Privacy Notice
This notice is given under the Personal Data Protection Act 2010. It says what Lokasell collects about you, what it does with it, and what you can ask of us. It is also in Bahasa Malaysia: Notis Privasi.
In short
- We collect what you give us to run your account and publish your pages, and a little about each visit to keep Lokasell working and safe.
- What you publish is public. Everything else is not, except to the services named here that help run Lokasell.
- We do not sell your data and we do not use advertising or tracking cookies.
- Write to [email protected] to see, correct or remove what we hold about you.
Lokasell's company details are still being added. Gaps marked [like this] will be filled in.
Who is responsible for your data
[Company name] ([SSM number]), which runs Lokasell, is the data user responsible for the personal data described here. Write to us at [email protected], or by post to [registered address]. Requests are answered by [name of the person who answers privacy requests].
This notice covers lokasell.com, agents' pages on it, and agents' pages that Lokasell serves at a domain of the agent's own. It does not cover what happens after you contact an agent or an owner: a WhatsApp chat, an email or a call is between you and them, and they are responsible for what they do with your details.
What we collect
When you visit any page
Our servers and Cloudflare, which carries every request to them, record the page asked for, your IP address, your browser's description of itself (its user agent) and the time. We use this to deliver the page, to keep Lokasell secure and to find faults.
Some pages contain a link to message an agent or an owner on WhatsApp or by email. The message has a link back to the page in it. When that link is opened, we record that it was opened, from which page and by which channel, with the IP address and browser of whoever opened it. Agents see how many such links were opened; they do not see the IP address or browser.
When you have an account
- Your name, email address and a scrambled form of your password (we never see the password itself).
- Each device you are signed in on, with its IP address and browser, so you stay signed in and can be signed out everywhere.
- What you change on Lokasell and when, with your IP address at the time, in an activity record kept for security and to settle questions about who changed what.
- Which version of our terms you accepted, when, and from which IP address and browser.
If you list your own home
Your phone number and how you prefer buyers to contact you, when you plan to sell, and everything you write about the home, including its address, its position on the map, its photographs and any title details you add.
If you are an agent
Your public name, registration number with the Board of Valuers, Appraisers, Estate Agents and Property Managers, agency, years of experience, WhatsApp number, portrait, what you write about yourself, your areas and services, links to your social media, the words of clients you add, your page's address and any domain of your own, and the result of Lokasell's check of your registration.
If you are a Lokalist or run part of the country for Lokasell
The neighbourhoods and areas you are appointed to, by whom and when, and the guides you write, with their changes.
Why we use it
- To run your account and publish your pages, which is what you ask Lokasell for.
- To check agents' registration against the Board's register, so buyers can trust that an agent's page is an agent's.
- To show agents and owners how their pages are doing, by counting the enquiry links opened.
- To draft social media posts for a listing, when its agent asks for them.
- To send emails you need, such as a link to reset your password. We do not send marketing email. If we ever want to, we will ask you first, and you can say no at any time.
- To keep Lokasell secure, prevent fraud and misuse, keep a record of changes, and deal with reports and disputes.
- To meet the law, and to answer requests from authorities that the law requires us to answer.
We process your data with your consent, which you give by using Lokasell after being given this notice, or where the law allows without it, such as where it is needed for the service you asked for or to comply with the law. You can withdraw your consent (see "Your rights"), though some of Lokasell will then no longer work for you.
What is public
Some of what you give us is meant to be seen by anyone. It is on public pages, in the previews shown when their links are shared, and in what search engines collect from them:
- a listing and everything on it, including its address and roughly where it is;
- for a home listed by its owner, the owner's phone number;
- for an agent, their public name, portrait, registration number, agency, WhatsApp number, email address and what they wrote on their page, including the words of clients they added.
Once something is public, others may copy it, and taking it down from Lokasell does not remove those copies.
Data that leaves Malaysia
Most of the services above are outside Malaysia, so your data is transferred abroad. We use services whose terms commit them to protect the data and to use it only for us, and we transfer only what each needs. Where the law of the country does not protect personal data as Malaysia's does, we rely on those commitments, as the Personal Data Protection Act allows.
How long we keep it
We keep personal data only as long as we need it for the reasons above, then delete it or remove what identifies you:
| What | How long |
|---|---|
| Your account and what you published | While your account is open, and [period to be set] after it is closed |
| Devices signed in | Until you sign out, and [period to be set] at most |
| Enquiry links opened | [period to be set] |
| The activity record of changes | [period to be set] |
| Which terms you accepted | [period to be set] |
| Requests to our servers | As long as Cloudflare and our server keep their logs, usually days, not months |
We may keep something longer where the law requires it, or while it is needed for a dispute or an investigation.
How we protect it
Lokasell is reached only over encrypted connections. Passwords are stored scrambled, so not even we can read them. Access to personal data is limited to the people who need it for their work for Lokasell, and those who run part of the country for Lokasell see only their part, and agree to keep it confidential.
If personal data is lost, stolen or reached by someone who should not have it, we tell the Personal Data Protection Commissioner within 72 hours of knowing, and we tell you without delay if it could cause you significant harm.
Your rights
Under the Personal Data Protection Act you can ask us:
- to see the personal data we hold about you, and for a copy;
- to correct it if it is wrong, incomplete or out of date (most of it you can correct yourself in your account);
- to stop using it, by withdrawing your consent, and to close your account and delete what is no longer needed;
- not to use it for direct marketing;
- to send it to you, or to another service, in a form a computer can read.
Write to [email protected] from the email address on your account, or tell us how to confirm it is you. We answer within 21 days, and tell you if we need longer and why. We do not charge for this. If we cannot do what you ask, we explain why.
If you are not satisfied with our answer, you can complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi) at pdp.gov.my.
Do you have to give it?
To have an account, you must give your name, email address and a password. To publish a home as its owner, a way for buyers to reach you. To have a public agent page, your public name, registration number, WhatsApp number and page address. Everything else is up to you. Without what is needed, we cannot open the account or publish the page.
Children
Lokasell is for adults, and accounts are for people 18 or older. We do not knowingly collect personal data about children. If you think a child has given us theirs, tell us and we will delete it.
Changes to this notice
We update this notice when what we do changes. The date at the top says when it last changed. When a change matters to you, we tell you before it takes effect. This notice is given in English and in Bahasa Malaysia, and both say the same.