Legal
Privacy Policy
At Bayu, we handle personal information with the same care and discretion we bring to every client relationship. This policy explains what we collect, how we use it, and the choices available to you.
1. Introduction
Bayu ("we", "our", "us") is a residential advisory practice based at Jalan Stonor, 50450 Kuala Lumpur, Malaysia. We assist individuals and families in locating, evaluating, and securing long-term residential arrangements across Kuala Lumpur's principal neighbourhoods.
This Privacy Policy applies to all personal information collected through our website at bayuaa.sbs, through our contact and enquiry forms, and through direct communications with our advisors. It governs how we collect, hold, use, and disclose that information in accordance with the Personal Data Protection Act 2010 (Malaysia).
By using our website or submitting an enquiry, you acknowledge that you have read and understood this policy. If you have any questions, please contact us at [email protected] before proceeding.
2. Data We Collect
We collect only the information needed to provide our advisory services and to respond to your enquiries. This includes:
Information you provide directly
- Full name and preferred form of address
- Email address and telephone number
- Enquiry details, including preferred neighbourhoods, budget range, and tenancy requirements
- Any additional information you choose to share during our advisory conversations
Information collected automatically
- Browser type, device type, and operating system
- IP address and approximate geographic region
- Pages visited and duration of visit
- Referring website or source
- Cookie data, as described in Section 5
Legal basis for processing
We process your personal data under the following grounds: (a) your consent, given when you submit an enquiry form; (b) legitimate interest, in understanding how our website is used and improving our service; and (c) contractual necessity, when we are engaged to provide advisory services on your behalf.
Retention periods
Enquiry records and client correspondence are retained for a maximum of five years following the conclusion of a service engagement, after which they are securely deleted. Website analytics data is retained for no longer than 26 months. You may request earlier deletion at any time — see Section 6.
3. How We Use Your Data
We use the information we collect for the following purposes:
- To respond to enquiries and provide our residential advisory and placement services
- To maintain communication throughout the duration of a service engagement
- To send service updates, appointment confirmations, and relevant correspondence
- To understand how visitors interact with our website and to improve the experience
- To fulfil legal and regulatory obligations applicable to property advisory services in Malaysia
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We do not send unsolicited promotional communications unless you have expressly consented to receive them.
Data sharing
In the course of delivering our services, we may share information with the following parties, strictly on a need-to-know basis:
- Property owners and management companies — when arranging viewings or progressing a tenancy negotiation on your behalf
- Legal and compliance advisors — where required to verify documentation or prepare tenancy agreements
- Website analytics providers — aggregated and anonymised usage data only
Any third parties with whom we share data are required to handle it in accordance with applicable data protection laws.
4. Data Protection Measures
We take reasonable technical and organisational steps to protect personal information from unauthorised access, disclosure, or loss. These measures include:
- HTTPS encryption for all data transmitted between your browser and our website
- Restricted access to client records, limited to advisors directly involved in a service engagement
- Secure, password-protected systems for storing client correspondence and enquiry data
- Regular review of our data handling practices and access controls
In the event of a data breach that may affect your rights or interests, we will notify you promptly and take all reasonable steps to contain and remediate the incident.
5. Cookies
Our website uses cookies — small text files stored in your browser — to support basic functionality, understand how visitors navigate the site, and remember certain preferences.
Essential cookies
Required for the website to function correctly. These cannot be disabled.
Analytics cookies
Help us understand how visitors use the site, in aggregate and anonymised form.
Marketing cookies
Used to understand the effectiveness of any digital communications we run.
Preference cookies
Remember settings such as language or region to improve your return visits.
You can manage your cookie preferences through our Cookie Policy page, which includes controls for each category.
6. Your Rights
Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:
To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days of receiving your request.
7. Third-Party Links
Our website may contain links to external websites, including property portals, building websites, and relevant government services. These sites operate under their own privacy policies, and we are not responsible for how they collect or handle personal information.
We encourage you to review the privacy policy of any third-party site you visit before providing personal information.
8. Children's Privacy
Our services are intended for individuals aged 18 and above. We do not knowingly collect personal information from persons under 18 years of age. If you believe a minor has submitted information through our website, please contact us at [email protected] and we will take prompt steps to remove it.
9. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we provide. When material changes are made, we will update the "Last updated" date at the top of this page. Continued use of our website following any update constitutes your acknowledgement of the revised policy.
If you have an active service engagement with us at the time of a material change, we will notify you directly by email.
10. Contact Us
If you have any questions about this Privacy Policy, wish to exercise a right, or have a concern about how we have handled your information, please reach us through any of the following: