Privacy Policy

1. Introduction

Restu ("we", "us", "our") operates a home support coordination service in Johor Bahru, Malaysia. We are committed to handling all personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy explains what data we collect, why we collect it, how we use it, and what rights you have.

This policy applies to data collected via our website at restu.blog and through direct communications with our team. By using our website or contacting us, you acknowledge that you have read this policy.

Questions about this policy may be directed to [email protected].

2. Data We Collect

When you submit an enquiry form or contact us directly, we may collect:

• Full name
• Email address
• Phone number (optional)
• Message contents
• IP address and browser type (via analytics tools)
• Pages visited and time spent on the site (via cookies)

We collect this information through contact forms on our website and through direct email or telephone conversations. We do not collect sensitive personal data (such as identity card numbers or financial details) through the website.

Legal basis: Data collected through forms is processed on the basis of your consent. Data collected for service delivery is processed on the basis of contractual necessity. Analytics data is processed on the basis of legitimate interest in improving our website.

Retention: Enquiry data is retained for up to 24 months. Service coordination records are retained for the duration of the arrangement plus 12 months. Analytics data is retained for up to 26 months.

3. How We Use Your Data

• Responding to your enquiry and discussing service arrangements
• Coordinating and delivering agreed services
• Sending service updates and written summaries to designated family contacts
• Improving our website and communications
• Complying with legal obligations

We do not use your data for unsolicited marketing. If you provide your email address, we may send information relevant to your enquiry or arrangement only. You may request to stop receiving any communications at any time.

4. Data Sharing

We share personal data only in the following circumstances:

• Within your designated family contact group — for service coordination purposes, as agreed at the start of an arrangement
• Service providers — analytics and hosting providers bound by data processing agreements
• Legal requirements — if required by Malaysian law or a competent authority

We do not sell personal data to third parties. We do not share data with advertising networks.

5. Data Protection Measures

• Website data transmitted over HTTPS (TLS encryption)
• Access to stored data limited to authorised team members only
• Passwords and credentials stored using industry-standard hashing
• Regular review of data access logs
• In the event of a data breach, affected individuals will be notified within a reasonable time in accordance with PDPA requirements

6. Cookies

Our website uses cookies to ensure basic functionality and to understand how visitors use the site. These include essential cookies (required for the site to work), analytics cookies (optional), and preference cookies (optional).

You may manage your cookie preferences at any time through our Cookie Policy page. Declining non-essential cookies does not affect your ability to use the site.

7. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to correction — request that inaccurate data be corrected
• Right to withdraw consent — withdraw consent for processing at any time
• Right to prevent processing for direct marketing — opt out of any marketing communications
• Right to erasure — request deletion of your data (subject to legal retention obligations)

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

If you believe your data has been handled improperly, you may lodge a complaint with the Department of Personal Data Protection (JPDP), Malaysia's supervisory authority for data protection matters.

8. Third-Party Links

Our website may contain links to external sites (such as Google Maps). Restu is not responsible for the privacy practices of these third parties and we encourage you to review their policies separately.

9. Children's Privacy

Our services are directed at adults (18 years and above) and at family members arranging support for older relatives. We do not knowingly collect personal data from individuals under 18. If we become aware that a minor has submitted data to us, we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our website following any update constitutes acceptance of the revised policy. For significant changes, we will notify active clients by email where possible.