At Urentium, we respect your privacy and are committed to protecting the personal data of our Landlords and their Tenants. This policy outlines how we collect, use, and safeguard your information when you use our platform.
01
Information We Collect
Account · Property · Financial · Usage data
To provide a functional property management experience, we collect the following categories of information:
| Category | Examples | Who |
|---|---|---|
| Account Data | Full name, email address, phone number, IC/passport number (for KYC) | Landlords & Tenants |
| Property Data | Property addresses, unit numbers, rental amounts, tenancy terms | Landlords |
| Financial Data | Bank account details (for disbursements), transaction records, invoice history | Landlords |
| Usage Data | IP addresses, browser type, pages visited, session duration, error logs | All users |
| Device Data | Operating system, screen resolution, referring URLs | All users |
| KYC Documents | Identity documents submitted during landlord onboarding verification | Landlords |
Payment security: Urentium uses third-party payment processors (e.g., Xendit) to handle all card and bank transactions. We do not store full credit card numbers, CVV codes, or online banking credentials on our servers.
02
How We Use Your Information
Platform operations · Communications · Compliance
We use your data strictly to operate the platform and maintain the rental lifecycle. We do not use your data for advertising or sell it to marketing companies.
- Generating and delivering automated monthly invoices to tenants.
- Facilitating secure rent collection and disbursements to landlord bank accounts.
- Sending critical system notifications — overdue payment reminders, account alerts, and billing receipts.
- Processing KYC submissions and verifying landlord identity for sub-account provisioning.
- Providing customer support, investigating disputes, and resolving technical issues.
- Analysing aggregated, anonymised usage data to improve platform performance and features.
- Meeting our legal and regulatory obligations under Malaysian law.
03
Data Sharing & Third Parties
We never sell your data
We share your information only with essential service providers required to operate the platform. Each provider is bound by data processing agreements and their own privacy obligations.
| Provider Type | Purpose | Examples |
|---|---|---|
| Payment Processors | Rent collection, landlord payouts, invoice generation | Xendit |
| Cloud Infrastructure | Secure database hosting, file & PDF storage | Google Cloud (GCS) |
| Email Services | Invoice delivery, system notifications, account alerts | Mailtrap / SMTP |
| Legal & Compliance | Judicial orders, regulatory investigations, fraud prevention | As required by law |
| Monitoring Tools | Platform error tracking and performance monitoring | Laravel Telescope |
Our commitment: Urentium will never sell, rent, or trade your personal data to third parties for marketing or commercial purposes.
04
Data Retention & Security
Encryption · Storage limits · Account closure
-
Encryption in Transit: All data exchanged between your browser and our servers is protected with SSL/TLS encryption.
-
Stored Credentials: Passwords are hashed using industry-standard bcrypt. We never store plaintext passwords.
-
Active Accounts: We retain your account data for as long as your subscription remains active or as needed to provide you with services.
-
Closed Accounts: Following account closure, we may retain certain financial and transactional records for up to 7 years as required by Malaysian tax and financial regulations.
-
Security Incidents: In the unlikely event of a data breach affecting your personal data, we will notify affected users within 72 hours of becoming aware, in accordance with applicable regulations.
05
Cookies & Tracking
Session management · Preferences
Urentium uses cookies strictly for platform functionality. We do not use third-party advertising or tracking cookies.
-
Session Cookies: Required to keep you logged in during a browser session. These expire when you close your browser.
-
Persistent Cookies: Used to remember your login state across sessions if you select "Remember me".
- We do not use advertising cookies, retargeting pixels, or cross-site tracking tools.
06
Landlord Responsibility as Data Controller
Tenant data · Consent · PDPA obligations
Urentium acts as a Data Processor for the Tenant information uploaded by Landlords. In this relationship, the Landlord is the Data Controller and bears the following responsibilities:
- Landlords must ensure they have the necessary legal basis (e.g., consent, contractual necessity) to upload and process their tenants' personal information into Urentium.
- Landlords are responsible for compliance with the Personal Data Protection Act 2010 (PDPA) and any other applicable Malaysian data protection laws when collecting tenant information.
- Urentium will assist Landlords in responding to any Tenant data access requests to the extent technically feasible.
By using Urentium to manage your tenants, you confirm that you have a lawful basis for processing their personal data and have informed them accordingly.
07
Your Rights
Access · Correction · Deletion · Portability
Depending on your location and applicable law, you may have the following rights regarding your personal data held by Urentium:
Right to Access
Request a copy of the personal data we hold about you.
Request a copy of the personal data we hold about you.
Right to Correction
Request that inaccurate or incomplete data be corrected.
Request that inaccurate or incomplete data be corrected.
Right to Deletion
Request deletion of your account and data, subject to legal retention requirements.
Request deletion of your account and data, subject to legal retention requirements.
Right to Portability
Request your data in a structured, machine-readable format.
Request your data in a structured, machine-readable format.
Right to Restrict
Request that we limit how we process your data in certain circumstances.
Request that we limit how we process your data in certain circumstances.
Right to Object
Object to processing of your data for certain purposes.
Object to processing of your data for certain purposes.
To exercise any of these rights, email us at [email protected]. We will respond within 30 days. Some requests may require identity verification before we can action them.
08
Children's Privacy
Under-18 users
Urentium is a business platform intended for adults. We do not knowingly collect personal data from individuals under the age of 18.
- By creating an account, you confirm that you are at least 18 years of age.
- If we become aware that we have inadvertently collected data from a minor, we will delete it promptly. Please contact us at [email protected] to report such cases.
09
Changes to This Policy
Updates · Notifications
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do:
- We will update the "Last Updated" date at the top of this page.
- Significant changes will be communicated via email to all registered account holders at least 14 days before taking effect.
- Material changes will also be displayed as a prominent notice on your Urentium dashboard upon next login.
- Continued use of the platform after the effective date constitutes acceptance of the revised policy.
Privacy enquiries