Privacy Policy

1. Who we are

Lanthorn Properties Sdn Bhd ("Lanthorn", "we", "us") is a property advisory firm based in Melaka, Malaysia, at 21-2 & 21-3, Jalan KPKS 6, Kompleks Perniagaan Kota Bandar, 75200 Melaka, Malaysia.

This policy explains how we handle personal data, in line with Malaysia's Personal Data Protection Act 2010 ("PDPA"). It applies to this website and to the enquiries we receive through it, by WhatsApp, by telephone, by email and in person.

2. What we collect

We only collect what you give us. In practice that is your name, your phone number or email address, and whatever you tell us about what you are looking for — budget, preferred area, property type, timing, and any financing questions you raise.

We may also record notes from our conversations with you, so that whoever you speak to next already knows your situation and you are not made to repeat yourself.

If you contact us through an advertisement on Facebook or Instagram, we receive the contact details you submitted in that form from Meta. If you send us documents in the course of an enquiry, we hold those too.

We do not buy contact lists, and we do not collect personal data about you from any source other than you, the platform you contacted us through, or a developer you have asked us about.

3. Why we use it

To answer your enquiry, to advise you on properties, to arrange viewings and appointments, to pass on project information you have asked for, and to keep in touch about your search while it is live.

We also keep records where the law or our regulator requires it, and where we need them to establish or defend a legal claim.

We do not use your personal data to make automated decisions about you, and we do not sell it. Ever, to anyone.

4. Who we share it with

The developer or project owner of a development you have specifically asked us about, where sharing your details is necessary for them to register your interest, confirm your eligibility, or process a booking. We share the minimum needed and we do not pass your details to developers you have not asked about.

The Lanthorn advisor handling your enquiry, and colleagues supporting them.

Service providers who operate our systems on our behalf under confidentiality obligations — our website and customer records are hosted on Cloudflare's infrastructure, and our email is provided by Hostinger. They process data on our instructions and for no purpose of their own.

Regulators, law enforcement, our professional advisers, or a court, where we are legally required or permitted to disclose.

Your enquiry details are stored in our internal customer records system, which is accessible only to authorised Lanthorn personnel and protected by individual accounts.

5. This website

This website does not use cookies, analytics, advertising pixels or any other tracking technology. There is no contact form: every way of reaching us on this site opens WhatsApp, your phone's dialler, or your own email application, so nothing is submitted to us until you choose to send it.

Our hosting provider processes standard technical information such as IP addresses to deliver the site and protect it from attack. We do not use that information to identify or profile visitors.

6. How long we keep it

We keep enquiry data for 12 months after our last contact with you, and then delete it.

Where a transaction has completed, we keep the records associated with it for as long as the law and our regulator require us to, which is longer than 12 months. Where you have asked us to stop contacting you, we keep the minimum record needed to honour that request.

7. Your rights

Under the PDPA you may ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to stop using it for direct marketing, or ask us to limit how we use it. You may withdraw your consent at any time, though this may mean we can no longer advise you.

To make any of these requests, email lanthornproperties@outlook.com. Requests are handled by our administrator. We will respond within 21 days, as the PDPA requires. We may need to verify your identity first — this protects you, not us.

You can tell us to stop contacting you at any time, by any channel, including by simply replying to a WhatsApp message. You do not need to give a reason.

8. Security

Our systems require individual user accounts, access to customer records is limited to staff who need it, and data is encrypted in transit. Accounts are issued and removed by our administrator.

No system is perfectly secure, and we will not claim otherwise. If a breach occurs that is likely to cause you serious harm, we will tell you.

9. Changes to this policy

We will update this policy when how we handle data changes. The effective date below tells you which version you are reading. If a change materially affects your rights, we will make reasonable efforts to tell you directly rather than relying on you to check this page.

10. Contact

Questions, requests or complaints about this policy or about how we have handled your data: lanthornproperties@outlook.com, or write to us at 21-2 & 21-3, Jalan KPKS 6, Kompleks Perniagaan Kota Bandar, 75200 Melaka, Malaysia.

If you are not satisfied with our response, you may complain to the Personal Data Protection Commissioner of Malaysia.