Privacy Policy
Last Updated: January 18, 2026
Introduction
Corvaine is committed to protecting the privacy and personal data of our clients, property owners, and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection regulations.
By using our services or website, you consent to the data practices described in this policy. If you have questions about our privacy practices, please contact us at [email protected].
Data We Collect
Personal Information
We collect personal data that you provide directly to us when you inquire about properties, submit rental applications, or contact us through our website or other channels. This may include:
- Name and contact information (email address, phone number, mailing address)
- Employment details and income information (for rental applications)
- Identification documents (for background verification)
- References and background check information
- Payment information for security deposits and rent (processed through secure channels)
- Communication preferences and correspondence history
Automatically Collected Data
When you visit our website, we may automatically collect certain technical information including:
- IP address and device information
- Browser type and version
- Pages visited and time spent on our website
- Referring website addresses
- Cookie data (as described in our Cookie Policy)
How We Use Your Data
We use the personal data we collect for the following purposes:
- Property Rental Services: To process rental applications, conduct background checks, prepare lease agreements, and facilitate property viewings
- Communication: To respond to inquiries, provide property information, send updates about available properties, and maintain ongoing tenant relationships
- Service Improvement: To analyze website usage patterns, improve our property selection and matching processes, and enhance overall service quality
- Legal Compliance: To comply with Malaysian property laws, maintain required records, and fulfill regulatory obligations
- Marketing: To send information about our services and properties (only with your explicit consent, which can be withdrawn at any time)
We process personal data based on the following legal grounds: contractual necessity for service delivery, legal compliance requirements, legitimate business interests, and your explicit consent where applicable.
Data Sharing and Disclosure
We do not sell or rent your personal data to third parties. We may share your information with:
- Property Owners: When you apply to rent a property, we share relevant application information with the property owner
- Background Check Providers: We use third-party services to conduct reference and background verifications as part of the rental application process
- Legal and Professional Advisors: We may share data with lawyers, accountants, and other professional advisors when necessary for legal compliance or business operations
- Government Authorities: When required by Malaysian law or in response to valid legal requests
- Service Providers: We work with third-party providers for website hosting, email services, and analytics tools who process data on our behalf under strict confidentiality agreements
All third parties we work with are required to maintain appropriate security measures and use your data only for the specified purposes.
Data Protection and Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encrypted transmission of sensitive data over secure connections
- Secure storage systems with access controls and authentication requirements
- Regular security assessments and updates to our systems
- Staff training on data protection and confidentiality obligations
- Restricted access to personal data on a need-to-know basis
While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We encourage you to use strong passwords and protect your login credentials.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes. Specific retention periods include:
- Rental Applications: Retained for 12 months after application date or lease end date, whichever is later
- Active Tenancies: Data retained for the duration of the lease plus 7 years for financial and legal compliance
- Marketing Communications: Retained until you withdraw consent or request deletion
- Website Usage Data: Analytics data typically retained for 24 months
After the applicable retention period, personal data is securely deleted or anonymized.
Your Rights
Under the Personal Data Protection Act 2010 and other applicable regulations, you have the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you
- Right to Rectification: You can request correction of inaccurate or incomplete personal data
- Right to Erasure: You can request deletion of your personal data under certain circumstances
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time
- Right to Object: You can object to processing of your personal data for direct marketing purposes
- Right to Data Portability: You can request transfer of your data to another service provider in a structured, commonly used format
- Right to Lodge Complaint: You can file a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your rights have been violated
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 21 days as required by Malaysian law.
Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website usage. For detailed information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy.
Third-Party Links
Our website may contain links to third-party websites or services that are not operated by Corvaine. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from someone under 18, please contact us immediately so we can delete it.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a revised "Last Updated" date. We encourage you to review this policy regularly to stay informed about how we protect your personal data.
Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:
Corvaine
Jalan Penang 52
10000 George Town, Penang
Malaysia
Email: [email protected]
Phone: +60 4-517 3842