Privacy Policy

Introduction

Haldren is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect information when you use our property rental services in Johor Bahru, Malaysia.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and handle all personal data with appropriate care and confidentiality.

For privacy-related questions, contact us at [email protected].

Information We Collect

Personal Information

When you use our services, we collect the following personal data:

• Full name and contact details (phone number, email address)
• Mailing address and identification documents for lease agreements
• Employment information and income verification for rental applications
• Payment information and banking details for security deposits and rental payments
• Property preferences, budget requirements, and viewing feedback

Automatically Collected Information

Our website collects certain information automatically:

• IP address, browser type, and device information
• Pages visited, time spent on site, and navigation patterns
• Referring website and search terms used to find our site

Cookies and Tracking

We use cookies to enhance your browsing experience and analyze website usage. For detailed information about our cookie usage, please refer to our Cookie Policy.

How We Use Your Information

Service Delivery

We use your personal data to:

• Arrange property viewings and match you with suitable rental properties
• Prepare rental agreements and process lease documentation
• Coordinate move-in arrangements and communicate with property owners
• Provide ongoing support throughout your tenancy period
• Process rental payments and manage financial transactions

Communication

We may contact you to:

• Confirm appointments and provide viewing information
• Send property recommendations matching your criteria
• Update you on lease-related matters and maintenance issues
• Respond to inquiries and provide customer support

Legal Compliance

We process personal data to comply with legal obligations, including Malaysian tenancy regulations, tax requirements, and data protection laws.

Data Sharing and Third Parties

We share your information only when necessary:

Property Owners and Management

We share relevant tenant information with property owners and building management companies to facilitate rental agreements and property maintenance.

Service Providers

We work with trusted third-party service providers including:

• Payment processors for secure financial transactions
• Cloud storage providers for data management
• Email service providers for communication
• Analytics services to improve website performance

Legal Requirements

We may disclose personal data when required by law, court order, or government regulation, or to protect our legal rights and interests.

Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit and at rest
• Secure servers with regular security updates
• Access controls limiting data access to authorized personnel only
• Regular security audits and vulnerability assessments
• Staff training on data protection and privacy practices

Despite our security measures, no system is completely secure. We cannot guarantee absolute protection but commit to responding promptly to any security breaches.

Data Retention

We retain personal data for different periods depending on its purpose:

• Tenant information: For the duration of tenancy plus 7 years for legal compliance
• Financial records: 7 years as required by Malaysian tax regulations
• Inquiry data: 2 years from last contact if no rental agreement is established
• Marketing preferences: Until you withdraw consent
• Website analytics: 26 months

After the retention period, data is securely deleted or anonymized.

Your Rights

Under Malaysia's Personal Data Protection Act, you have the following rights:

Right to Access

You can request a copy of the personal data we hold about you.

Right to Correction

You can request correction of inaccurate or incomplete personal data.

Right to Withdraw Consent

You can withdraw your consent for data processing at any time, though this may affect our ability to provide services.

Right to Data Portability

You can request your personal data in a structured, commonly used format.

Right to Lodge a Complaint

You can lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your data protection rights have been violated.

To exercise these rights, contact us at [email protected]. We will respond to your request within 21 days.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have collected information from a minor, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through:

• Email notification to registered users
• Prominent notice on our website
• Updated "Last Updated" date at the top of this policy

Continued use of our services after policy changes constitutes acceptance of the updated policy.