1. Who this policy covers
Rentelya ("Rentelya", "we", "us", "our") is a property and tenancy management platform for the Malaysian rental market, operated by Skyrious Technologies Sdn Bhd (Company No. [COMPANY REGISTRATION NUMBER]), a company registered in Malaysia, of [REGISTERED ADDRESS].
This policy explains what personal data we collect through rentelya.com and the Rentelya platform — the web portals at app.rentelya.com used by landlords, tenants and platform administrators — why we collect it, how long we keep it, and the rights available to you under the PDPA.
If you are a tenant, your landlord has usually already given us some of your information before you ever sign in yourself — see "Tenants and the landlord relationship" below.
2. Information we collect
Depending on whether you use Rentelya as a landlord, a tenant, or both, we collect:
3. How we use your information
- To provide the service — create your account, and show your properties, leases, payments, bills and maintenance requests to you and, where relevant, to the other party to the tenancy.
- To keep the platform secure and accountable — the audit log, rate-limiting sign-in attempts, and detecting misuse.
- To communicate with you — replying to a support request, and, where you have agreed to it, updates about Rentelya.
- To meet our legal and accounting obligations, for example keeping financial records for the period required by Malaysian law.
We do not use your data for advertising, and we do not sell personal data to anyone.
4. Tenants and the landlord relationship
Most of a tenant's information reaches us because their landlord entered it, to record a lease, a payment, a bill, or to invite the tenant to their own sign-in. In that relationship, the landlord decides what is recorded about their tenant, and we process it to provide the service to that landlord and to give the tenant their own view of their tenancy. If you are a tenant with a question about why particular information was recorded, your landlord is usually the first point of contact — you are also welcome to contact us directly using the details below.
5. Who we share information with
- We do not sell your personal data.
- Other landlords and tenants never see each other's data — every landlord's portfolio, and every tenant's tenancy, is restricted to that account alone, enforced centrally in the platform.
- We share information with service providers who help us run Rentelya, for example our hosting and file storage provider. They only process data on our instructions, and only to the extent needed to provide their service to us.
- We may disclose information if required to by law, regulation, court order, or a lawful request from a public authority.
- If Rentelya is ever involved in a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction, subject to this policy continuing to apply to it.
6. Where your data is stored and how it is protected
Rentelya runs on cloud infrastructure, which means your data may be processed on servers outside Malaysia; where that happens, we take steps to keep an equivalent standard of protection. We apply security measures including: passwords stored as one-way hashes rather than plain text; encrypted connections (HTTPS); parameterised database queries to prevent injection attacks; session cookies configured to reduce the risk of theft or forgery; rate-limiting of sign-in attempts; and uploaded files stored under randomly generated names in a location that cannot execute code. No system is completely secure, and we keep investing in these protections as the platform grows.
7. How long we keep your data
We keep your account and tenancy data for as long as your account is active. After an account is closed, we keep tenancy and payment records for a further period to meet Malaysian accounting and legal obligations — typically up to seven (7) years for financial records — after which we delete or anonymise them, unless we are required or permitted by law to keep them for longer. You can ask us to delete your data sooner; see "Your rights" below — we will tell you if any of it needs to be kept for a legal reason instead.
8. Your rights under the PDPA
Subject to the exceptions set out in the Act, you can ask us to:
- give you access to the personal data we hold about you;
- correct data that is inaccurate or incomplete;
- withdraw consent to processing that relies on consent, and limit further processing;
- delete personal data we no longer have a lawful reason to keep.
To exercise any of these, contact our data protection contact below. We will respond within 21 days, as provided for under the PDPA; if we need more time we will tell you why. There may be cases where we cannot fully comply — for example, where we are legally required to keep a financial record — and if so we will explain why.
9. Cookies
rentelya.com (this website) does not use cookies, analytics or advertising trackers. The Rentelya platform (app.rentelya.com) uses one essential cookie to keep you signed in; it is not used for advertising or cross-site tracking.
10. Children
Rentelya is a business tool for managing tenancies and is not directed at children. We do not knowingly collect personal data from anyone under 18.
11. Changes to this policy
We may update this policy as the platform changes. We will change the "Last updated" date above, and if a change is significant we will let registered users know.
12. Contact us
General questions about your account: support@rentelya.com
Data protection / PDPA requests: [DATA PROTECTION CONTACT]
Skyrious Technologies Sdn Bhd (Company No. [COMPANY REGISTRATION NUMBER])
[REGISTERED ADDRESS]