Contents
01
Introduction
Kemboja ("we", "our", "us") is a residential property advisory based at Jalan Kiara 5, Mont Kiara, 50480 Kuala Lumpur, Malaysia. We assist clients in finding and settling into quality rental residences across the Mont Kiara district.
This Privacy Policy governs the collection, use, and retention of personal data submitted to us through our website at kembojae.pro or shared directly during our advisory process. It applies to all individuals who interact with our website, contact us by telephone or email, or engage our services.
We process personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs commercial transactions involving personal data. By using our website or engaging our services, you acknowledge the practices described in this policy.
02
Data We Collect
Information You Provide Directly
- Full name and preferred form of address
- Email address
- Telephone or WhatsApp number
- Residence requirements (area preferences, budget range, tenancy duration)
- Any other details shared in enquiry messages
Information Collected Automatically
- IP address and approximate geographic location
- Browser type and version
- Pages visited and time spent on site
- Referring URL (how you arrived at our website)
- Cookie identifiers (see Section 5)
Legal Basis and Retention
We collect your data on the basis of:
- Consent — when you submit our enquiry form
- Legitimate interest — for website analytics and service improvement
- Contractual necessity — when you engage our advisory services
Enquiry records are retained for up to 24 months. Active client files are held for the duration of the tenancy plus 36 months for record purposes, in keeping with standard Malaysian property practice.
03
How We Use Your Data
We use personal data solely to support and deliver our residential advisory services. Specifically:
- Responding to your enquiry and coordinating property viewings
- Preparing residence shortlists and building dossiers tailored to your requirements
- Facilitating lease documentation, owner correspondence, and tenancy handover
- Communicating service updates relevant to your active tenancy
- Improving our website based on aggregated, anonymised usage data
- Meeting obligations under Malaysian law, including record-keeping requirements
We do not sell personal data to third parties. We do not use your information for marketing by unaffiliated organisations. If we share data with a service provider (such as a document platform or analytics tool), that sharing is governed by a data processing agreement, and your information is used only to support the service described at the time of collection.
04
Data Protection Measures
We apply reasonable and proportionate security measures to protect the personal data we hold:
- Data in transit is encrypted using TLS/HTTPS
- Access to client records is restricted to team members with a direct service role
- Physical files, where maintained, are stored in secured premises
- Passwords for internal systems meet minimum strength requirements and are not shared
- We review our data handling practices periodically
In the event of a data breach that is likely to affect your rights, we will notify you without undue delay and, where required, notify the relevant authority under Malaysian PDPA obligations.
06
Your Rights
Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:
Access
Request a copy of the personal data we hold about you.
Correction
Ask us to correct inaccurate or incomplete data.
Objection
Object to processing based on legitimate interest where our interest is not compelling.
Withdraw Consent
Withdraw consent at any time. This does not affect processing carried out before withdrawal.
Erasure
Request deletion of data that is no longer necessary, subject to our legal retention obligations.
Portability
Receive a copy of your data in a structured, commonly used format where technically feasible.
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you are not satisfied with our response, you may contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.
07
Third-Party Links
Our website may contain links to external resources — building directories, property portals, or other reference material. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any external site you visit.
Where we embed third-party tools (such as Google Maps on our main page), those services operate under their own privacy terms. The Google Maps embed on our contact page does not require an account and does not collect personally identifiable information through our integration.
08
Children's Privacy
Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently received information from a minor, please contact us and we will remove it promptly.
09
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the services we offer. When we make material changes, we will revise the "Last Updated" date at the top of this page.
We encourage you to review this policy periodically. Continued use of our website or services after a change is posted indicates your acceptance of the revised terms.
10
Contact for Privacy Enquiries
For any questions about this policy, to exercise your rights, or to raise a concern about how we handle your data, please contact our data team:
Postal Address
Kemboja
Jalan Kiara 5, Mont Kiara
50480 Kuala Lumpur, Malaysia
Telephone
+60 3 6201 8463