Privacy Policy

1. Personal Data We Collect

Information you give us. Your name, mobile number, email address, the township or product you are interested in, your preferred visit date and time, and any remarks or messages you share with us through our forms, WhatsApp, phone, email or social media.

Information collected automatically. Your IP address, device and browser type, pages you view, time spent on the Site, the website or advertisement that referred you, campaign tags (UTM parameters), and cookie or pixel identifiers.

Information from third parties. If you submit an enquiry through a lead form on Facebook, Instagram, TikTok or Google, or through a property portal or an agent we have appointed, we receive the details you entered there.

We do not ask for sensitive personal data (such as health information, religious beliefs, political opinions, criminal records or biometric data) through this Site. Please do not include this kind of information in your remarks or messages.

2. Why We Collect It

We use your personal data to:

• respond to your enquiry and arrange your visit to our Welcome Centre or show unit;
• contact you by phone, WhatsApp, SMS or email about your enquiry, our products, launches, events and promotions (see Section 7);
• assign your enquiry to our sales advisors and keep a record of our communications with you;
• if you decide to buy, process your booking, sale and purchase documentation, and any financing referral you ask for;
• understand how visitors use the Site, and measure and improve our advertising;
• keep the Site secure and detect fraud and spam; and
• comply with our legal and regulatory obligations and respond to lawful requests from authorities.

3. What You Must Provide

Fields marked * on our forms (your name and mobile number) are required. All other fields are optional. If you do not provide the required information, we may not be able to respond to your enquiry or arrange a visit.

4. Who We Share It With

We may share your personal data with:

• companies within the SP Setia group;
• sales advisors and agents we have appointed;
• service providers acting on our behalf, including digital marketing agencies, website hosting and IT providers, lead management and CRM systems, email and messaging services, and analytics and advertising platforms;
• banks, financial institutions, solicitors and valuers, only when you ask us to connect you with them or when needed to complete your purchase;
• government agencies, regulators, courts and law enforcement, where required by law; and
• a buyer or successor in the event of a restructuring, merger or sale of business.

We do not sell your personal data. Our service providers may only process your data on our instructions and must keep it secure.

5. Transfers Outside Malaysia

Some of our service providers, such as website hosting, cloud storage, analytics, advertising and email platforms, store or process data on servers outside Malaysia. We only transfer personal data out of Malaysia as permitted under Section 129 of the PDPA, and we take reasonable steps so that your data is protected to a standard no lower than the PDPA requires.

6. Cookies, Pixels and Analytics

We and our partners use cookies and similar technologies (such as pixels and tags), managed through Google Tag Manager. These include Google Analytics, Google Ads, the Meta Pixel and the TikTok Pixel, as well as error-monitoring tools that help keep the Site working properly.

These technologies help us count visits, understand which advertisements bring people to the Site, and show you more relevant advertising on other platforms.

You can block or delete cookies in your browser settings, manage your advertising preferences in your Google, Meta and TikTok accounts, or install the Google Analytics Opt-out browser add-on (opens in a new tab). Blocking cookies will not stop you from browsing the Site, but some features may not work as intended.

7. Marketing Messages and Your Choices

We may send you updates about Setia Bayuemas and other SP Setia developments. You can stop receiving them at any time by clicking "unsubscribe" in our emails, telling our team on WhatsApp or by phone, or emailing us at the address in Section 13.

We will stop sending marketing messages within a reasonable time. You may still receive messages about an enquiry or purchase that is in progress.

8. How Long We Keep Your Data

We keep personal data only for as long as needed for the purposes above or as required by law:

• Enquiries that do not lead to a purchase: up to 24 months from our last contact with you, after which the data is deleted or anonymised.
• Purchasers: for the duration of the transaction and as long as required by law, for example 7 years for tax and accounting records.
• Analytics data: according to the retention settings of each platform, for example 14 months for Google Analytics.

9. How We Protect Your Data

We take practical administrative, physical and technical measures to protect your personal data from loss, misuse, modification, unauthorised access, disclosure or destruction. These include encrypted connections (HTTPS), access controls, and limiting access to staff and service providers who need it. Our service providers must meet the same security standards.

If a personal data breach occurs that is likely to cause you significant harm, we will notify the Personal Data Protection Commissioner and you, as required by the PDPA.

10. Your Rights

Under the PDPA, you have the right to:

• Access a copy of the personal data we hold about you. We will respond within 21 days of receiving a complete request. A fee prescribed under the PDPA regulations may apply.
• Correct personal data that is inaccurate, incomplete, misleading or out of date.
• Withdraw your consent to the processing of your personal data at any time, by written notice.
• Stop direct marketing to you (see Section 7).
• Prevent processing that is likely to cause you substantial damage or distress.
• Data portability: ask us to transmit your personal data to another data controller, subject to technical feasibility and compatibility of the data format.

To make a request, contact us using the details in Section 13. We may need to verify your identity first. We may refuse a request where the PDPA allows, and we will tell you why. Withdrawing consent may affect our ability to assist with your enquiry.

11. Links to Other Websites

The Site links to WhatsApp, social media platforms and other websites. These are governed by their own privacy policies, and we are not responsible for their privacy practices.

12. Changes to This Policy

We may update this Policy from time to time. The latest version will always be posted on this page with a new "Last updated" date. Where changes are significant, we will highlight them on the Site.