Privacy Policy

1. Introduction

mutiarotwais ("we", "us", "our") is a property rental services company registered in Penang, Malaysia and operating from 15 Persiaran Gurney, 10250 George Town, Penang. We are committed to protecting the personal information of everyone who contacts us, makes an enquiry, or enters into a rental arrangement with us.

This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and your rights in relation to it. It applies to all data collected through our website at mutiarotwais.pro, by telephone, by email, or in person at our office.

Questions about this Policy may be directed to: [email protected]

2. Data We Collect

Personal Information You Provide

• Full name
• Email address
• Phone number (if provided)
• Postal address (if relevant to tenancy)
• Messages and correspondence sent through our contact form or by email
• Rental enquiry details including preferred property, dates, and guest numbers

Data Collected Automatically

• IP address and browser type (via website analytics)
• Pages visited and time spent on site
• Referring website address
• Cookie identifiers (see our Cookie Policy)

3. How We Use Your Data

We use personal information for the following purposes:

• Responding to your enquiries and matching you with suitable properties
• Processing and managing rental agreements
• Sending confirmation, receipt, or administrative correspondence related to your stay
• Improving our website and services based on aggregated analytics data
• Complying with Malaysian legal obligations, including the Personal Data Protection Act 2010 (PDPA)

We do not use your personal data for unsolicited marketing communications without your consent. We do not sell, rent, or trade your personal information to third parties.

4. Legal Basis for Processing

• Consent: Where you submit a contact form, you consent to us processing your data to respond to your enquiry.
• Contractual necessity: When entering a rental agreement, processing your information is required to fulfil that contract.
• Legitimate interest: We may process data for business administration and service improvement, where this does not override your rights.
• Legal obligation: Where required by Malaysian law, including the PDPA 2010.

5. Data Retention

We retain personal data for as long as is necessary for the purpose for which it was collected:

• Enquiry data (no tenancy resulting): deleted or anonymised within 12 months
• Tenancy records: retained for 7 years to comply with Malaysian financial and tax regulations
• Website analytics data: retained for up to 26 months in aggregated form

6. Data Sharing

We may share your information with:

• Property owners and on-site caretakers, to the extent required for your tenancy
• Analytics service providers operating under data processing agreements (e.g. Google Analytics)
• Regulatory or law enforcement authorities, if required by law

All third-party service providers are required to handle your data in accordance with applicable data protection law.

7. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:

• HTTPS encryption on our website
• Access controls limiting data access to authorised staff only
• Regular review of data handling practices

In the event of a data breach that may affect your rights, we will notify you and the relevant authorities as required under Malaysian law.

8. Cookies

Our website uses cookies. For a full explanation of the types of cookies used and how to manage your preferences, please refer to our Cookie Policy.

9. Your Rights

Under the Malaysian Personal Data Protection Act 2010 (PDPA), you have the following rights:

• Right of access: You may request a copy of personal data we hold about you.
• Right of correction: You may request that inaccurate data be corrected.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
• Right to prevent processing: You may request that we stop processing your data for direct marketing purposes.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their individual privacy policies.

11. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from individuals under 18. If you believe a minor has submitted data to us, please contact us and we will remove it promptly.

12. Policy Updates

We may update this Privacy Policy from time to time. The most current version will be published on this page with a revised "Last Updated" date. Continued use of our website following any update constitutes acceptance of the revised policy.

13. Contact

For any questions, concerns, or requests relating to your personal data, please contact: