Privacy Policy

This Privacy Policy explains how EDEN CARRIER SDN. BHD. ("HEYA部屋", "we", "us", or "our") collects, uses, discloses, and protects personal data through the HEYA部屋 property management portal (the "Portal"), in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. The Portal serves both tenants renting a room we manage and property owners whose unit(s) we manage on their behalf; this Policy applies to both, and specifies where a section relates to only one.

EDEN CARRIER SDN. BHD. (SSM Registration No. 1367200-A) of C-03-08, i-Tech Tower @ Cyberjaya, Jalan Impact, 63000 Cyberjaya, Selangor is the data controller responsible for your personal data collected through the Portal.

We collect the following categories of personal data:

• Identity data: full name, IC number, and a photo/scan of your identity card (tenants), or company/individual name and SSM or IC number (property owners);
• Contact data: email address, phone number, and, for property owners, office address;
• Tenancy data: assigned room, monthly rental amount, tenancy agreement, house rules acknowledgement, and move-in form;
• Payment & bank data: rental and AC top-up payment records, invoice/receipt history, and payment status; for property owners, bank account details we hold for invoicing and letterhead purposes. Card and online banking credentials are entered directly with our payment gateway, Billplz, and are never received or stored by us;
• Utility data: AC smart meter credit balance and usage, via our smart meter integration provider, Tuya;
• Maintenance data: maintenance request descriptions, status, and any photos you submit;
• Unit ownership & performance data (property owners only): which unit(s) are assigned to you, and figures we calculate for those units — rental revenue, recorded expenses, management fee rate, renovation cost, and resulting net profit/return-on-investment; and
• Account & usage data: login sessions and actions you take within the Portal, used for security and account administration.

We use your personal data to:

• Create and administer your account, including admin review, room assignment (tenants), or linking your account to your unit(s) (property owners);
• Process rental and AC top-up payments and generate invoices and official receipts;
• Calculate and display unit performance figures, and generate profit & loss statements, for property owners;
• Send payment reminders, payment confirmations, maintenance updates, and announcements;
• Manage tenancy documents and respond to maintenance requests;
• Maintain the security of the Portal and investigate suspected misuse; and
• Comply with our legal, accounting, and tax obligations.

We process your personal data because it is necessary to perform our tenancy or property management arrangement with you, to comply with our legal obligations (including accounting and tax record-keeping), and, where applicable, based on your consent (for example, when you voluntarily upload your IC or submit a maintenance request).

We do not sell your personal data. We share personal data only with service providers who process it on our behalf, and only to the extent necessary for them to provide their service to us:

• Billplz — to process rental and AC top-up payments;
• Tuya — to manage your unit's AC smart meter credit;
• Our email delivery provider — to send payment reminders, receipts, and notifications;
• Our cloud hosting, database, and storage providers — to securely store and run the Portal; and
• Our own internal administration and notification tools, used only by our staff to track and respond to maintenance requests and payment activity in a timely manner.

We may also disclose personal data where required by law or to protect our legal rights.

The Portal's hosting, database, and storage infrastructure may process and store data on servers located outside Malaysia. Where this occurs, we rely on providers that maintain appropriate technical and organizational safeguards to protect your data.

We apply access controls so that your tenancy, ownership, payment, and document data is only visible to you and to administrators or sub-administrators who have been granted the relevant permission — a property owner's dashboard, for example, only ever shows the unit(s) assigned to that owner, never any other unit or tenant's data. Documents such as your IC, tenancy agreement, maintenance photos, invoices, receipts, and profit & loss statements are stored in access-restricted storage, accessible only to the account they belong to and to authorised staff. Certain submitted documents are locked from further changes unless an administrator explicitly reopens them for you.

We retain your personal data for as long as your tenant or property owner account is active, and afterwards for as long as necessary to fulfil the purposes described in this Policy, including to satisfy accounting, tax, and other legal record-keeping requirements (generally up to seven (7) years from the end of your tenancy or our management of your unit, for financial records, unless a longer period is required by law).

Under the PDPA, you may request to:

• Access the personal data we hold about you;
• Correct any inaccurate or incomplete personal data;
• Withdraw consent to processing that is based on consent (this may affect our ability to provide certain features); and
• Limit or object to certain processing of your personal data.

To exercise any of these rights, contact us at heya.propertymanagement@gmail.com. We may need to verify your identity before acting on your request.

The Portal uses essential session/authentication data (via cookies or local storage) solely to keep you securely signed in. We do not use third-party advertising or tracking cookies.

The Portal is intended for tenants and property owners aged 18 and above and is not directed at children. We do not knowingly collect personal data from anyone under 18.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

EDEN CARRIER SDN. BHD. (SSM: 1367200-A)
C-03-08, i-Tech Tower @ Cyberjaya, Jalan Impact, 63000 Cyberjaya, Selangor
Email: heya.propertymanagement@gmail.com
Phone: +60164498918