Privacy Notice
Personal Data Protection Act 2010 (PDPA) · Last updated 25 August 2026
Draft — not ready to rely on
This document still uses placeholder operator details and has not been reviewed by a lawyer. It must be updated with the real name and SSM registration number before the board opens for sales.
1. Who we are
Tanah Iklan is a project operated by TANAH IKLAN (PENDING SSM REGISTRATION) (TBC), and is the data user for the purposes of the PDPA. Contact us at hello@tanahiklan.my.
2. What we collect
- Name — to identify the owner of a plot.
- Email address — for receipts, land tax reminders, artwork review decisions, and your plot management link.
- Phone number (optional) — to reach you if email fails.
- Artwork and links you upload — shown publicly once approved.
- Payment references from the payment gateway. We do not store your card number, bank details, or banking passwords — those go straight to the gateway.
- A session cookie — one technical cookie linking your hold to your browser. It holds no personal data and is not used for advertising or tracking.
3. Why we process it
To perform the sale contract with you, to meet legal obligations (including reviewing the content we host), and to contact you about your plot. We do not use your data for third-party marketing and we do not sell it.
4. Who it is disclosed to
- The payment gateway, to process your payment.
- Our hosting and database providers, who store data on our behalf.
- An automated image scanning service, which processes uploaded images.
- Malaysian authorities, where required by law.
Some of these providers process data outside Malaysia. We only use providers offering reasonable protection.
5. How long we keep it
Purchase records and artwork are kept while a plot is active, and afterwards for a reasonable period for accounting records and disputes. Artwork from lapsed plots is archived rather than deleted immediately, so we have a record of what was once displayed.
6. Your rights
Under the PDPA you have the right to access your personal data, correct inaccurate data, limit processing, and withdraw consent for non-essential communications. Send requests tohello@tanahiklan.my and we will reply within 21 days.
Withdrawing data we need in order to maintain your plot may mean we cannot keep displaying it.
7. Security
Data is held in a password-protected database with access controls. Artwork awaiting approval is stored privately and cannot be reached by the public. No system is perfect, but we take reasonable steps.