Privacy Policy

1. Introduction

Caeloria ("we", "us", "our") is committed to handling personal information with care and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy explains what data we collect, how we use it, and the rights available to you regarding that data.

This policy applies to data collected through our website at caelorile.pro, via email enquiries, and through our consultancy engagement process. Questions regarding this policy may be directed to [email protected].

2. Data We Collect

2.1 Information You Provide

• Name and contact details (email address, phone number)
• Property preferences and requirements submitted via forms or correspondence
• Any personal circumstances relevant to your rental needs that you choose to share

2.2 Automatically Collected Data

• Technical data such as IP address, browser type, and pages visited (via analytics tools)
• Cookie data in accordance with our Cookie Policy

2.3 Third-Party Sources

We do not purchase or acquire personal data from third-party marketing lists. Where referrals occur, these are made with the knowledge of the referring party.

3. How We Use Your Data

• To respond to enquiries and provide the services requested
• To match your requirements with suitable properties in our portfolio
• To communicate relevant updates during an active engagement
• To improve our website and service based on aggregated usage patterns
• To comply with applicable legal obligations

We do not use your data for direct marketing without your consent. We do not share your data with advertisers.

4. Legal Basis for Processing

• Contract performance: Processing necessary to deliver services you have requested
• Legitimate interests: Maintaining service quality, preventing fraud, improving our website
• Consent: Cookie-based analytics where you have provided consent via our cookie banner
• Legal compliance: Meeting obligations under Malaysian law

5. Data Sharing

We share personal data only where the engagement process requires it — for example, providing relevant details to a landlord as part of a rental application. This is done with your awareness and limited to what is necessary.

We use the following third-party services that may process data on our behalf: Google Analytics (website analytics), and standard email infrastructure. These parties process data under their own privacy terms and in accordance with applicable law.

6. Data Retention

Active engagement data is retained for the duration of the engagement and for a period of three years thereafter, to allow for follow-up and to meet any legal record-keeping requirements. Website analytics data is retained as per Google Analytics default settings (26 months). Cookie consent records are retained for 12 months.

7. Data Protection Measures

We use access controls, secure email practices, and storage in password-protected systems to protect personal data. Our staff are instructed to handle client information with discretion. In the event of a data breach affecting your rights, we will notify you and the relevant authority in accordance with applicable law.

8. Cookies

Our website uses cookies to function and to understand how it is used. Please see our Cookie Policy for a full explanation of the cookies we use and how to manage your preferences.

9. Your Rights Under the PDPA

• Access: Request a copy of the personal data we hold about you
• Correction: Request that inaccurate data be corrected
• Withdrawal of consent: Withdraw consent for processing where consent was the basis
• Restriction: Request that we limit how we use your data in certain circumstances
• Objection: Object to processing based on legitimate interests

To exercise these rights, contact us at [email protected]. We will respond within 21 days. Note that exercising some rights may affect our ability to provide services.

10. Third-Party Links

Our website may include links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

11. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us and we will remove it promptly.

12. Changes to This Policy

We may update this policy periodically. Significant changes will be communicated via a notice on our website. The date at the top of this page reflects the most recent revision. Continued use of our website following an update constitutes acceptance of the revised policy.

13. Contact

Data Controller: Caeloria
Address: 99 Jalan Ampang, 50450 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 7-8094 1262

Complaints may be lodged with the Department of Personal Data Protection Malaysia (JPDP) if you believe we have not addressed your concerns adequately.