Effective Date: 19 June 2026
Last Updated: 19 June 2026
1. Introduction
This Privacy Policy explains how Powerlah PLT (“we”, “us”, “our”) collects, uses, discloses, and protects your personal data when you visit our marketing website at https://powerlah.my (the “Website”).
We are committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and all applicable regulations.
Registered Address:
Suite 33-01, 33rd Floor, Menara Keck Seng, 203 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia.
Data Protection Contact:
For enquiries regarding this Privacy Policy or your personal data, contact us at [email protected].
2. Personal Data We Collect
We collect and process the following categories of personal data through this Website:
2.1 Enquiry Form Information
When you submit the contact form on our Website, we collect:
| Data | Purpose |
|---|---|
| Full name | To identify you and personalise our response |
| Phone number | To contact you regarding your enquiry |
| Property type | To understand your needs and provide relevant information |
| Number of rooms | To assess the scope of your enquiry |
| Message (optional) | To understand your specific requirements |
2.2 Automatically Collected Data
When you visit the Website, data is automatically collected by our web server, content delivery network, and analytics services:
| Data | Purpose |
|---|---|
| IP address | Server security, abuse prevention, and CDN performance |
| Browser type, version, and device information | Ensuring Website compatibility and analytics |
| Pages visited, timestamps, and session duration | Website analytics and performance monitoring |
| Referral source (how you arrived at the Website) | Understanding traffic sources and campaign effectiveness |
| Approximate geographic location (derived from IP address) | Analytics and content delivery optimisation |
We do not collect payment information, national identification numbers (NRIC/IC), biometric data, or any account credentials through this Website.
3. How We Use Your Personal Data
We process your personal data for the following purposes under the PDPA:
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry submitted via the contact form | Consent; legitimate interest |
| Following up on demo requests | Consent; legitimate interest |
| Analysing Website traffic and visitor behaviour to improve our content and user experience | Legitimate interest |
| Measuring the effectiveness of our advertising campaigns | Consent |
| Displaying targeted advertisements to you on third-party platforms (remarketing) | Consent |
| Maintaining web server security, CDN performance, and preventing abuse | Legitimate interest |
| Complying with legal and regulatory obligations | Legal obligation |
We will not use your personal data for marketing purposes without your explicit consent.
4. How We Protect Your Data
We implement appropriate technical and organisational measures to safeguard your personal data:
- Secure communications: All data transmitted between your browser and our servers is protected by TLS/SSL encryption via Cloudflare.
- DDoS and bot protection: Cloudflare provides network-level security, filtering malicious traffic before it reaches our servers.
- Access control: Access to enquiry data is restricted to authorised personnel only.
- Secure hosting: The Website is hosted on infrastructure with appropriate security controls.
5. Data Sharing and Third Parties
We may share your personal data with the following categories of recipients:
5.1 Service Infrastructure and Analytics
| Service | Data shared | Purpose |
|---|---|---|
| Cloudflare (CDN and security) | IP address, browser metadata, request data | Content delivery, performance optimisation, DDoS protection, and bot mitigation. Cloudflare processes requests through its global network and may temporarily cache data at edge locations worldwide. |
| Google Analytics | Device and browser information, pages visited, session data, referral source, approximate location (derived from IP) | Website traffic analysis, visitor behaviour insights, and content performance measurement. Google may process this data on servers outside Malaysia. |
| Google Ads | Pseudonymous identifiers via cookies and pixels | Measuring advertising campaign effectiveness and displaying relevant advertisements to past visitors (remarketing) across the Google Display Network. |
| Meta Pixel (Facebook/Instagram) | Pseudonymous identifiers, page visit events, browser and device data | Measuring advertising performance and enabling remarketing to Website visitors on Facebook and Instagram. |
| TikTok Pixel | Pseudonymous identifiers, page visit events, browser and device data | Measuring advertising performance and enabling remarketing to Website visitors on TikTok. |
| Web hosting provider | Server logs (IP address, browser metadata) | Website hosting and server operation |
| Email service | Recipient email address, message content | Responding to your enquiry |
5.2 Legal Disclosure
We may disclose your personal data if required by law, regulation, legal process, or enforceable government request, or to protect the rights, property, or safety of Powerlah PLT, our users, or the public.
We do not sell your personal data to any third party.
6. Cross-Border Data Transfer
Our servers are hosted in Malaysia, Singapore, and the United States. Additionally, the following services may process your data in other jurisdictions:
- Cloudflare routes traffic through its global network of data centres and may process requests at edge locations in various countries.
- Google (Analytics and Ads) may process data on servers in the United States and other jurisdictions.
- Meta (Facebook/Instagram Pixel) may process data on servers in the United States and other jurisdictions.
- TikTok may process data on servers in Singapore, the United States, and other jurisdictions.
We ensure that appropriate safeguards are in place in compliance with Section 129 of the PDPA, and that each receiving jurisdiction provides an adequate level of data protection.
7. Cookies and Tracking
7.1 Cookies We Use
This Website uses the following types of cookies:
| Cookie type | Provider | Purpose | Duration |
|---|---|---|---|
| Essential cookies | WordPress | Basic website functionality and form security | Session |
| Security and performance cookies | Cloudflare | Bot detection, DDoS protection, and content delivery optimisation | Session to 30 days |
| Analytics cookies | Google Analytics | Collecting anonymised data about how visitors use the Website (pages viewed, session duration, traffic sources) | Up to 2 years |
| Advertising cookies | Google Ads | Tracking conversions and enabling remarketing across the Google Display Network | Up to 2 years |
| Advertising cookies | Meta (Facebook/Instagram) | Tracking conversions and enabling remarketing on Facebook and Instagram | Up to 2 years |
| Advertising cookies | TikTok | Tracking conversions and enabling remarketing on TikTok | Up to 13 months |
7.2 Managing Your Cookie Preferences
You can control or delete cookies through your browser settings. Most browsers allow you to:
- View and delete existing cookies
- Block all or certain types of cookies
- Set preferences for specific websites
You can also opt out of specific advertising and analytics services:
- Google Analytics: Install the Google Analytics Opt-out Browser Add-on
- Google Ads: Manage your preferences at Google Ads Settings
- Meta: Adjust your ad preferences at Facebook Ad Preferences
- TikTok: Manage your preferences in TikTok’s in-app privacy settings
Please note that disabling certain cookies may affect the functionality of the Website.
8. Data Retention
We retain your personal data as follows:
| Data category | Retention period |
|---|---|
| Enquiry form submissions | Until the enquiry is resolved, or up to 12 months, whichever is longer |
| Web server logs | Periodically reviewed and purged in accordance with hosting provider policies |
| Analytics data (Google Analytics) | Up to 14 months (as configured), then automatically deleted by Google |
| Advertising and remarketing data | Retained by each platform in accordance with their own data retention policies |
9. Your Rights Under the PDPA
Under the Personal Data Protection Act 2010, you have the following rights:
- Right of Access — You may request access to your personal data held by us.
- Right of Correction — You may request correction of any inaccurate, incomplete, or misleading personal data.
- Right to Withdraw Consent — Where processing is based on consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out prior to withdrawal.
- Right to Limit Processing — You may request that we limit the processing of your personal data in certain circumstances.
To exercise any of these rights, contact us at [email protected]. We will respond to your request within 21 days as required by the PDPA.
If you are dissatisfied with our handling of your personal data, you may lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia.
10. Children’s Privacy
This Website is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal data from a person under 18, we will take steps to delete such data promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this Website with a revised “Last Updated” date.
We encourage you to review this Privacy Policy periodically.
12. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of Malaysia, including the Personal Data Protection Act 2010.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:
Powerlah PLT
Suite 33-01, 33rd Floor, Menara Keck Seng,
203 Jalan Bukit Bintang,
55100 Kuala Lumpur, Malaysia.
Email: [email protected]