Privacy Policy
Last Updated: January 30, 2026
Introduction
Amberveil is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, share, and protect information about our clients and website visitors. We handle all personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and maintain strict confidentiality standards.
This policy applies to information collected through our website, direct communications, and property rental arrangements. By using our services or providing your information, you consent to the practices described in this policy.
Information We Collect
Personal Data Provided by You
We collect personal information that you voluntarily provide when you:
- Submit inquiries through our contact form
- Request property viewings or information
- Enter into rental agreements
- Communicate with our team via email or phone
- Subscribe to our updates or newsletters
This information may include: full name, email address, phone number, residential address, employment details, passport or identification numbers (for rental agreements), and payment information.
Automatically Collected Information
When you visit our website, we automatically collect certain technical information including IP address, browser type, device information, pages visited, time spent on pages, and referring website addresses. This data helps us improve website functionality and user experience.
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your browsing experience. For detailed information about our cookie practices, please refer to our Cookie Policy.
How We Use Your Information
Service Delivery
- Process and manage your property rental arrangements
- Coordinate property viewings and tours
- Handle maintenance requests and service coordination
- Manage payment processing and invoicing
- Provide customer support and respond to inquiries
Communication
- Send booking confirmations and rental agreements
- Provide important updates about your property or rental
- Respond to questions and requests
- Send service announcements and policy updates
Legal Basis for Processing
We process your personal data based on: contract performance (to fulfill rental agreements), legitimate business interests (to improve our services and maintain client relationships), your consent (for marketing communications), and legal obligations (compliance with Malaysian property and tax regulations).
Data Sharing and Disclosure
Third-Party Service Providers
We share information with trusted service providers who assist in our operations:
- Payment processors for secure transaction handling
- Property management and maintenance contractors
- Housekeeping and cleaning services
- Analytics providers for website performance
- Email and communication platforms
These providers are contractually obligated to protect your data and use it only for specified purposes.
Property Owners
For properties we manage on behalf of owners, we may share relevant tenant information with property owners as required by rental agreements and Malaysian property law.
Legal Requirements
We may disclose information if required by law, court order, or government request, or if necessary to protect our rights, property, or safety, or that of our clients and the public.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of sensitive data during transmission
- Secure servers with access controls and monitoring
- Regular security assessments and updates
- Employee training on data protection practices
- Limited access to personal information on a need-to-know basis
While we take reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.
Data Retention
We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specific retention periods include:
- Rental agreements and related documents: 7 years after tenancy ends (as required by Malaysian tax law)
- Payment and financial records: 7 years (tax and accounting requirements)
- General inquiries and communications: 2 years from last contact
- Marketing consent records: until consent is withdrawn
After these periods, we securely delete or anonymize personal data unless retention is required for legal or legitimate business purposes.
Your Rights
Under Malaysia's Personal Data Protection Act, you have the following rights:
Right to Access
You may request a copy of the personal data we hold about you. We will provide this information within 21 days of receiving your request.
Right to Correction
You have the right to request correction of inaccurate or incomplete personal data. We will update your information promptly upon verification.
Right to Withdraw Consent
Where we rely on your consent to process data (such as marketing communications), you may withdraw that consent at any time by contacting us or using unsubscribe links in our emails.
Right to Limit Processing
You may request that we limit how we use your personal data in certain circumstances, such as while we verify accuracy or assess legitimate grounds for processing.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected]. We may require verification of your identity before processing your request.
Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately so we can delete it.
International Data Transfers
We primarily process data within Malaysia. If we transfer personal data outside Malaysia, we ensure appropriate safeguards are in place as required by the PDPA, such as contractual commitments or certification schemes.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will post the updated policy on our website with a revised "Last Updated" date. Material changes will be communicated through email to registered clients or prominent website notice. Continued use of our services after changes indicates acceptance of the updated policy.
Contact Information
For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Amberveil
Data Protection Officer
5 Jalan Conlay
50450 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3-2371 8549
Supervisory Authority
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia:
Personal Data Protection Department
Ministry of Communications and Digital
Level 5, Lot 4G9, Precinct 4
Federal Government Administrative Centre
62100 Putrajaya, Malaysia