Last updated: 28 March 2026. This policy applies to Bayleaf Domestic Care Sdn Bhd (the data controller), registered in Malaysia at Suite 12-03A, Level 12, Wisma Sime Darby, 14 Jalan Raja Laut, 50350 Kuala Lumpur, Malaysia.
1. The legal frame
We process personal data under the Malaysian Personal Data Protection Act 2010 (PDPA). The PDPA gives you the right to know what we hold about you, to ask for a copy, to correct mistakes, and in many cases to ask us to delete the data we hold.
2. What we collect and why
We collect only the data we need to do what you have asked us to do. In practice this means:
- Enquiry forms. When you complete the form on the contact page we collect your name, email address, optional phone number, the type of service you are asking about and the message you send us. We use this to reply to you.
- Service agreements. If you become a customer we additionally hold your service address, any key custody arrangement, your billing address, your preferred contact method and your service preferences.
- Operational notes. Our supervisors keep brief notes on each visit (for example: "owner away until 5 May, watch for builder dust in study room"). These notes are visible to the crew assigned to your home.
- Server logs. Our shared hosting provider keeps standard access logs which include IP addresses and the pages requested. We do not link these to identified individuals.
3. What we do not collect
We do not collect government-issued identification numbers, payment card details (these are handled by our acquirer Stripe Malaysia and never touch our systems), health information, or political and religious data. We do not buy data from third-party brokers.
4. Cookies and analytics
This site uses a small number of strictly-necessary cookies to remember your cookie preference. We do not run third-party advertising trackers, social pixels or behavioural analytics tools. For details, see the cookie policy.
5. Who we share data with
We share personal data with the following parties, only when needed:
- Our acquirer (Stripe Malaysia), when you pay an invoice.
- Our accounting firm (Choo & Tan Chartered Accountants), for the production of invoices and the filing of tax returns.
- Our insurance provider (Allianz General Malaysia), in the event of a claim.
We do not sell personal data, ever. We do not transfer personal data outside Malaysia unless required to do so to deliver our service (for example, our email provider is hosted in Singapore by Microsoft 365).
6. How long we hold the data
- Enquiry-only data, where you do not become a customer, is deleted within 12 months.
- Service agreement data is retained for the duration of the agreement and for 7 years afterwards, in line with our tax record-keeping obligations under the Income Tax Act 1967.
- Operational notes are deleted within 90 days of the end of the service agreement.
7. Your rights
You have the right to ask us, at any time:
- What personal data we hold about you (a "subject access request").
- To correct anything inaccurate.
- To delete data, where there is no legal reason for us to keep it.
- To object to a particular use of your data.
- To withdraw consent where consent is our legal basis for processing.
Send these requests to [email protected]. We will reply within 21 working days, which is the maximum the PDPA allows.
8. Complaints
If you are not satisfied with our handling of your data, you can complain directly to the Personal Data Protection Commissioner of Malaysia. Their office is at Level 6, Kompleks Kementerian Komunikasi dan Multimedia, Lot 4G9, Persiaran Perdana, Precinct 4, Putrajaya.
9. Changes to this policy
If we materially change this policy we will update the "Last updated" date above and, for active customers, send a copy of the new policy to the email on the service agreement.
10. Contact
Questions about this policy can be sent to [email protected] or by post to our office at Suite 12-03A, Level 12, Wisma Sime Darby, 14 Jalan Raja Laut, 50350 Kuala Lumpur, Malaysia. Please mark the envelope or the email subject line Privacy.