Privacy Policy
Introduction & Data Controller
This Privacy Policy describes how SewaNow (sewanow.my), operated by Feerism Enterprise (Registration No. 002681169-D) (“SewaNow”, “we”, “us”, or “our”), collects, uses, stores, discloses, and protects personal data in accordance with the Personal Data Protection Act 2010 (Malaysia) (“PDPA”).
By using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
Data We Collect
Data you provide directly:
| Data | How collected | Required? |
|---|---|---|
| Email address | Email magic link sign-in | Yes — account identity |
| Display name | Account setup | No — optional, shown publicly on listings |
| Contact methods (WhatsApp number, call number, SMS number, or email address) | Account setup and listing submission | Yes — at least one required to post listings; never displayed as visible text |
| Listing content (text, photos) | Listing submission form | Yes — for posters only |
Data collected automatically:
| Data | Purpose |
|---|---|
| IP address | Rate limiting, fraud prevention, access logs |
| Aggregated usage data | Product analytics — no personal identifiers |
| Session identifier | Authentication session management (httpOnly cookie) — logged-in users only |
How We Use Your Data
SewaNow uses your personal data for the following purposes:
- (a)To authenticate your identity via email magic link and manage your account session;
- (b)To create, display, and manage your listings on the Platform;
- (c)To facilitate contact between Landlords and Tenants through WhatsApp, telephone call, SMS, or email — contact details are never displayed as visible text and are only accessible via a redirect link;
- (d)To enforce rate limits, detect abuse, and maintain the security and integrity of the Platform;
- (e)To improve Platform features through aggregated, non-identifiable usage analytics; and
- (f)To comply with applicable legal obligations under Malaysian law.
Disclosure of Personal Data
- 4.1SewaNow does not sell, rent, trade, or share your personal data with third parties for their own commercial purposes.
- 4.2SewaNow may disclose your data only in the following circumstances:
- (a)Service Providers — To authorised sub-processors engaged to operate the Platform (see Section 5), strictly for the purpose of delivering the Platform services and bound by appropriate data processing agreements;
- (b)Legal Obligation — To law enforcement agencies, regulatory authorities, or courts where disclosure is required by applicable Malaysian law or a valid court order; or
- (c)Protection of Rights — Where disclosure is reasonably necessary to protect the rights, property, or safety of SewaNow, its users, or the public.
Third-Party Service Providers
SewaNow may engage trusted third party service providers to support platform operations, infrastructure, security, authentication, communications, analytics, and service reliability. These providers process data only where necessary to perform services on our behalf and are subject to appropriate confidentiality and security obligations.
| Service Category | Purpose | Processing Location |
|---|---|---|
| Cloud hosting provider | Application hosting, infrastructure, storage, and service availability | Malaysia, Singapore, or other secure regional/global locations |
| Database and authentication provider | Account creation, login, session management, and secure database operations | Malaysia, Singapore, or other secure regional/global locations |
| Content delivery and security provider | DNS, CDN, DDoS protection, traffic routing, caching, and platform security | Global |
| Email service provider | Transactional emails such as login links, account notices, and service notifications | Regional or global processing locations |
| Analytics provider | Privacy friendly usage analytics to improve platform performance and user experience | Regional or global processing locations |
| Error monitoring provider | Error logging, crash reporting, abuse detection, and service reliability monitoring | Regional or global processing locations |
Data Retention
| Data | Retention Period |
|---|---|
| Account data (email address, display name) | Until account anonymisation; email is replaced with a one-way hash upon anonymisation |
| Contact methods (WhatsApp numbers, call numbers, SMS numbers, email addresses provided for listings) | Until removed by the user or upon account anonymisation (30-day grace period after deletion request) |
| Listing data — user submitted | Active listing period + 90 days post-expiry, then deleted |
| Analytics data | Aggregated only, no personal identifiers — retained indefinitely |
SewaNow retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Malaysian law.
Your Rights Under PDPA 2010
Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights with respect to your personal data:
| Right | Description |
|---|---|
| Right of Access | Request a copy of the personal data SewaNow holds about you |
| Right of Correction | Request correction of inaccurate, incomplete, or misleading personal data |
| Right to Withdraw Consent | Withdraw consent to data processing where processing is consent-based. Note: withdrawal may limit or prevent your use of the Platform |
| Right to Erasure | Request erasure of personal data held by SewaNow where processing is no longer necessary or where consent has been withdrawn |
| Right to Limit Processing | Request that SewaNow cease or limit processing of your data for direct marketing purposes (not applicable — SewaNow does not engage in direct marketing) |
Data Security
- 9.1SewaNow implements industry-standard technical and organisational security measures to protect your personal data, including:
- (a)Encrypted connections (TLS/HTTPS) for all data in transit;
- (b)Access-controlled, encrypted database storage;
- (c)httpOnly, Secure-flag session cookies that cannot be accessed by client-side scripts — no contact information or personal data is stored in cookies;
- (d)Rate limiting and automated abuse detection to prevent unauthorised data harvesting; and
- (e)Access to personal data restricted to authorised personnel on a need-to-know basis.
- 9.2No method of electronic transmission or data storage is completely secure. While SewaNow takes reasonable steps to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to cause harm to you, SewaNow will notify affected users and relevant authorities as required by applicable Malaysian law.
Children
The Platform is not directed at, and is not intended for use by, persons under 18 years of age. SewaNow does not knowingly collect personal data from minors. If we become aware that a minor has submitted personal data to the Platform without appropriate parental consent, we will take steps to delete that data promptly.
Changes to This Policy
SewaNow may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or Platform features. Where changes are material, SewaNow will provide reasonable advance notice via the Platform. The effective date at the top of this page will be updated accordingly. Continued use of the Platform following notification constitutes your acceptance of the updated Policy.
Contact & Complaints
For any privacy-related enquiry, data access request, correction request, or complaint regarding SewaNow's handling of your personal data, please contact our Data Controller:
SewaNow Privacy — sewanow.my
If you are not satisfied with SewaNow's response to your privacy complaint, you may lodge a formal complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.