1. About this Notice and the data controller
This Privacy and Personal Data Protection Notice explains how KOPEJA Homes Development Sdn. Bhd. (KHDSB), operating under the KOPEJA Homes brand ("we", "us" or "our"), collects, uses, stores, protects and discloses your personal data.
It applies when you browse the KOPEJA Homes website, use a calculator or preliminary review, register your interest as a buyer, agent or developer, contact us, or deal with our team and authorised representatives. We process personal data in accordance with the Personal Data Protection Act 2010 [Act 709], as amended, to the extent applicable.
2. Personal data we collect and where it comes from
We mainly collect data directly from you through website forms, WhatsApp, telephone, email, documents you provide and follow-up conversations. We may also receive data from an agent, representative, project developer or another person you authorise to deal on your behalf.
The data depends on your dealings with us and may include:
- identity information such as your full name and identity card or passport number;
- contact details such as your telephone number, WhatsApp number and email address;
- property interests such as area, project, housing type and first-home status;
- basic financial information such as household income, existing commitments, monthly budget and price range;
- agent information such as agency, REN or REA number, coverage area and experience;
- developer and project information such as company name, SSM number, representative, location, unit count, status and project summary; and
- technical and security information such as a hashed IP address for rate limiting, browser or device type, access time, page, referral source and consent record.
3. Why we process your data
We process data for purposes connected with KOPEJA Homes services, including to:
- record, verify and manage a registration of interest or enquiry;
- understand your preferred area, project, budget and preliminary affordability;
- carry out a preliminary review and explain project options or the Operator Pelan Pembayaran Hartanah;
- contact you about documents, visits, enquiry status and follow-up steps;
- verify agents, developers, companies, representatives and project proposals;
- secure the website, prevent misuse and resolve technical issues;
- maintain operational, consent, complaint and service records; and
- comply with legal duties, regulatory directions or protect our legal rights.
A calculator or preliminary review does not make an automated eligibility decision and does not produce formal approval.
4. Mandatory and voluntary information
Fields marked as required are needed to identify your request, conduct basic checks and follow up with you. Other information is voluntary unless we explain otherwise when requesting it.
You may choose not to provide certain data or may withdraw consent already given. However, without the required information, we may be unable to process a registration, conduct a review, verify identity or provide a complete response.
5. Who may receive your data
We do not sell or rent your personal data. Where necessary for the purposes in this Notice, we may disclose limited data to:
- KHDSB or KOPEJA Homes directors, employees and authorised representatives who need it to handle your matter;
- project developers, agents or operational partners connected with the project you are interested in;
- appointed technology, hosting, database, storage, analytics, security and communications providers;
- professional advisers, auditors, insurers and support service providers; and
- authorities, regulators, courts or enforcement bodies where permitted or required by law.
We limit disclosure to what is reasonably necessary and require appointed parties to protect the data through applicable contracts and law.
6. Service and marketing communications
We may contact you by telephone, WhatsApp, SMS, email or another channel you provide to answer an enquiry, verify details, explain a project, request documents or manage follow-up steps.
We will only send direct marketing where permitted. You may opt out at any time by replying "STOP", using an unsubscribe function where available, or contacting us. Opting out of marketing does not stop service messages still needed for an active matter.
7. Technical data, analytics and browser storage
The website may use local browser storage and similar technologies for limited technical records, such as the selected form role, a successful registration reference and usage events, without making a full form copy publicly available.
Your browser or device may allow you to delete or block this storage. Some website functions may not work as expected if required technologies are blocked.
8. Processing and transfers outside Malaysia
Some of our technology, storage or communications providers may process or store data in data centres outside Malaysia. Where a cross-border transfer occurs, we will take reasonable steps to ensure an equivalent level of protection and comply with the conditions under Act 709.
These steps may include provider assessments, access controls, contractual safeguards and obtaining consent where consent is relied on for the transfer.
9. Security and personal data breaches
We use reasonable administrative, technical and physical safeguards, including access controls, authentication, encryption for certain registration data, misuse monitoring and internal access restrictions. No online transmission or system can be guaranteed to be completely risk-free.
If a personal data breach occurs, we will assess its scope and risk, take containment and recovery steps, and notify the Personal Data Protection Commissioner and affected individuals where required by law.
10. Retention and data accuracy
We retain data only for as long as needed for the purpose for which it was collected, including project follow-up, a service relationship, audit requirements, complaint resolution and legally required periods. The exact period varies by record type and matter status.
When data is no longer needed, we will delete, destroy, anonymise or archive it with appropriate controls. You are responsible for providing accurate and current information; please tell us if it changes.
11. Your rights as a data subject
Subject to Act 709 and permitted exceptions, you may:
- ask whether we process your data and request access to it;
- ask us to correct data that is inaccurate, incomplete, misleading or out of date;
- withdraw consent by written notice;
- ask us to stop processing that may cause unwarranted damage or distress;
- prevent processing for direct marketing; and
- raise an enquiry or complaint about how your data is handled.
We may request proof of identity and enough detail before fulfilling a request. A request may be limited or refused where permitted by law, and we will explain the reason where applicable.
12. Minors and other people’s data
KOPEJA Homes registration forms and services are intended for people aged 18 or over. If you are under 18, do not submit personal data without the involvement and consent of a parent or legal guardian.
If you provide another person’s data, you confirm that you are authorised to do so and have informed them about this Notice.
13. Languages and changes to this Notice
This Notice is available in Bahasa Malaysia and English. You may switch language using the link at the top of the page. If there is an inconsistency, the Bahasa Malaysia version will prevail to the extent permitted by law.
We may update this Notice to reflect operational, technology or legal changes. Material changes will be identified through a new effective date and, where appropriate, an additional notice.
15. Privacy enquiries, requests or complaints
Send a written request to KOPEJA Homes Development Sdn. Bhd. at info@kopejahomes.com, telephone +6011-29966339, or D/a Bangunan MPKB-BRI, Jalan Hospital, 15000 Kota Bharu, Kelantan Darul Naim.
Include your name, contact details, request type and enough information to identify the relevant record. We may verify your identity before providing access or making changes.