Privacy Policy

This Policy explains how we collect, use, and disclose personal data in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

1. Data We Collect

• REN Data: Name, email, phone number, REN number, real estate agency name, and payment transaction information.
• Buyer Data: Name, phone number, click timestamp, view count, property interest responses, and device information — collected when buyers interact with tracked links generated by Real Estate Negotiators (RENs).
• Usage Data: Log data, technical cookies, and IP addresses captured for security and platform stability.

2. Roles, Responsibilities, and Purpose of Processing

PropFollow processes personal data for the following purposes:

• To provide real-time lead and interaction tracking services to RENs.
• To notify RENs of buyer activity via digital channels.
• To comply with regulatory audit requirements and prevent platform abuse.

Data Role Differentiation & Indemnity: PropFollow acts strictly as a Data Processor regarding Buyer Data. The individual REN or Real Estate Agency utilizing our link-generation services acts solely as the Data Controller. It is the absolute responsibility of the REN to ensure they possess a lawful basis or explicit consent under the PDPA 2010 to input and track Buyer Data. PropFollow expressly disclaims all liability, and the user (REN) agrees to fully indemnify, defend, and hold harmless PropFollow against any claims, fines, losses, or legal fees resulting from a breach of data privacy laws by the user.

We do NOT sell or monetize buyer data to any third parties.

3. Consent & Notice

RENs utilizing PropFollow must maintain their own PDPA compliance protocols and ensure they have a valid relationship with the buyer before tracking. Our generated link pages display a transparent disclaimer: "This link tracks views and interactions to help the agent follow up. By proceeding, you consent."

Buyers may withdraw consent at any time by contacting the specific REN who shared the link, or by emailing us directly at hello@propfollow.com.

4. Disclosure of Data

We disclose personal data exclusively to:

• Cloud Hosting Infrastructure & Third-Party Service Vendors: Strictly for operational platform delivery. All backend subprocessors are vetted for PDPA compliance.
• Statutory & Regulatory Authorities: We reserve the right to disclose personal data if required to do so by law or in good faith belief that such action is necessary to comply with the federal laws of Malaysia, the state laws, or formal orders from regulatory bodies.

5. Data Security & Limitation of Liability

We employ commercial-grade encryption, strict access controls, and modern security protocols via our third-party cloud infrastructure providers to safeguard data. However, no digital transmission or storage system is entirely infallible.

To the maximum extent permitted under Malaysian law, PropFollow shall not be held liable for any indirect, incidental, or consequential damages, or loss of profits arising out of unauthorized data access, malicious hacks, or data leaks beyond the total financial amount paid by the user to PropFollow in the three (3) months immediately preceding the security event.

6. Data Retention

• REN Account Data: Retained until active account deletion, plus an additional 6 years to satisfy Malaysian statutory legal, corporate, and tax audit timelines.
• Buyer Tracking Data: Automatically deleted or permanently anonymized 90 days after the last recorded link activity.

7. Your Rights Under PDPA 2010

You retain the right to request access to, correct, or demand the deletion of your personal data stored on our platform. All requests should be routed to hello@propfollow.com. As permitted under Section 30 of the PDPA 2010, we reserve the right to charge a nominal administrative fee for processing complex data access requests.

8. Cookies

We utilize essential session cookies solely to maintain secure user authentication and login states. Performance or analytical cookies are only deployed upon receiving explicit user consent.

9. International Data Transfer

PropFollow utilizes secure cloud infrastructure hosted in regions outside of domestic Malaysia (such as AWS Singapore). By interacting with our platform, generating links, or accessing tracked properties, both RENs and Buyers provide their explicit, voluntary consent to the cross-border transfer, storage, and processing of their personal data to Singapore or other secure jurisdictions managed by our infrastructure partners, which maintain data protection levels equivalent to or exceeding the PDPA 2010.

10. Governing Law and Jurisdiction

This Privacy Policy and any operational disputes arising from it shall be governed by and construed entirely in accordance with the laws of Malaysia. Any legal actions, claims, or proceedings brought against PropFollow shall be subject to the exclusive jurisdiction of the relevant courts in Malaysia, with the primary venue of filing restricted to the physical seat of the platform owner's registered operations in Kuching, Sarawak.

11. Contact & Complaints

For all privacy concerns, data inquiries, or notices, contact: