Privacy Policy

Last updated: 2026-02-06

1) Who We Are

This website and service (“PropMedian”, “we”, “us”, “our”) is operated by PROP MEDIAN CONSULTANCY (Registration No. 202603041231 (MA0342570-T)). For privacy requests, contact: prop.median.my@gmail.com.

2) No Login / Accounts

We do not provide user login accounts. However, Malaysia’s Personal Data Protection Act 2010 (PDPA) may still apply because we collect limited personal data (e.g., email address for delivery).

3) Personal Data We Collect

Depending on your use of the Service, we may collect:

• Email address (for report delivery, invoice/receipt delivery, and support).
• User input data: search query strings (e.g., road name/area), and selected filters (district/mukim/scheme/segment/property type).
• Order and payment metadata: payment reference/transaction ID, product type purchased, timestamps, and fulfilment status.
• Technical logs: IP address, browser/device details, timestamps, error logs for security and troubleshooting.

4) What We Do NOT Collect

• No passwords or account credentials (no login).
• We do not store full card numbers or online banking credentials. Payment processing is handled by the payment gateway once enabled.

5) Purpose of Collection and Use

We use your data to:

• generate on-screen results and PDF reports based on your inputs;
• deliver reports and documents (invoice/receipt) by email;
• maintain purchase records for reconciliation, accounting, and customer support;
• monitor and secure the Service, prevent abuse, and diagnose failures (including regenerating reports if generation fails);
• measure website performance and improve usability (analytics).

6) Cookies and Analytics

We use Google Analytics (GA) to collect aggregated information about how users interact with the website (e.g., pages visited, session duration, device type). GA may use cookies or similar technologies.

If you want to opt out, you can use browser cookie controls or the Google Analytics opt-out browser add-on (where available).

7) Data Sharing (Processors)

We may share limited data with third parties strictly to operate the Service:

• Hosting/Infrastructure: Render (to host the application and data storage).
• Email delivery: SMTP email delivery (e.g., via Python SMTP). Email content may include report delivery and invoice/receipt.
• Payment gateway: once enabled, payment processing providers will receive details necessary to process payment and send payment status callbacks/webhooks.

We do not sell your personal data.

8) Data Retention

• Generated PDFs: Reports are generated for immediate download and email delivery. We do not store generated PDFs on our server after delivery, except where technically necessary for short-lived processing or transient caching during fulfilment.
• Order/payment records: retained for 7 years for accounting, reconciliation, and compliance.
• Search inputs and technical logs: retained as reasonably necessary for service improvement and troubleshooting (and may be removed earlier where feasible).

9) Security

We use reasonable administrative and technical safeguards such as HTTPS, access controls, and limited retention. No system is completely secure; you use the Service at your own risk.

10) Your Rights (PDPA)

Subject to PDPA and applicable law, you may request access to or correction of your personal data, or request deletion where applicable. To make a request, email: prop.median.my@gmail.com.

11) Cross-Border Transfers

Depending on where our service providers operate (hosting, analytics, email, payment), your data may be processed outside Malaysia. We will take reasonable steps to ensure appropriate safeguards.

12) Changes to this Policy

We may update this Privacy Policy from time to time. The latest version will be published on this page with an updated date.

13) Contact

Privacy enquiries: prop.median.my@gmail.com