Privacy Policy

1. Introduction

Seri Manja ("we", "us", "our") is a home support coordination service based in Kuala Lumpur, Malaysia, registered under the Companies Commission of Malaysia (SSM). We take the handling of personal data seriously and operate in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and store it, and what rights you have over that data. It applies to information we receive through our website and through direct communication with families and individuals who engage our services.

If you have questions about this policy or how we handle your data, please contact us at [email protected].

2. What Personal Data We Collect

We collect personal data in the following categories:

• Contact information: Name, email address, phone number, and postal address, provided when you submit our enquiry form or communicate with us directly.
• Household information: Details about the older relative and household relevant to delivering the service requested (e.g. food preferences for meal planning, room layout notes for home assessments).
• Service records: Notes related to service delivery, including visit summaries shared with families, and correspondence within the coordinator-family relationship.
• Usage data: Standard website analytics data including pages visited, browser type, and approximate location, collected via cookies if you consent.

Legal basis for processing: We process personal data on the basis of (a) your consent, given when you submit an enquiry or agree to a service; (b) the performance of a service agreement; and (c) our legitimate interest in communicating with existing and prospective clients.

Retention: Contact enquiry data is held for up to 12 months if no service is engaged. Active service records are held for the duration of the service and up to 24 months thereafter. You may request earlier deletion at any time.

3. How We Use Your Data

We use personal data solely for the following purposes:

• Responding to enquiries and communicating about our services
• Coordinating and delivering the specific services agreed under a written service agreement
• Sharing service updates (such as visit notes) with the designated family contact
• Managing our business records and complying with Malaysian legal obligations
• Improving our services based on aggregated, non-identifiable feedback

Third-party sharing: We do not sell personal data. We do not share personal data with third parties for marketing purposes. Data may be shared with service delivery personnel (companions, coordinators) only as necessary to carry out the agreed service, and they are bound by confidentiality obligations.

We may use standard analytics tools (such as Google Analytics) to understand website usage. These tools may collect anonymised usage data. You can opt out of analytics cookies through our cookie preference controls.

4. How We Protect Your Data

• Data is stored on password-protected systems with restricted access limited to authorised team members
• Electronic communications containing personal data are transmitted over encrypted connections (HTTPS/TLS)
• Access to client data is restricted on a need-to-know basis within the team
• In the event of a personal data breach that may affect your rights, we will notify affected individuals as required under the PDPA and inform the relevant authority where obligated
• We review our data handling processes periodically and update them as needed

5. Cookies

Our website uses cookies to function properly and to understand how visitors use the site. Essential cookies are required for the site to work and cannot be disabled. Analytics and preference cookies are optional and are only used with your consent.

For full details of what cookies we use and how to manage your preferences, please see our Cookie Policy.

6. Your Rights

Under Malaysia's Personal Data Protection Act 2010 and applicable data protection principles, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to any legal retention obligations.
• Right to object: Object to processing based on legitimate interest.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint: You may raise a concern with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been infringed.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to third-party websites or services (for example, grocery delivery providers or mapping services). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal data.

8. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Where changes are significant, we will notify active clients directly. Continued use of our services after any changes constitutes acceptance of the updated policy.