Effective date: 25 July 2026 Version: 1.0
This notice is issued under the Personal Data Protection Act 2010 (Act 709) and applies to personal data processed by Homecity Realty Sdn Bhd in commercial transactions.
Privacy Notice
1. Who we are
Homecity Realty Sdn Bhd (“Homecity”, “we”, “us” or “our”) is a Malaysian property developer. For the personal data described in this notice, Homecity is the data controller.
Business address: No.9, Jalan KP 1/1, Kajang Prima, 43000 Kajang, Selangor Darul Ehsan, Malaysia.
Data protection contact: info@homecity.asia
2. Scope
This notice covers visitors to homecity.asia, prospective purchasers, customers, landowners, agents, joint-venture partners, consultants, contractors, job applicants and other people who contact or deal with Homecity. It covers our website forms, email, telephone, meetings, events and documents supplied to us.
3. Personal data we may collect
- identity and contact details, such as name, email address and telephone number;
- enquiry details, project interests, correspondence and meeting records;
- land and property information, including location, title or tenure details, survey or location plans, photographs, ownership information, proposals and supporting documents;
- career information, including work history, education, qualifications, experience, references, resume or CV and information supplied during recruitment;
- technical information, such as browser type, device information, IP address, cookie choices and website usage data, where applicable; and
- other information you voluntarily provide or that is reasonably required for the matter you ask us to handle.
Please do not send MyKad or passport copies, banking information, health information, signatures, information about offences, or other sensitive personal data unless Homecity specifically requests it and explains why it is required. If a document contains another person’s personal data, you confirm that you are authorised to provide it and have given that person this notice where appropriate.
4. Sources
We usually obtain personal data directly from you. We may also receive it from a person acting for you, public land or company records, referees, recruitment platforms, professional advisers, service providers, event organisers, business partners or publicly available sources, where permitted by law.
5. Why we process personal data
- to answer enquiries and provide information about Homecity and its projects;
- to assess land acquisition, development and joint-venture opportunities and conduct due diligence;
- to administer sales, customer, supplier, contractor and business relationships;
- to assess job applications, verify information and communicate about recruitment;
- to operate, secure, troubleshoot and improve our website and services;
- to keep records, prevent fraud, manage risk, establish or defend legal claims and comply with law, regulators and lawful requests; and
- to send project, company or event updates where you have separately chosen to receive them.
We process personal data with your consent where consent is required, to take steps you request, to perform or prepare a contract, to comply with legal obligations, and in other circumstances permitted by the PDPA. Marketing consent is optional and is not a condition of receiving a response to an enquiry.
6. Is providing data compulsory?
Fields marked as required are needed for us to identify and respond to your submission. Other information is voluntary. If required information is not provided, we may be unable to respond, assess a proposal, process an application or continue the relevant relationship.
7. Disclosure
Access is limited to Homecity personnel who need the information. We may disclose personal data to related companies, professional advisers, banks, insurers, auditors, valuers, consultants, contractors, recruitment service providers, IT and website providers, email and cloud providers, analytics providers, regulators, authorities, courts, prospective transaction parties and other recipients required or permitted by law. We require service providers to handle personal data only for authorised purposes and with appropriate safeguards.
8. Overseas processing
Our website is hosted in Malaysia. Our email and cloud communications may use Google Workspace and other providers whose systems or support teams may process data outside Malaysia. Optional website analytics may also involve processing by Google outside Malaysia. Where personal data is transferred outside Malaysia, we will take reasonable steps required by the PDPA, including notice, appropriate contractual and security safeguards, transfer assessments where appropriate, and consent where consent is the applicable transfer basis.
9. Security and uploaded documents
We use reasonable administrative, technical and physical safeguards, including access controls, restricted upload folders and secure transport. A temporary website copy of an uploaded land document or resume is deleted after the email delivery attempt. The delivered email and attachment remain in authorised business mailboxes and are managed under the retention schedule below. No internet transmission or storage system can be guaranteed completely secure.
10. Retention
| Record | Current Homecity retention rule |
|---|---|
| General enquiries | Up to 24 months after the enquiry is closed or the last meaningful contact. |
| Unsuccessful job applications | Up to 12 months after the recruitment process closes. Up to 24 months for a future-opportunity talent pool only where separate consent is obtained. |
| Inactive land or JV submissions | Up to 24 months after the last meaningful contact, unless evaluation, negotiation or due diligence remains active. |
| Marketing preferences | Until consent is withdrawn or after 24 months of inactivity, when consent should be refreshed or the record removed. |
| Transaction, contract, accounting, tax, company and legal records | For the period required by applicable law or reasonably needed for claims. Certain Malaysian accounting and tax records must be retained for seven years. |
These periods are Homecity’s operational policy unless a longer or shorter period is required by law, a legal hold, an active dispute, a regulator or the continuing purpose. When no longer required, personal data will be securely destroyed, permanently deleted or anonymised.
11. Cookies and analytics
Necessary cookies support website operation and remember privacy choices. Optional Google Analytics is disabled unless you select “Accept analytics”. We do not use the retired Universal Analytics property. See our Cookie Notice for details and how to change your choice.
12. Your rights and choices
Subject to the PDPA and permitted exceptions, you may request access to or correction of your personal data, withdraw consent, object to direct marketing, ask about our processing and request deletion where the data is no longer required. We may need to verify your identity and may retain information where law or a legal claim requires it. You may also complain to Malaysia’s Personal Data Protection Commissioner.
To exercise a right or withdraw marketing consent, email info@homecity.asia with enough detail for us to locate the relevant record.
13. Children
This website is not directed to children. A person under 18 should not submit personal data without the involvement of a parent or legal guardian.
14. International visitors
Homecity operates primarily in Malaysia and this website is intended principally for Malaysian projects and relationships. If another privacy law mandatorily applies to a particular processing activity, Homecity will address the rights and obligations that apply in that situation. Homecity does not sell personal data.
15. Changes
We may update this notice when our practices or legal requirements change. The effective date and version above show the latest published notice. Material changes will be highlighted where reasonably practicable.
Notis Privasi
Tarikh kuat kuasa: 25 Julai 2026 Versi: 1.0
1. Siapa kami
Homecity Realty Sdn Bhd (“Homecity”, “kami”) ialah pemaju hartanah Malaysia dan merupakan pengawal data bagi data peribadi yang diterangkan dalam notis ini.
Alamat perniagaan: No.9, Jalan KP 1/1, Kajang Prima, 43000 Kajang, Selangor Darul Ehsan, Malaysia.
Hubungan perlindungan data: info@homecity.asia
2. Skop
Notis ini terpakai kepada pelawat homecity.asia, bakal pembeli, pelanggan, pemilik tanah, ejen, rakan usaha sama, perunding, kontraktor, pemohon kerja dan pihak lain yang berhubung atau berurusan dengan Homecity melalui laman web, e-mel, telefon, mesyuarat, acara atau dokumen.
3. Data peribadi yang mungkin dikumpulkan
- nama, e-mel, nombor telefon dan butiran pengenalan atau perhubungan;
- butiran pertanyaan, minat projek, surat-menyurat dan rekod mesyuarat;
- maklumat tanah atau hartanah seperti lokasi, hak milik atau pegangan, pelan ukur atau lokasi, gambar, pemilikan, cadangan dan dokumen sokongan;
- maklumat kerjaya seperti sejarah pekerjaan, pendidikan, kelayakan, pengalaman, rujukan, resume atau CV;
- maklumat teknikal seperti jenis pelayar, peranti, alamat IP, pilihan kuki dan penggunaan laman web, jika berkenaan; dan
- maklumat lain yang anda berikan secara sukarela atau yang diperlukan secara munasabah.
Jangan hantar salinan MyKad atau pasport, maklumat bank, maklumat kesihatan, tandatangan, maklumat kesalahan atau data peribadi sensitif lain kecuali diminta secara khusus oleh Homecity berserta tujuan yang jelas. Jika dokumen mengandungi data peribadi orang lain, anda mengesahkan bahawa anda diberi kuasa untuk memberikannya dan telah memaklumkan notis ini kepada orang tersebut jika berkenaan.
4. Sumber
Kami biasanya mendapatkan data terus daripada anda. Kami juga mungkin menerimanya daripada wakil anda, rekod tanah atau syarikat awam, pemberi rujukan, platform pengambilan pekerja, penasihat profesional, penyedia perkhidmatan, penganjur acara, rakan niaga atau sumber awam, setakat dibenarkan undang-undang.
5. Tujuan pemprosesan
- menjawab pertanyaan dan memberi maklumat mengenai Homecity dan projeknya;
- menilai peluang pengambilan tanah, pembangunan dan usaha sama serta menjalankan usaha wajar;
- mengurus jualan, pelanggan, pembekal, kontraktor dan hubungan perniagaan;
- menilai permohonan kerja, mengesahkan maklumat dan berkomunikasi tentang pengambilan pekerja;
- mengendalikan, melindungi, menyelesaikan masalah dan menambah baik laman web dan perkhidmatan;
- menyimpan rekod, mencegah penipuan, mengurus risiko, menubuhkan atau mempertahankan tuntutan undang-undang dan mematuhi undang-undang atau permintaan sah; dan
- menghantar kemas kini projek, syarikat atau acara jika anda memilih untuk menerimanya secara berasingan.
Kami memproses data dengan persetujuan anda apabila persetujuan diperlukan, untuk mengambil langkah yang anda minta, menyediakan atau melaksanakan kontrak, mematuhi kewajipan undang-undang dan dalam keadaan lain yang dibenarkan APDP. Persetujuan pemasaran adalah pilihan dan bukan syarat untuk menerima jawapan.
6. Sama ada pemberian data wajib
Medan wajib diperlukan untuk mengenal pasti dan menjawab penyerahan anda. Maklumat lain adalah secara sukarela. Jika maklumat wajib tidak diberikan, kami mungkin tidak dapat menjawab, menilai cadangan, memproses permohonan atau meneruskan hubungan berkaitan.
7. Pendedahan
Akses dihadkan kepada kakitangan Homecity yang memerlukannya. Kami mungkin mendedahkan data kepada syarikat berkaitan, penasihat profesional, bank, penanggung insurans, juruaudit, penilai, perunding, kontraktor, penyedia pengambilan pekerja, IT, laman web, e-mel, awan dan analitik, pihak berkuasa, mahkamah, pihak transaksi yang dicadangkan dan penerima lain yang dikehendaki atau dibenarkan undang-undang. Penyedia perkhidmatan dikehendaki mengendalikan data hanya untuk tujuan yang dibenarkan dan dengan perlindungan sewajarnya.
8. Pemprosesan di luar Malaysia
Laman web kami dihoskan di Malaysia. Komunikasi e-mel dan awan mungkin menggunakan Google Workspace dan penyedia lain yang sistem atau pasukan sokongannya memproses data di luar Malaysia. Analitik pilihan juga mungkin melibatkan pemprosesan Google di luar Malaysia. Bagi pemindahan luar negara, kami akan mengambil langkah munasabah yang dikehendaki APDP termasuk notis, perlindungan kontrak dan keselamatan, penilaian pemindahan jika sesuai, serta persetujuan apabila persetujuan ialah asas pemindahan.
9. Keselamatan dan dokumen dimuat naik
Kami menggunakan perlindungan pentadbiran, teknikal dan fizikal yang munasabah termasuk kawalan akses, folder muat naik terhad dan penghantaran selamat. Salinan sementara dokumen tanah atau resume pada laman web dipadam selepas percubaan penghantaran e-mel. E-mel dan lampiran yang dihantar kekal dalam peti mel perniagaan yang dibenarkan dan diurus mengikut jadual penyimpanan.
10. Penyimpanan
- Pertanyaan umum: sehingga 24 bulan selepas ditutup atau hubungan bermakna terakhir.
- Permohonan kerja tidak berjaya: sehingga 12 bulan selepas proses ditutup; sehingga 24 bulan bagi simpanan bakat hanya dengan persetujuan berasingan.
- Cadangan tanah atau usaha sama tidak aktif: sehingga 24 bulan selepas hubungan bermakna terakhir, kecuali penilaian atau rundingan masih aktif.
- Pilihan pemasaran: sehingga persetujuan ditarik balik atau selepas 24 bulan tidak aktif, apabila persetujuan perlu diperbaharui atau rekod dipadam.
- Rekod transaksi, kontrak, perakaunan, cukai, syarikat dan undang-undang: sepanjang tempoh yang dikehendaki undang-undang atau tuntutan; rekod tertentu di Malaysia wajib disimpan selama tujuh tahun.
Apabila tidak lagi diperlukan, data akan dimusnahkan dengan selamat, dipadam secara kekal atau dinyahnamakan.
11. Kuki dan analitik
Kuki perlu menyokong operasi laman dan mengingati pilihan privasi. Google Analytics pilihan dimatikan melainkan anda memilih “Accept analytics”. Lihat Notis Kuki.
12. Hak dan pilihan anda
Tertakluk kepada APDP dan pengecualian yang dibenarkan, anda boleh meminta akses atau pembetulan data, menarik balik persetujuan, membantah pemasaran langsung, bertanya tentang pemprosesan dan meminta pemadaman apabila data tidak lagi diperlukan. Kami mungkin perlu mengesahkan identiti anda. Anda juga boleh membuat aduan kepada Pesuruhjaya Perlindungan Data Peribadi Malaysia.
E-mel info@homecity.asia untuk menggunakan hak anda atau menarik balik persetujuan pemasaran.
13. Kanak-kanak
Laman ini bukan ditujukan kepada kanak-kanak. Individu bawah 18 tahun tidak sepatutnya menyerahkan data tanpa penglibatan ibu bapa atau penjaga sah.
14. Pelawat antarabangsa
Homecity beroperasi terutamanya di Malaysia dan laman ini ditujukan terutamanya untuk projek dan hubungan di Malaysia. Jika undang-undang privasi negara lain wajib terpakai kepada aktiviti pemprosesan tertentu, Homecity akan menangani hak dan kewajipan yang berkenaan. Homecity tidak menjual data peribadi.
15. Perubahan
Kami boleh mengemas kini notis ini apabila amalan atau keperluan undang-undang berubah. Tarikh kuat kuasa dan versi di atas menunjukkan notis terkini.