Privacy Policy

1. Introduction

Bridgenest ("we", "us", "our") is committed to handling personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This Privacy Policy describes the personal data we collect, why we collect it, how we use and protect it and the rights you hold in relation to it.

This policy applies to all personal data collected through our website at bridgene.sbs, through our contact form, by email and during the delivery of our household records services. By using our website or engaging our services, you acknowledge this policy.

For any privacy-related enquiry, contact us at [email protected].

2. Personal Data We Collect

We collect the following categories of personal data:

• Identity data: your full name and, where relevant, the names of other household members whose records are in scope.
• Contact data: email address, telephone number and postal address.
• Service delivery data: information about the documents you are organising, the categories involved and the scope of the engagement, as recorded in our written scope documents and working notes.
• Website usage data: IP address, browser type, pages viewed and visit duration, collected through cookies and analytics tools.

We collect personal data through our website contact form, by email, by telephone and in person during appointments.

We do not collect sensitive personal data (as defined under the PDPA) unless you voluntarily provide it in the context of describing your household records situation. Where such data is incidentally disclosed, it is handled with additional care and used only to the extent necessary to deliver the agreed service.

Retention: Contact and enquiry data is retained for 24 months from last contact. Service delivery records are retained for the duration of the engagement and for up to 36 months afterwards for our own administrative reference. You may request erasure at any time (see Section 6).

3. How We Use Personal Data

We use personal data for the following purposes:

• Service delivery: to schedule appointments, produce written scope documents, prepare checklists, indexes and summaries and manage the ongoing retainer if applicable.
• Communication: to respond to enquiries, confirm appointments and send the written outputs agreed in the service scope.
• Legal basis — contract: processing necessary to perform the service you have engaged us to deliver.
• Legal basis — legitimate interest: maintaining internal records sufficient to manage client engagements and respond to queries about past work.
• Legal basis — consent: website analytics cookies, where you have given consent via our cookie banner.

We do not use personal data for direct marketing without your explicit consent. We do not sell or share personal data with third parties for their own marketing purposes.

We may share data with trusted third-party processors (such as cloud storage providers) solely to deliver our services. Where this occurs, we ensure those processors maintain appropriate data protection standards.

4. Data Protection Measures

We take reasonable steps to protect personal data against unauthorised access, disclosure or loss, including:

• Access to client records is restricted to team members involved in the relevant engagement.
• Digital files containing personal data are stored in password-protected systems.
• Physical documents are handled only during scheduled in-home visits and are not removed from the client's premises.
• Working copies of any digitised material are deleted once the engagement is complete and the client has confirmed receipt of all deliverables.

In the event of a data breach likely to affect your personal data, we will notify you within a reasonable timeframe and take steps to mitigate any potential harm.

5. Cookies

Our website uses cookies to support functionality and to understand how the site is used. Essential cookies are necessary for the site to work and cannot be declined. Analytics and preference cookies are optional and require your consent. For full details, see our Cookie Policy.

6. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right of correction: to request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time (this does not affect the lawfulness of processing before withdrawal).
• Right to limit processing: to request that we limit how we use your data in certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you are not satisfied with our response, you may contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

7. Third-Party Links

Our website may contain links to official Malaysian government portals and other external sites provided as public information references. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies separately.

8. Children's Privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided personal data to us, please contact us and we will take appropriate steps to remove it.

9. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. The updated version will be published on this page with a revised "Last Updated" date. Continued use of our website or services following a material change constitutes acceptance of the updated policy.

10. Contact Information

Data Controller: Bridgenest
30 Jalan Pahang, 53000 Kuala Lumpur, Malaysia

Privacy enquiries: [email protected]

General enquiries: [email protected] · +60 3-5638 2047