PDPA & Privacy Policy

1. Personal Data Notice

Short notice. This is the notice the enquiry form refers to. The full policy follows below. Bahasa Malaysia

In case of any inconsistency between the English and the Bahasa Malaysia versions of this notice, the English version prevails.

• Who collects it: Teen Yong Zhen (REN 83552) of IQI Realty Sdn Bhd.
• What: the name, phone or WhatsApp number and email address you enter, which form you used, and technical data such as the page address, campaign parameters, advertising click identifiers and device details.
• Why: to reply to you, send the price list and floor plans, arrange a viewing or video walkthrough, follow up with project updates, and measure how well our advertising works.
• Who may receive it: IQI Realty Sdn Bhd, the developer (only when arranging a viewing or booking), and service providers that run our website, messaging and advertising, including Google. We may share a hashed (scrambled, one-way) version of your contact details with Google for ad measurement. We never sell your data.
• Required fields: name, phone number and email on the form. Without them we cannot send you the information you asked for.
• Your choices: you can ask to see, correct or delete your data, or stop marketing messages, at any time. Reply STOP to a message or email [email protected].

2. Notis Data Peribadi (Bahasa Malaysia)

Sekiranya terdapat sebarang percanggahan antara versi Bahasa Malaysia dan versi Bahasa Inggeris notis ini, versi Bahasa Inggeris akan diguna pakai. (In case of any inconsistency, the English version prevails.)

Notis ringkas. Ini ialah notis yang dirujuk oleh borang pertanyaan. Dasar penuh dalam bahasa Inggeris terdapat di bahagian seterusnya. English

• Siapa yang mengumpulnya: Teen Yong Zhen (REN 83552) daripada IQI Realty Sdn Bhd.
• Apa yang dikumpul: nama, nombor telefon atau WhatsApp dan alamat e-mel yang anda masukkan, borang yang anda gunakan, serta data teknikal seperti alamat halaman, parameter kempen, pengecam klik iklan dan butiran peranti.
• Tujuan: untuk membalas anda, menghantar senarai harga dan pelan lantai, mengatur lawatan atau sesi walkthrough video, membuat susulan dengan kemas kini projek, dan mengukur keberkesanan iklan kami.
• Penerima yang mungkin: IQI Realty Sdn Bhd, pemaju (hanya apabila mengatur lawatan atau tempahan), dan pembekal perkhidmatan yang menguruskan laman web, pemesejan dan pengiklanan kami, termasuk Google. Kami mungkin berkongsi versi cincang (hashed), iaitu versi terkod sehala, bagi butiran hubungan anda dengan Google untuk mengukur iklan. Kami tidak pernah menjual data anda.
• Medan wajib: nama, nombor telefon dan e-mel pada borang. Tanpa maklumat ini, kami tidak dapat menghantar maklumat yang anda minta.
• Pilihan anda: anda boleh meminta untuk melihat, membetulkan atau memadam data anda, atau memberhentikan mesej pemasaran, pada bila-bila masa. Balas STOP kepada mesej atau e-mel ke [email protected].

3. Who is responsible for your data

The data user is Teen Yong Zhen (REN 83552), a registered real estate negotiator practising under IQI Realty Sdn Bhd (company no. 1113417-U; agency licence E(1)1584), together with that agency. In this policy, “we”, “us” and “our” mean both. We run this website and handle the enquiries sent through it.

We are not the developer, and this is not the official website of Exsim.

4. What we collect

What you give us

• Your name, phone or WhatsApp number and email address. All three are required on our enquiry form.
• What you tell us in messages, calls and video calls, for example the unit type you are interested in, your timing, and questions about financing or eligibility.
• If you message us on WhatsApp directly instead of using the form, we see your number, your WhatsApp profile name and the content of your messages.

What is collected automatically when you use the site

• The page you were on and which form or button you used (so we know what you asked for).
• Campaign information in the web address, such as UTM parameters, and advertising click identifiers from Google (gclid, gbraid, wbraid) and, if we advertise on Meta, from Meta (fbclid).
• Device and browser details such as browser type, operating system, screen size, language, your IP address and the approximate location it implies.
• Cookies and similar browser storage. See the section on cookies below.

What we do not ask for

We do not ask for your identity card or passport number, bank or card details, or passwords, and you do not need to give them to us to get the price list or to book a viewing. Please do not send them to us.

5. Why we use it

• To reply to your enquiry, including sending the price list, floor plans and project details by WhatsApp, email or phone.
• To arrange a viewing, a visit to the sales gallery or a video walkthrough, and to answer your questions.
• To follow up with updates about Causewayz Square, such as availability and new information, with your agreement. You can opt out at any time.
• To measure and improve how our advertising performs, and to see which pages and forms work. See “Advertising measurement” below.
• To keep the website secure, prevent spam and misuse, keep our records, and meet legal and agency record-keeping obligations.

We do not use your details for anything unrelated to these purposes without asking you first.

6. Who we share it with

We share personal data only where there is a reason to, and we never sell it.

• IQI Realty Sdn Bhd, the agency we practise under, for supervision, compliance and record-keeping.
• The developer (Exsim Lumba Kuda Sdn Bhd) and its sales personnel, only when you ask us to arrange a viewing or you proceed towards a booking.
• Service providers who help us run the site and communicate with you, under their own terms: our website, form and customer-management provider (GoHighLevel / LeadConnector), WhatsApp, email and video-call tools, and Google (see below).
• Authorities and advisers where the law requires it, or where we need legal advice.

Banks, lawyers and others are not given your details by us unless you ask us to introduce you.

7. Advertising measurement (Google and Meta)

We advertise this project online. To see which ads lead to real enquiries and viewings, and to improve them, we may send limited data to the advertising platforms:

• Hashed contact details. We may convert your phone number and email address into a scrambled code with a one-way method called SHA-256 and send that code to Google Ads (and to Meta, if we advertise there). The platform can compare the code with its own records to tell us that the person who saw or clicked an ad later sent an enquiry. This is often called “enhanced conversions”. We do not send your name or the plain text of your number or email for this purpose.
• Click identifiers and outcomes. If you arrived from a Google ad, the identifier in the web address (gclid, gbraid or wbraid) may be stored with your enquiry. Later, we may tell Google that this enquiry led to a viewing or a purchase, by uploading the identifier with the outcome. Meta's fbclid is handled the same way if we use Meta ads.

Hashing makes the data hard to read, but it is still personal data that can be matched by the platform. We use it only to measure and improve our advertising. The platforms handle it under their own policies. We do not use it to sell your data to anyone.

To object or opt out: tell us (see the contact details above) and we will stop sending your details for this purpose. You can also control personalised ads yourself at Google Ads Settings.

8. Cookies and similar technologies

This site uses Google tags (Google Ads and Google Analytics) to count visits, understand how pages are used, and measure advertising. These tags can set cookies and read information from your browser. Our pages also keep an advertising click identifier in your browser's local storage for a limited period (currently up to 90 days), so that an enquiry you make later in that time can be linked to the ad that brought you here.

You can block or delete cookies and site storage in your browser settings, though some features may then work less well. You can also:

• manage personalised advertising at Google Ads Settings; and
• stop Google Analytics from collecting data about your visits with the Google Analytics opt-out browser add-on.

9. Storing data outside Malaysia

Some of the providers we use store or process data on servers outside Malaysia, for example in the United States, Singapore or elsewhere. When we use them, we choose providers that state they protect personal data, and we limit what we send to what is needed. By submitting the form you agree to your data being handled in this way.

10. How long we keep it

This is our own retention practice:

• If you do not buy, we keep your details for up to 24 months after our last contact with you, then delete or anonymise them.
• If you proceed to a purchase, we keep the records needed for the transaction, and for as long as the law or the agency's record-keeping rules require, which can be longer.
• If you ask us to stop contacting you, we keep only the minimum needed to remember your request, so that we do not contact you again.

11. Your rights

Under the Personal Data Protection Act 2010 of Malaysia (as amended, including by the 2024 amendments), you can:

• ask to see the personal data we hold about you;
• ask us to correct data that is wrong or out of date;
• withdraw your consent or opt out of marketing at any time: reply STOP to our WhatsApp message, or email us;
• ask us to delete your data, which we will do unless the law or a legitimate need requires us to keep it; and
• ask us to limit how we use your data, or to stop sending it for advertising measurement.

To make a request, email [email protected] or message us on WhatsApp from the number you gave us. We may need to confirm that you are the person concerned. We aim to reply within 21 days. If we cannot meet a request in full, we will tell you why.

If you are not satisfied, you can also contact the Personal Data Protection Commissioner of Malaysia.

12. Keeping it safe

We use reasonable measures to protect your details, such as access controls on our systems and using providers with security safeguards. No online system is completely secure, so we cannot promise absolute security. If a breach affects you in a way that the law requires us to tell you about, we will do so.

13. Children and young people

This site is for adults who can sign a property purchase agreement. We do not knowingly collect data from anyone under 18. If you believe a child has sent us their details, please tell us and we will delete them.

14. Changes to this policy

We may update this policy, for example if our tools or the law change. The “Last updated” date above shows the current version, and we will not reduce your rights without your agreement.

15. Language

This policy is written in English. If a translation is provided and it differs from the English text, the English text prevails.