Privacy Policy

1 Who We Are

The data controller for the purposes of this policy is:

• Business name: Sentosa
• Address: No. 14, Jalan Raja Chulan, 50200 Kuala Lumpur, Wilayah Persekutuan, Malaysia
• Email: [email protected]
• Phone: +60 17-923 2243

This policy applies to personal data collected through our website, contact forms, and the provision of our home coordination services. It applies to all individuals who contact us or engage our arrangements.

2 Personal Data We Collect

We collect information that families or individuals provide directly to us. This includes:

• Full name and preferred name
• Email address
• Phone number
• Residential address (where relevant to service delivery)
• Details about the household and older relative, shared with us to coordinate arrangements
• Messages and correspondence sent through our contact form or by email

We also collect limited technical data automatically when you visit our website, including your IP address, browser type, pages visited, and time of access. This data is collected via analytics cookies and is not used to identify individuals directly.

Legal basis for processing: We process personal data on the basis of your consent (when you submit a contact form), on the basis of a contract (when coordinating services you have engaged), and on the basis of our legitimate interest in improving our services and communicating with prospective clients.

Retention: Contact enquiries are kept for up to 24 months. Service coordination records are kept for up to 5 years in line with standard business practice. Analytics data is retained for 14 months before deletion.

3 How We Use Your Data

Personal data is used solely for the following purposes:

• Responding to enquiries and providing information about our arrangements
• Coordinating and delivering the home assistance service you have engaged
• Communicating updates, summaries, and relevant information to your nominated family contact
• Improving the quality of our services and website experience
• Meeting our legal and regulatory obligations in Malaysia

We do not use your personal data for unsolicited marketing. If you would like to receive occasional updates from Sentosa, you may opt in by contacting us directly at [email protected]. You may opt out at any time.

Data sharing: We do not sell or share personal data with third parties for commercial purposes. We may share limited information with trusted service providers (for example, grocery delivery partners) strictly to deliver the service you have arranged. These partners are required to handle your data with the same level of care.

4 How We Protect Your Data

We take reasonable and appropriate steps to protect personal data from loss, misuse, and unauthorised access. These measures include:

• Encrypted storage for data held on our servers
• Access controls that limit data visibility to authorised team members
• Secure transmission of data via HTTPS across our website
• Internal data handling guidelines followed by all Sentosa staff
• Prompt assessment and notification in the event of a data breach, in line with applicable Malaysian data protection requirements

While we take these precautions seriously, no data transmission over the internet can be guaranteed to be entirely secure. If you have concerns about a specific data matter, please contact us directly.

5 Cookies

Our website uses cookies to support basic functionality and to understand how visitors use the site. The categories of cookies we use are:

• Essential cookies — required for the site to function correctly (for example, remembering your cookie preference)
• Analytics cookies — used to understand general patterns of site usage, such as page views and visit duration
• Preference cookies — used to remember settings you have chosen during your visit

You can manage or withdraw your cookie consent at any time. See our Cookie Policy for full details and controls.

6 Your Rights

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights regarding your personal data:

To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days. If you believe your rights have not been respected, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

7 External Links

Our website may contain links to external websites operated by third parties. We do not control these sites and are not responsible for their privacy practices. We encourage you to review the privacy policy of any site you visit through a link on our pages.

8 Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal data to us, please contact us at [email protected] and we will remove it promptly.

9 Changes to This Policy

We may update this policy from time to time as our services evolve or as legal requirements change. When we make significant changes, we will update the "Last Updated" date at the top of this page. We encourage you to review the policy periodically. Continued use of our website following any update constitutes acceptance of the revised policy.