We do not collect sensitive personal data (such as health information, political opinions, or financial account details) unless specifically required for a particular service and with your explicit consent.

3. How We Collect Data

We collect personal data through:

• Enquiry forms submitted on our website
• Email and telephone correspondence
• In-person or video consultations
• Cookies and web analytics tools (see our Cookie Policy)
• Referrals from existing clients (where you have been introduced to us by a third party)

4. Legal Basis for Processing

We process personal data on the following grounds under the PDPA 2010:

• Consent: Where you have submitted an enquiry form or contacted us voluntarily
• Contractual necessity: Where processing is required to provide a service you have engaged
• Legitimate interests: For service improvement, internal record-keeping, and follow-up communication related to an enquiry you have made
• Legal compliance: Where processing is required to comply with applicable Malaysian law

5. How We Use Your Data

Your personal data is used to:

• Respond to enquiries and provide the services you have requested
• Prepare and maintain client records throughout an engagement
• Communicate updates, property notes, and advice relevant to your service
• Coordinate with landlords, property managers, or other parties on your behalf (only with your agreement)
• Improve our services based on general usage patterns (using anonymised or aggregated data where possible)
• Comply with legal or regulatory obligations

We do not use your personal data for unsolicited marketing communications. If we send any service-related updates, you may opt out at any time by contacting [email protected].

6. Data Retention

We retain personal data for as long as necessary to provide our services and for a reasonable period thereafter for record-keeping and legal purposes. In general:

• Enquiry records from individuals who did not proceed with a service: up to 12 months from last contact
• Client records relating to a completed engagement: up to 7 years from the end of the engagement, in line with standard professional and statutory requirements in Malaysia
• Cookie and analytics data: in accordance with our Cookie Policy, typically 12–24 months

After the applicable retention period, personal data is securely deleted or anonymised.

7. Data Sharing

We do not sell, rent, or trade personal data. We may share data with:

• Property owners or managers: Only with your explicit agreement, and only information necessary to facilitate your tenancy
• Service providers: Including website hosting, email, and analytics providers, who are bound by confidentiality obligations
• Legal or regulatory authorities: Where required by Malaysian law or a court order

8. Data Security

We take reasonable steps to protect personal data from unauthorised access, loss, or misuse. Measures include:

• Encrypted email transmission and secure storage for client records
• Access to client data limited to staff directly involved in service delivery
• Physical and digital access controls on all devices used to store client information
• Periodic review of data handling procedures

In the event of a data breach that poses a risk to your rights, we will notify you as soon as reasonably practicable and take steps to contain and address the breach.

9. Cookies

Our website uses cookies to understand how visitors engage with the site and to support basic functionality. For full details of the cookies used and how to manage your preferences, please refer to our Cookie Policy.

10. Your Rights

Under the PDPA 2010 and applicable Malaysian data protection principles, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to processing where consent is the legal basis
• Request deletion of your personal data, subject to legal retention obligations
• Object to processing carried out on the basis of legitimate interests
• Lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) if you believe your data has been mishandled

To exercise any of these rights, please contact [email protected]. We will respond within 21 business days.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently before providing any personal data.

12. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data to us, please contact us and we will take appropriate steps to remove it.

13. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the revised policy on our website with an updated effective date. Continued use of our website or services following such changes constitutes acceptance of the updated policy.

14. Contact

For any data privacy enquiries, please contact: