Privacy Policy
Last Updated: 15 February 2025 · Effective Date: 15 February 2025
Permata Estates is committed to protecting the personal information of everyone who contacts us, uses our website, or stays in our properties. This policy explains what information we collect, how we use it, and the choices available to you. It applies to all personal data collected through our website at permatoat.sbs and through direct correspondence.
1. Who We Are
Permata Estates is a heritage property rental business based at 31 Jalan Merdeka, 75000 Melaka, Malaysia. We are the data controller responsible for personal information collected through our website and enquiry processes. For privacy-related enquiries, contact us at [email protected].
2. Personal Data We Collect
We collect personal information when you submit an enquiry form on our website, contact us by telephone or email, or enter into a rental agreement with us. The categories of data collected include:
- Full name and contact details (email address, telephone number)
- Enquiry content, including dates, group size, and property preferences
- Correspondence exchanged with our team
- Rental agreement details and payment records for confirmed bookings
- Technical data such as IP address, browser type, and pages visited, collected automatically by our website analytics
We do not collect sensitive personal data (such as health information, passport copies, or financial account details) unless directly required for a specific rental arrangement and with your explicit consent.
3. How We Use Your Data
Personal data is used for the following purposes:
- Responding to enquiries — to reply to your messages and provide information about our properties
- Managing rental agreements — to administer bookings, process payments, and provide the services you have requested
- Improving our services — anonymous analytics data helps us understand how our website is used
- Legal and regulatory compliance — where required by Malaysian law or contractual obligations
We do not use your personal data for automated decision-making or profiling. We do not send unsolicited marketing communications unless you have specifically opted in to receive them.
4. Legal Basis for Processing
We process personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). The legal bases on which we rely include: your consent (for enquiry submissions and analytics cookies); the performance of a contract (for rental agreements); and our legitimate interests in managing our business and responding to correspondence.
5. Data Retention
Enquiry data is retained for 12 months from the date of last contact. Rental agreement records are retained for 7 years in accordance with Malaysian accounting and contract law requirements. Website analytics data is retained for up to 26 months. You may request deletion of your data at any time, subject to legal retention requirements.
6. Data Sharing
We do not sell, rent, or trade personal data with third parties. We may share data with service providers who assist in website hosting, analytics, and payment processing — strictly for the purposes described in this policy and under appropriate data processing agreements. We may disclose information where required by Malaysian law or legal proceedings.
7. Cookies
Our website uses cookies to support basic functionality and to understand usage patterns. For full details, including how to manage your preferences, please see our Cookie Policy.
8. Your Rights Under the PDPA
Under Malaysia's Personal Data Protection Act 2010, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Withdraw consent to processing where consent is the legal basis
- Request that we cease using your data for marketing purposes
- Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP)
To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.
9. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss. Our website uses HTTPS encryption. Access to personal data within our organisation is restricted to team members who require it for legitimate business purposes.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.
11. Children
Our website and services are intended for adults aged 18 and above. We do not knowingly collect personal data from minors. If you believe we have inadvertently received data from a person under 18, please contact us at [email protected] so we may address the matter promptly.
12. Changes to This Policy
This policy may be updated from time to time. When material changes are made, the updated date at the top of this page will be revised and, where appropriate, we will notify enquirers or rental clients by email. Continued use of our website following any update constitutes acceptance of the revised policy.
13. Contact
For any privacy-related questions or to exercise your rights under the PDPA:
Permata Estates
31 Jalan Merdeka, 75000 Melaka, Malaysia
Email: [email protected]
Phone: +60 6-283 4716