Privacy Policy

1. Company Information

This Privacy Policy is issued by:

2. Scope of This Policy

This Privacy Policy explains how TrustedStays collects, uses, stores and protects your personal information when you use our platform at trustedstays.my.

By using our platform, you agree to the collection and use of information as described in this policy.

3. Information We Collect

For Homestay Owners:

• Full name
• Phone number / WhatsApp
• Email address
• Identity card (IC) number (for verification purposes)
• Property information (name, location, photos)
• Supporting verification documents

For Guests:

• Name
• Phone number / WhatsApp
• Enquiry information (dates, number of guests)

Technical Information (automatic):

• IP address
• Browser type
• Pages visited and time of visit

4. Purpose of Collecting Information

We collect your personal information for the following purposes:

• Processing homestay registration and verification
• Connecting guests with suitable homestay owners
• Managing enquiries and leads
• Communicating with you about the platform
• Improving our services and user experience
• Complying with relevant legal requirements

5. Personal Data Protection (PDPA 2010)

TrustedStays complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to:

• Only collecting data that is necessary
• Storing data securely using encryption
• Not sharing personal data with third parties without your consent
• Giving you the right to access and correct your data
• Deleting your data upon a valid request

6. Sharing of Information

We do not sell your personal information to any party. Your information is only shared in the following situations:

• Between guests and owners: Basic information is shared to facilitate communication once a lead is qualified
• Technical service providers: Supabase (data hosting) and Vercel (platform hosting), both subject to confidentiality agreements
• Legal requirements: If required by a court or a relevant authority

7. Data Security

We take appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse, including:

• Encryption of data in transit (HTTPS/SSL)
• Role-based access control
• Regular data backups

8. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your data (subject to legal requirements)
• Withdraw your consent at any time

To submit any request, please contact us at [email protected]

9. Data Retention Period

We retain your personal information for as long as your account is active or as needed to provide our services. Data will be deleted within 30 days of an account closure request, unless required by law to be retained longer.

10. Data Deletion Instructions

You may ask us to delete your personal data at any time, including data we received through WhatsApp or Facebook/Meta services. To do so:

1. Send an email to [email protected] with the subject Data Deletion Request.
2. Include the phone number or email address linked to your TrustedStays account or booking, so we can identify your records.
3. We will confirm your request and delete your personal data within 30 days, except records we are legally required to keep (for example payment and tax records).

You will receive a confirmation once the deletion is complete.

11. Contact Us

If you have any questions regarding this Privacy Policy, please contact: