Privacy Policy

1. Introduction

Estwell ("we", "us", "our") is an administrative and records-cataloguing service based at 16 Jalan Pinang, 50450 Kuala Lumpur, Malaysia. This Privacy Policy explains how we collect, use and protect personal data in connection with our estate records cataloguing services and this website.

We are committed to handling personal information with care and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. If you have any questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal data in the following circumstances:

• Contact form submissions: name, email address and, where provided, telephone number and message content.
• Appointment enquiries: name, contact details and general information about the scope of the cataloguing work required.
• Website analytics: anonymised data on page visits, session duration and browser type, collected via analytics cookies where consent is given.

We do not collect sensitive personal data, financial account details or document content from the families we serve. All cataloguing work is conducted under a separate service agreement.

Legal basis for processing: Consent (where you have submitted a form or agreed to cookies); legitimate interest (communicating with enquirers about our services); and performance of a service agreement (where an engagement has been agreed).

Retention: Enquiry data is held for up to 12 months from the date of the enquiry, or for the duration of a service engagement plus 24 months thereafter, unless a longer period is required by applicable law.

3. How We Use Your Data

• To respond to enquiries and schedule appointments.
• To manage and deliver cataloguing engagements.
• To send follow-up summaries and service-related communications.
• To improve the usability of this website using aggregated, anonymised analytics.
• To comply with applicable Malaysian law.

We do not use your personal data for marketing to third parties, sell it to other organisations or share it for commercial purposes.

4. Data Sharing

We do not share your personal data with third parties except in the following limited circumstances:

• Service providers: We may use reputable cloud hosting or email providers to manage correspondence. These providers are bound by confidentiality obligations.
• Legal requirements: We will disclose data where required by a valid legal process or competent authority under Malaysian law.

We do not transfer personal data outside Malaysia to countries with materially lower data protection standards without appropriate safeguards.

5. Data Protection Measures

• All website communications are encrypted via HTTPS/TLS.
• Access to stored personal data is restricted to authorised Estwell personnel.
• We use strong passwords and access controls on all systems holding personal data.
• In the event of a data breach that is likely to affect your rights, we will notify you and, where required, the relevant authority, within a reasonable period.
• We review our data handling practices on a regular basis.

6. Cookies

This website uses cookies to understand how visitors navigate our pages and to save your cookie preferences. You can accept or decline non-essential cookies using the banner displayed when you first visit the site, and you can update your preferences at any time via our Cookie Policy page.

Essential cookies, necessary for the basic function of the website, are always active.

7. Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Withdraw consent to the processing of your personal data at any time.
• Request the cessation of processing that is causing or is likely to cause unwarranted damage or distress.
• Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have not been respected.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

This website may contain links to external resources. We are not responsible for the privacy practices of third-party websites and recommend that you review their policies separately.

9. Children's Privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from persons under the age of 18. If you believe we hold data about a minor, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised policy will be published on this page with an updated effective date. Continued use of this website after a policy update constitutes acceptance of the revised terms.

11. Contact Us

For privacy-related enquiries:

• Email: [email protected]
• Post: Estwell, 16 Jalan Pinang, 50450 Kuala Lumpur, Malaysia