Privacy Policy

2. Data We Collect

We collect personal data only when it is necessary for the purpose of delivering our services or responding to an enquiry. The categories of personal data we may collect include:

• Contact details: Full name, email address, and telephone number provided through our enquiry form or during a discovery conversation.
• Brief and preference data: Information about housing requirements, district preferences, budget range, and relocation timeline shared during the advisory process.
• Tenancy documentation: Where we coordinate a lease on your behalf, we may handle copies of identification and tenancy agreements necessary for that purpose.
• Website usage data: Technical information collected through cookies and analytics tools (see Section 5).

Legal basis: We process personal data on the basis of your consent (enquiry form), the performance of a service contract, or our legitimate interest in maintaining records relevant to the advisory relationship. Data relating to lease coordination is retained for six years in accordance with standard contractual record-keeping practice. Enquiry data not progressing to a service engagement is deleted within twelve months.

3. How We Use Your Data

Personal data collected by Cendana is used for the following purposes only:

• Responding to enquiries and conducting discovery conversations
• Delivering advisory, placement, and lease coordination services
• Maintaining records relevant to an ongoing tenancy
• Sending service updates or administrative communications relating to an active engagement
• Complying with applicable Malaysian legal and regulatory obligations

We do not sell personal data to third parties. We do not use personal data for unsolicited marketing without express consent. We do not share client identities or briefing details with property owners or building management without your explicit approval.

Where we engage third-party service providers (such as website analytics), those providers are required to process data only as directed by us and in accordance with applicable data protection requirements.

4. How We Protect Your Data

• All data transmitted through our website is encrypted via HTTPS/TLS.
• Internal access to personal data is restricted to staff directly involved in the relevant engagement.
• Physical and digital documents containing personal data are stored securely and subject to access controls.
• In the event of a data breach that may affect your rights, we will notify affected individuals in accordance with Malaysian PDPA requirements.

5. Cookies

Our website uses cookies to operate correctly (essential cookies) and, where you consent, to understand how visitors use the site (analytics cookies). We do not use cookies for advertising purposes. Full details of the cookies used, their purpose, and how to manage your preferences are set out in our Cookie Policy.

6. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to limit processing: In certain circumstances, you may request that we restrict the way we process your data.
• Right to complain: You may lodge a complaint with the Personal Data Protection Department of Malaysia (PDPD) if you believe your rights have been infringed.

To exercise any of these rights, write to us at [email protected]. We aim to respond within 21 days.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

8. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that data has been submitted by a minor, we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by posting a revised version on this page with an updated effective date. Continued use of our website or services following notification of changes constitutes acceptance of the revised policy.

10. Contact

For all data-related enquiries, please contact: