Mahkota ("we", "us", "our") is committed to respecting and protecting the privacy of all persons who engage with our residential search and tenancy coordination services. This Privacy Policy describes how we collect, use, store, and share personal data in connection with our services and this website, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
By using this website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.
1. Data We Collect
We collect personal data that you voluntarily provide when you contact us or engage our services. This may include:
- Your full name, email address, and phone number
- Nationality, residency status, and employment information relevant to tenancy eligibility
- Preferences regarding property type, location, budget, and move-in timeline
- Correspondence and notes exchanged during service delivery
- Documentation required for tenancy application purposes (e.g. passport, visa, employment letter)
We also collect non-personal technical data through standard website operations, including browser type, device information, pages visited, and session duration. This data is not linked to your identity and is used solely to maintain and improve website performance.
2. How We Use Your Data
We use the personal data you provide for the following purposes:
- To understand your residential requirements and identify suitable properties
- To coordinate viewings, lease drafting, and tenancy administration on your behalf
- To communicate with property owners or their representatives
- To fulfil legal and regulatory obligations under Malaysian tenancy and property law
- To respond to enquiries submitted through this website
- To send you service-related updates, with your consent
We do not use your personal data for automated decision-making or profiling.
3. Legal Basis for Processing
Under the PDPA, we process your personal data on the following bases:
- Consent — where you have given us clear permission to process your data for a specific purpose
- Contractual necessity — where processing is necessary to deliver a service you have engaged
- Legal obligation — where we are required to retain or share information by applicable law
- Legitimate interest — where processing supports the operation of our advisory service and does not override your rights
4. Data Sharing
We do not sell or rent your personal data to third parties. We may share relevant data with:
- Property owners or their authorised agents, as necessary for tenancy coordination
- Legal professionals engaged to review or draft tenancy agreements
- Government authorities or courts if required by law
Any third parties with whom we share data are expected to handle it responsibly and in a manner consistent with this Policy.
5. Data Retention
We retain personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by Malaysian law. Tenancy-related records are generally retained for seven years following the conclusion of a service engagement, in line with standard commercial practice.
When data is no longer required, it is securely deleted or anonymised.
6. Data Security
We take reasonable and appropriate measures to protect your personal data against unauthorised access, disclosure, alteration, or loss. Our internal access controls ensure that only personnel with a genuine need to view your data may do so.
While we apply appropriate safeguards, no method of data transmission or storage is entirely secure. We encourage you to contact us promptly if you have any concerns about how your data is handled.
7. Your Rights
Under the PDPA and subject to its limitations, you have the right to:
- Request access to the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Withdraw consent where processing is based on consent
- Request that we limit the use of your data in certain circumstances
To exercise any of these rights, please contact us using the details below. We will respond within a reasonable timeframe.
8. Cookies
This website uses cookies to maintain basic functionality and to understand how visitors navigate the site. For a full description of how we use cookies and how to manage your preferences, please refer to our Cookie Policy.
9. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
10. Changes to This Policy
We may revise this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Continued use of our website or services following such changes constitutes your acknowledgement of the revised Policy.
11. Contact Us
If you have any questions, concerns, or requests regarding your personal data, please reach out to us:
- Mahkota
- Persiaran Bangsar South, 59200 Kuala Lumpur
- Phone: +60 3 2241 7836
- Email: [email protected]