Privacy Policy

Last Updated: January 30, 2026

Introduction

Amberveil is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, share, and protect information about our clients and website visitors. We handle all personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and maintain strict confidentiality standards.

This policy applies to information collected through our website, direct communications, and property rental arrangements. By using our services or providing your information, you consent to the practices described in this policy.

Information We Collect

Personal Data Provided by You

We collect personal information that you voluntarily provide when you:

  • Submit inquiries through our contact form
  • Request property viewings or information
  • Enter into rental agreements
  • Communicate with our team via email or phone
  • Subscribe to our updates or newsletters

This information may include: full name, email address, phone number, residential address, employment details, passport or identification numbers (for rental agreements), and payment information.

Automatically Collected Information

When you visit our website, we automatically collect certain technical information including IP address, browser type, device information, pages visited, time spent on pages, and referring website addresses. This data helps us improve website functionality and user experience.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. For detailed information about our cookie practices, please refer to our Cookie Policy.

How We Use Your Information

Service Delivery

  • Process and manage your property rental arrangements
  • Coordinate property viewings and tours
  • Handle maintenance requests and service coordination
  • Manage payment processing and invoicing
  • Provide customer support and respond to inquiries

Communication

  • Send booking confirmations and rental agreements
  • Provide important updates about your property or rental
  • Respond to questions and requests
  • Send service announcements and policy updates

Legal Basis for Processing

We process your personal data based on: contract performance (to fulfill rental agreements), legitimate business interests (to improve our services and maintain client relationships), your consent (for marketing communications), and legal obligations (compliance with Malaysian property and tax regulations).

Data Sharing and Disclosure

Third-Party Service Providers

We share information with trusted service providers who assist in our operations:

  • Payment processors for secure transaction handling
  • Property management and maintenance contractors
  • Housekeeping and cleaning services
  • Analytics providers for website performance
  • Email and communication platforms

These providers are contractually obligated to protect your data and use it only for specified purposes.

Property Owners

For properties we manage on behalf of owners, we may share relevant tenant information with property owners as required by rental agreements and Malaysian property law.

Legal Requirements

We may disclose information if required by law, court order, or government request, or if necessary to protect our rights, property, or safety, or that of our clients and the public.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of sensitive data during transmission
  • Secure servers with access controls and monitoring
  • Regular security assessments and updates
  • Employee training on data protection practices
  • Limited access to personal information on a need-to-know basis

While we take reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specific retention periods include:

  • Rental agreements and related documents: 7 years after tenancy ends (as required by Malaysian tax law)
  • Payment and financial records: 7 years (tax and accounting requirements)
  • General inquiries and communications: 2 years from last contact
  • Marketing consent records: until consent is withdrawn

After these periods, we securely delete or anonymize personal data unless retention is required for legal or legitimate business purposes.

Your Rights

Under Malaysia's Personal Data Protection Act, you have the following rights:

Right to Access

You may request a copy of the personal data we hold about you. We will provide this information within 21 days of receiving your request.

Right to Correction

You have the right to request correction of inaccurate or incomplete personal data. We will update your information promptly upon verification.

Right to Withdraw Consent

Where we rely on your consent to process data (such as marketing communications), you may withdraw that consent at any time by contacting us or using unsubscribe links in our emails.

Right to Limit Processing

You may request that we limit how we use your personal data in certain circumstances, such as while we verify accuracy or assess legitimate grounds for processing.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We may require verification of your identity before processing your request.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately so we can delete it.

International Data Transfers

We primarily process data within Malaysia. If we transfer personal data outside Malaysia, we ensure appropriate safeguards are in place as required by the PDPA, such as contractual commitments or certification schemes.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will post the updated policy on our website with a revised "Last Updated" date. Material changes will be communicated through email to registered clients or prominent website notice. Continued use of our services after changes indicates acceptance of the updated policy.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Amberveil

Data Protection Officer

5 Jalan Conlay

50450 Kuala Lumpur, Malaysia

Email: [email protected]

Phone: +60 3-2371 8549

Supervisory Authority

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia:

Personal Data Protection Department

Ministry of Communications and Digital

Level 5, Lot 4G9, Precinct 4

Federal Government Administrative Centre

62100 Putrajaya, Malaysia