Privacy Policy

1. Our Commitment

Suria takes data privacy seriously. We handle the personal information of clients, their families, and website visitors with care and in line with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy explains what data we collect, why we collect it, and what rights you have over it.

If you have questions about this policy or how your data is handled, contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

Through our contact form:

• Full name
• Email address
• Phone number (if provided)
• Message content

Through programme delivery:

• Names and contact details of the older adult and family members
• Address details for home visits
• Preferences, household routines, and activity interests (to personalise programmes)
• Visit notes and contact logs

Through website use:

• Cookies and usage data (see Section 5 and our Cookie Policy)

3. How We Use Your Data

We use personal data for the following purposes:

• Programme delivery: to arrange and manage the companionship and coordination services you have requested
• Family communication: to share visit updates and contact logs with the family members you have identified
• Enquiry follow-up: to respond to messages submitted through our contact form
• Record keeping: to maintain accurate and auditable logs of visits and communications
• Service improvement: to understand how our programmes are working and where they can be improved

We do not use personal data for unsolicited marketing and do not share data with advertising partners.

4. Legal Basis for Processing

Under the PDPA 2010, we process personal data on the following bases:

• Consent: provided when you submit our contact form or agree to a programme arrangement
• Contractual necessity: when processing is required to deliver the agreed programme
• Legitimate interest: for internal record keeping and service improvement, where this does not override your rights

5. Cookies

Our website uses cookies to help it function and to understand how visitors use it. Essential cookies are necessary for the site to operate. Optional analytics and preference cookies are only placed if you have given consent.

You can manage your cookie preferences at any time through our Cookie Policy page.

6. Data Retention

• Active programme data is retained for the duration of the programme and for 12 months afterwards, in case of queries
• Contact form enquiries that do not result in a programme arrangement are retained for 6 months
• Financial records are retained for 7 years in line with Malaysian legal requirements

After the applicable retention period, data is securely deleted or anonymised.

7. Data Protection Measures

• Data is accessible only to Suria staff who need it to deliver their role
• Digital records are stored with password protection and access controls
• Physical visit logs are kept in a secured location
• We do not transfer personal data outside Malaysia
• In the event of a data breach, we will notify affected individuals promptly and in accordance with PDPA obligations

8. Third Parties

We do not sell or share personal data with third parties for their own purposes. We may share data with service providers who support our operations (such as email hosting), where those providers are bound by confidentiality obligations.

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites.

9. Your Rights Under Malaysian Law

Under the PDPA 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Withdraw consent to processing
• Request that we limit or stop using your data where you believe the basis for processing has ended
• Lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 14 working days.

10. Children

Our services are arranged on behalf of adults aged 18 and over. We do not knowingly collect data from or about individuals under 18.

11. Policy Updates

We may update this policy from time to time. Material changes will be communicated by updating the "Last Updated" date at the top of this page. We recommend reviewing this policy periodically.

12. Contact

Data Controller: Suria

Address: No. 121, Jalan Tunku Abdul Rahman, 50100 Kuala Lumpur, Wilayah Persekutuan, Malaysia

Privacy enquiries: [email protected]