Privacy Policy

1. Introduction

Bayu Senja ("we", "us", "our") is committed to protecting the personal information of individuals who contact us, enquire about our programmes, or engage our services. This policy explains what personal data we collect, why we collect it, how we use it, and the choices you have regarding your information.

This policy applies to our website at bayusenja.sbs and to all personal data we hold in connection with our home assistance and companionship programmes in Malaysia.

We process personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). If you have questions about this policy, contact us at [email protected].

2. Personal Data We Collect

We collect personal data only when you provide it voluntarily through our contact form, by phone, by email, or during a programme arrangement. The categories of data we collect are:

• Identity data: your name and, where relevant, the name of the older relative the programme is for
• Contact data: email address, phone number, and postal address if provided
• Programme data: preferences, scheduling requirements, and household information shared during intake
• Communications data: records of messages or calls with our team
• Website data: cookies and analytics information collected automatically (see Section 5)

Legal basis for processing:

• Consent — when you submit an enquiry form or accept cookies
• Contract — when processing is necessary to deliver an agreed programme
• Legitimate interests — for internal record-keeping and service improvement

Retention: Enquiry data is retained for 12 months. Active programme records are retained for the duration of the programme plus 24 months. You may request deletion at any time (see Section 6).

3. How We Use Your Personal Data

We use the personal data you provide for the following purposes:

• To respond to your enquiry and discuss programme options
• To arrange, schedule, and deliver the agreed programme
• To communicate updates, end-of-visit notes, and confirmations to the family
• To process payments and maintain financial records
• To improve our services based on feedback and usage patterns
• To comply with legal obligations under Malaysian law

We do not sell your personal data to third parties. We do not use your data for unrelated marketing without your explicit consent. If you wish to unsubscribe from any communications, contact us at [email protected].

4. How We Protect Your Data

• Our website uses HTTPS encryption for all data transmitted between your browser and our server
• Personal data is stored in access-controlled systems accessible only to authorised team members
• Companions and operational staff receive only the programme-specific information needed for their role
• In the event of a data breach, we will notify affected individuals in accordance with PDPA requirements
• We review our data handling practices periodically and update this policy when changes are made

5. Cookies

Our website uses cookies to maintain basic functionality and to understand how visitors find and use the site. We use the following categories:

• Essential cookies: required for the site to function; cannot be disabled
• Analytics cookies: help us understand which pages are visited most; optional
• Preference cookies: remember your consent choices; optional

You can manage your cookie preferences at any time through our Cookie Policy page.

6. Your Rights Under Malaysian PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right to access: request a copy of the personal data we hold about you
• Right to correction: ask us to correct inaccurate or incomplete data
• Right to withdraw consent: withdraw consent for processing at any time (this will not affect processing already carried out)
• Right to object: object to data processing that relies on legitimate interests
• Right to erasure: ask us to delete your data, subject to our legal obligations

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

If you believe your data rights have not been respected, you may contact the Department of Personal Data Protection Malaysia (JPDP), which oversees enforcement of the PDPA.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites, and this policy does not apply to them. We encourage you to review the privacy policy of any website you visit via a link from ours.

8. Age of Service Users

Our programmes are arranged by family members or authorised parties on behalf of older relatives. We do not knowingly collect personal data from individuals under the age of 18 without parental or guardian consent. Our website and enquiry process are directed at adults aged 18 and above.

9. Policy Updates

We may update this policy from time to time to reflect changes in our practices or applicable law. Updated versions will be posted on this page with a revised "Last Updated" date. Continued use of our website after updates constitutes acceptance of the revised policy.

10. Contact for Data Inquiries