Privacy Policy

1. Introduction and Commitment

Zephyrine is committed to handling your personal data with care and transparency. We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy describes what data we collect, why we collect it, how we use it, and the rights you hold in relation to it. If you have questions about anything here, please contact us at [email protected].

2. Data We Collect

We collect personal information you provide directly to us through our contact form, email correspondence, or telephone conversations. This may include:

• Your full name
• Email address
• Phone number
• Details about your property requirements or the property you own
• Correspondence and notes from our meetings or calls

We also collect non-personal data automatically when you visit our website, such as browser type, pages viewed, and approximate location (via IP address), typically through cookies and analytics tools. See Section 5 for more on cookies.

3. Legal Basis and Purpose of Processing

We process your data on the following legal grounds under the PDPA:

• Consent: When you submit our contact form or agree to communicate with us, you consent to us using that information to respond to and assist with your enquiry.
• Contract performance: Where you engage Zephyrine for a service, we process your data as necessary to deliver that service.
• Legitimate interests: We may use contact information to follow up on prior enquiries or send service-related updates relevant to your situation.

We use your data specifically to respond to enquiries, deliver the services you've engaged us for, send relevant updates on your property search or management, and improve our internal processes. We do not use your data for unrelated marketing purposes without your explicit consent.

4. Data Retention

We retain personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. For active service engagements, data is retained for the duration of the engagement plus a period of three years for record-keeping. Enquiry data where no engagement proceeds is retained for twelve months. You may request deletion at any time (see Section 8).

5. Cookies and Website Analytics

Our website uses cookies to operate correctly and to understand how visitors use the site. We use essential cookies (required for the site to function), analytics cookies (to understand usage patterns via tools such as Google Analytics), and preference cookies (to remember your settings). You can manage cookie preferences via the banner shown on your first visit or at our Cookie Policy page.

6. Data Sharing and Third Parties

We do not sell your personal data. We may share data with third parties only in the following circumstances:

• Service providers who assist us operationally (e.g., email hosting, analytics) — under data processing agreements
• Property agents, landlords, or building management where this is directly necessary to deliver the service you've requested, and with your knowledge
• Legal or regulatory authorities when required by law

We require any third party handling data on our behalf to maintain appropriate security standards consistent with this policy.

7. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or loss. Our systems use standard encryption for data in transit, and access to client data internally is restricted to personnel who need it to deliver the relevant service. In the event of a data breach that is likely to affect your rights, we will notify you promptly in accordance with our obligations under the PDPA.

8. Your Rights

Under Malaysia's PDPA and applicable data protection principles, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data where no legal basis for continued retention exists
• Withdraw consent to processing at any time (without affecting the lawfulness of prior processing)
• Object to processing based on legitimate interests
• Request that we limit how we use your data in certain circumstances

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you are unsatisfied with our response, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policy of any external site you visit.

10. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect data from individuals under 18. If we become aware that we have inadvertently collected such data, we will delete it promptly.

11. Changes to This Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. Where changes are material, we will notify active clients by email. The current version is always available on this page, with the date of last update shown at the top.

12. Contact for Data Enquiries

For any questions or requests relating to this privacy policy or your personal data, please contact:

Zephyrine
26 Jalan Stesen Sentral, 50470 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 14-655 4124