Privacy Policy

1. Who we are

Agensi Pekerjaan Sumber Holistik Sdn. Bhd.(“Sumber Holistik”, “we”, “us”) is a licensed employment agency registered in Malaysia (Company Registration No. 1315614-D, Licence JTKSM 728B), placing trained domestic helpers with families across Malaysia.

This policy explains what personal data we collect, why we collect it, and the choices you have. It is written to comply with Malaysia’s Personal Data Protection Act 2010 (PDPA).

2. What personal data we collect

We collect only what we need to respond to you and, if you engage us, to carry out a placement:

• Contact details: your name, email address, phone or WhatsApp number.
• Enquiry details: what you tell us about the help you are looking for, such as household size or the type of care required.
• Correspondence: the messages you exchange with us, retained so we have an accurate record of your case.

We do not collect payment card details through this website, and we do not use advertising or tracking cookies.

Supplying this information is voluntary. You are under no obligation to give it to us. But without your contact details, and enough detail about what you are looking for, we will not be able to answer your enquiry or carry out a placement for you.

3. How we obtain your email address

4. How we use your email address

When we email you, it is transactional, one-to-one email only. We use your address to:

• Reply to the enquiry you sent us;
• Send updates on an active placement: documentation status, scheduling, and arrival arrangements;
• Answer questions and send information you have specifically asked for.

We do not send marketing campaigns, newsletters, promotional blasts or bulk mail, and we do not add you to any mailing list.

5. Your choices about contact

We only email you as part of correspondence you are already having with us, one message at a time, about your own enquiry or case. We do not run marketing campaigns or mailing lists, so there is nothing to unsubscribe from.

If you would prefer that we stop contacting you, reply to any message from us or write to info@sumberholistik.com and let us know, and we will stop. This will not affect any legal obligation we have to retain records of a completed placement.

6. Bounces and spam complaints

Our mail system automatically detects when a message cannot be delivered or when a recipient marks it as spam. Every such event is recorded automatically, and addresses that permanently reject mail, or that are behind a spam complaint, are added to the suppression list held by our email provider (Amazon Web Services), so that no further mail is sent to them. No manual step is involved. A temporary failure, such as a full mailbox, is recorded but does not cause suppression, so that a working address is not lost because of a short-lived problem.

7. Who we share data with

We do not sell or rent your personal data. We share it only where it is necessary to deliver the service you asked for, or where the law requires it:

• Malaysian government departments and agencies involved in processing domestic helper permits and documentation;
• Our infrastructure providers, who process data on our instructions: our website and email systems are hosted on Amazon Web Services in the Asia Pacific (Singapore) region. This means your data is stored outside Malaysia. It is used there only for the purposes described in this policy and remains subject to the protections set out here;
• Where disclosure is required by law or a court order.

8. How long we keep it

Received mail is held in two forms: a working copy shown in our mail system, and a raw backup copy retained by our email provider for recovery. The raw backup copies are automatically deleted after 24 months.

Working copies of enquiries that do not lead to a placement are deleted once they are no longer needed, and we do not keep them beyond what is necessary for the enquiry. Records relating to a completed placement are kept for as long as Malaysian employment agency regulations require us to hold them, and are then deleted.

9. How we protect it

Access to our mail and case systems is restricted to authorised staff and protected by individual accounts, encrypted connections, and session-based authentication. Data is encrypted in transit and at rest.

10. Your rights

Under the PDPA you may request access to the personal data we hold about you, ask us to correct it if it is inaccurate, withdraw your consent to us processing it, or ask us to delete it where we are not required to retain it. Write to us at the address below and we will respond within 21 days.

11. Contact us

Write to us with any question, request or complaint about how we handle your personal data. We are responsible, as data controller, for the personal data described in this policy.