Legal
Privacy Policy
Penaung operates a home assistance coordination service for older relatives in Kuala Lumpur. When families contact us, arrange services, or use this website, they share personal information with us. This policy explains what we collect, why we collect it, how we use it, and what rights you have over that information.
We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the principles it sets out for the lawful processing of personal data.
If you have questions about anything in this policy, you can contact us at [email protected] and we will respond within a reasonable time.
1. Data Controller
The data controller responsible for personal information collected through this website and in connection with Penaung's services is:
Penaung
No. 84, Jalan Pudu, 55200 Kuala Lumpur, Wilayah Persekutuan, Malaysia
Email: [email protected]
Phone: +60 11-049 8107
2. What Personal Data We Collect
Information you provide directly
When you use the contact form on this website or communicate with us by telephone or email, we may collect:
- Name — so we can address you appropriately in correspondence
- Email address — to send replies and service-related information
- Phone number — if provided, to speak with you about your enquiry
- Message content — the details you include about your situation or enquiry
Information collected automatically
When you visit this website, certain technical information may be collected automatically, including your approximate location (country or city level), browser type, device type, the pages you visit, and how long you spend on each page. This information is collected in aggregate form and is used only to understand how the website is being used. It is not linked to any personally identifiable information unless you have also submitted the contact form.
Legal basis for processing
Under the PDPA 2010, we process personal data on the basis of your consent (when you submit the contact form), our legitimate interest in responding to enquiries and improving our services, and where necessary to fulfil a service arrangement you have entered into with us.
How long we keep your data
Enquiry records are kept for up to 24 months from the date of last contact. Records relating to active or recently concluded service arrangements are kept for up to 7 years for administrative and legal purposes. After those periods, data is securely deleted.
3. How We Use Your Information
Personal information collected through this website and in connection with our services is used for the following purposes:
- Responding to enquiries submitted through the contact form or by telephone
- Discussing and arranging home assistance services with families
- Coordinating service delivery and keeping families informed about arrangements
- Sending service-related updates or reminders where a service is active
- Improving the content and usability of this website based on aggregated usage data
- Complying with applicable legal obligations
We do not use personal data for unsolicited marketing. If you are an existing contact and we send a general communication relevant to our services, you can ask us to stop at any time by writing to [email protected].
4. Sharing Your Information
We do not sell personal data. We do not share personal information with unrelated third parties for their own marketing purposes.
In the course of delivering services and operating this website, personal data may be shared with:
- Website analytics providers (such as Google Analytics) — for aggregated usage statistics. Analytics data does not personally identify individual visitors.
- Email and calendar platforms — used internally to communicate with families and manage service schedules. These platforms operate under their own data protection terms.
- Legal or regulatory authorities — only where required to comply with applicable Malaysian law or a lawful order.
5. How We Protect Your Information
We take reasonable steps to keep personal data secure. These include:
- This website uses HTTPS, which encrypts data in transit between your browser and our servers
- Access to contact records and service files is limited to Penaung staff who need it to do their work
- Internal systems storing personal data are password protected and access-controlled
- In the event of a data breach that may affect your rights, we will notify you and the relevant authority as required under Malaysian law
No method of transmission over the internet or electronic storage is completely secure. While we make every reasonable effort to protect your information, we cannot guarantee absolute security.
6. Cookies
This website uses cookies — small text files stored on your device — to support basic functionality and to understand how visitors use the site. Cookies we may use include:
- Essential cookies — required for the website to function. They cannot be disabled.
- Analytics cookies — used to collect aggregated information about how visitors use the site, so we can improve it.
- Preference cookies — used to remember choices you have made, such as your cookie consent selection.
For more detail and to manage your preferences, see our Cookie Policy.
7. Your Rights
Under the PDPA 2010 and applicable Malaysian data protection principles, you have the following rights in relation to personal data we hold about you:
Right of access
You may request a copy of the personal data we hold about you.
Right to correction
You may ask us to correct inaccurate or incomplete personal data.
Right to withdraw consent
Where processing is based on your consent, you may withdraw it at any time. This does not affect processing that took place before withdrawal.
Right to limit processing
You may ask us to stop using your data for certain purposes while we address a query or complaint.
Right to object
You may object to our processing of your data where we rely on legitimate interest as the basis.
Right to lodge a complaint
You may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been breached.
To exercise any of these rights, write to us at [email protected]. We will respond within 21 days of receiving your request.
8. Links to Other Websites
This website may contain links to external websites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit before providing personal information.
9. Children's Privacy
Our services and this website are intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted personal information through this website, please contact us at [email protected] and we will delete it promptly.
10. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or in applicable law. When we do, the revised policy will be published on this page with an updated "Last updated" date at the top.
If changes are material, we will make a reasonable effort to notify existing contacts by email. Continued use of this website after a change is published constitutes acceptance of the updated policy.
Questions about your data?
If you have any questions about how we handle personal information, or if you wish to exercise any of your rights, please get in touch.
No. 84, Jalan Pudu, 55200 Kuala Lumpur, Wilayah Persekutuan, Malaysia