1. Introduction
Rumara ("we", "us", "our") is a home support coordination service operating from Kuala Lumpur, Malaysia. We are committed to handling personal information responsibly and in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
This policy explains what personal data we collect when you use our website or enquire about our services, how we use it, how we keep it safe, and what choices you have. Please read it alongside our Cookie Policy.
If you have any questions about this policy or how we handle your data, contact us at [email protected] before using our services.
2. Data We Collect
Information you give us directly
- Your name, email address, and phone number when you fill in our contact form
- Any details you include in your message about your family's situation
- Correspondence sent to us by email or phone
Information collected automatically
- Browser type, device, and operating system (via analytics tools)
- Pages visited, time on page, and referral source
- IP address (anonymised where possible)
- Cookie preferences and consent status stored in your browser
Legal basis for processing
We process your data on the basis of your consent (when you submit a form or accept cookies), our legitimate interest in responding to enquiries and improving our website, and our contractual obligations once a service arrangement is agreed.
Retention periods
- Contact form submissions: up to 24 months from the date of submission
- Active service records: retained for the duration of the arrangement plus 36 months
- Analytics data: aggregated and anonymised after 14 months
3. How We Use Your Data
Service delivery and communication
- Responding to your enquiry and discussing how we can help your family
- Coordinating and managing any service arrangement you enter into with us
- Sending updates, confirmation notes, or documents related to your service
Website and service improvement
- Understanding how visitors navigate our website so we can make it clearer and more useful
- Identifying and fixing technical issues
Marketing communications
We will only send you information about our services or updates if you have explicitly agreed to receive them. You can withdraw that agreement at any time by contacting us at [email protected].
Third-party sharing
We do not sell or rent your personal data. We may share it with trusted service providers who help us operate our website (such as analytics or hosting providers) under strict data processing agreements. We do not share personal information with advertisers.
4. Data Protection Measures
- Our website is served over HTTPS — data transmitted between your browser and our server is encrypted in transit
- Access to stored personal data is restricted to authorised Rumara personnel only
- We use reputable, Malaysia-based or PDPA-compliant hosting infrastructure
- Internal access logs are reviewed periodically to detect unauthorised activity
- In the event of a data breach that affects your rights, we will notify you and the relevant authority within a reasonable timeframe as required by applicable law
While we take data security seriously, no method of online transmission is completely risk-free. We encourage you not to share sensitive information unnecessarily in contact form messages.
6. Your Rights
Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:
- Right of access — you may request a copy of the personal data we hold about you
- Right of correction — you may ask us to correct inaccurate or incomplete data
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing
- Right to prevent processing for direct marketing — you can ask us to stop using your data for marketing purposes
- Right to lodge a complaint — you may raise concerns with the Department of Personal Data Protection Malaysia (PDPD) at pdp.gov.my
To exercise any of these rights, please write to us at [email protected]. We aim to respond within 21 days.
7. Third-Party Links
Our website may contain links to external websites. Once you leave our site, this privacy policy no longer applies. We are not responsible for the privacy practices of external sites and encourage you to read their own policies before sharing any personal information with them.
8. Children's Privacy
Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted personal information through our website, please contact us at [email protected] and we will remove it promptly.
9. Policy Updates
We may update this policy from time to time to reflect changes in our services, legal requirements, or data handling practices. When we do, we will revise the "Last updated" date at the top of this page. We recommend checking back periodically. Where changes are significant, we will make reasonable efforts to notify you — for example, by displaying a notice on our website.
Continued use of our website after an update constitutes acceptance of the revised policy.
10. Contact Us
If you have any questions, concerns, or requests about this privacy policy or how Rumara handles your personal data, please reach out: