Privacy Policy

This notice explains what personal data we collect when you use this website or contact us, why we collect it, who we may pass it to, and what you can ask us to do with it. It is issued under the Notice and Choice Principle of Malaysia's Personal Data Protection Act 2010 (Act 709).

In this notice, “we” and “us” mean ANN ONG ADVISORY SDN. BHD. (202501040411 (1641820-D)), operating as Ann Properties — the property consultancy and MM2H advisory practice of Ann Ong (小瑜). We are the data controller for the personal data described below.

What we collect

We process personal data about you. In practice that is only what we need to answer your enquiry:

• Your name — so we know who we are speaking to.
• Your phone number — the number you contact us from, or one you give us.
• Your email address, where you provide one.
• What you are looking for — optional details such as the property or project you are interested in, your budget, your purchase timeline, your preferred layout or number of bedrooms, and any message you write to us.
• Your review, if you choose to leave one — including the name you submit it under, which is published on this website next to the review for anyone to read.

We do not ask for sensitive personal data through this website — no identity card or passport numbers, health information, or bank and income documents. If any of that becomes necessary later in a transaction, it is handled separately and only with your knowledge. This website is not directed at children under 18.

Where it comes from

• The enquiry, contact and review forms on this website.
• WhatsApp, when you tap a WhatsApp button here. Your conversation then takes place on WhatsApp and is also subject to Meta's own privacy policy.
• Lead-generation forms on Facebook and Instagram, if you submit one of our ads. Those forms are hosted by Meta, which passes us what you filled in.
• Phone, email or messaging apps, if you contact us directly.
• Cookies and similar technologies used on this site — see below.

Why we collect it

• To reply to your enquiry and answer your questions.
• To send you floor plans, price lists, project details and availability.
• To arrange viewings and follow up on properties you asked about.
• To provide property consultancy and MM2H advisory services.
• To publish your review, if you submit one.
• To follow up with you about properties and launches that match what you asked for — this is direct marketing, and you can stop it at any time (see Your rights).
• To keep records of our dealings with you and to meet legal and regulatory obligations that apply to licensed real estate practice in Malaysia.

Is giving us your data compulsory?

No — it is entirely voluntary. You are never obliged to fill in a form on this website. But if you do not give us at least a name and a way to reach you, we will not be able to respond to your enquiry, send you materials, or arrange a viewing. The optional details (budget, timeline, preferred layout) only help us send you something relevant; leaving them blank does not stop us replying.

Who we may share it with

We never sell your personal data. We may disclose it to the following classes of third party, and only where it is needed to act on your enquiry:

• Property developers and their appointed sales agencies, where you asked about a specific development and they need your details to register your interest, confirm availability or issue documents.
• Co-agency, co-broke and joint-venture partners, where a property is handled together with another licensed agency or agent.
• The real estate agency we practise under, as required for licensed real estate work in Malaysia.
• Professional advisers you may need in a transaction — such as bankers or mortgage referral partners, solicitors and valuers — where you ask us to introduce you or where it is necessary to progress a purchase.
• Service providers that run our systems — our enquiry records are stored with Supabase, this website is hosted by Vercel, and we use Google Analytics to understand how the site is used. They process data on our behalf and are not permitted to use it for their own purposes.
• Regulators, authorities and our professional advisers, where we are required or permitted by Malaysian law to disclose.

Transfers outside Malaysia

Some of the services above store or process data on servers outside Malaysia — in particular Supabase (our enquiry records), Vercel (website hosting) and Google (analytics, maps and translation). Your personal data is therefore transferred out of Malaysia.

Before using such a provider we satisfy ourselves that your data will receive protection at a level comparable to that required by the PDPA, and we place contractual obligations on them to keep it confidential and use it only for the purposes we set.

How long we keep it

We keep your enquiry while we are actively helping you and for a reasonable period afterwards, in case you come back to us or a transaction needs to be evidenced. We do not keep personal data for longer than is necessary for the purpose it was collected, and we take reasonable steps to destroy or permanently delete it once it is no longer needed.

If you ask us to delete your data, we will do so — unless we are required to keep part of it to meet a legal or regulatory obligation, in which case we will tell you what we are keeping and why.

Your rights

Under the PDPA you may ask us to:

• Give you access to the personal data we hold about you.
• Correct it if it is inaccurate, incomplete or out of date.
• Stop sending you marketing. You can tell us at any time to stop contacting you about properties, launches or promotions, and we will stop.
• Withdraw your consent to us processing your data. We will then stop, though it may mean we can no longer help with your enquiry — we will tell you if that is the case.
• Limit how we use it — for example, asking us not to pass your details to a developer or co-agent.
• Transfer your data to another data controller of your choice, where that is technically feasible and the formats are compatible.
• Stop processing that causes you damage or distress.
• Delete your data when it is no longer needed.

Exercising any of these is free and will not affect how we treat you. We aim to respond to access and correction requests within 21 days, as the PDPA requires.

How to reach us

To make any of the requests above, or to ask a question or make a complaint about how we handle your data, contact us and tell us what you would like us to do:

• WhatsApp: +60 10-588 1288
• Email: ann.ong1989@gmail.com
• Attention: Ann Ong, Estate Agent
• Office: 2-7 VIDA Bukit Ceylon, Jalan Ceylon, Bukit Ceylon, 50200 Kuala Lumpur

We may need to confirm your identity before acting on a request, so that we do not release your data to someone else.

Cookies, analytics and tracking

This website uses Google Analytics 4 to understand how visitors find and use it — which pages are opened, roughly where visitors are, and what device they use. Google Analytics sets cookies in your browser and receives your IP address. We use it to improve the site, not to identify you personally.

Some pages embed Google Maps to show our office, and the language switcher loads Google Translate when you use it — both are provided by Google, may set their own cookies, and will see your IP address. The site also stores a small marker in your browser so that one visit is not counted repeatedly in our visitor total; that counter is anonymous and is not linked to you.

We do not currently run a Facebook or Meta advertising pixel on this website. If we add one, we will update this notice and say so here. Meta lead-generation forms on Facebook and Instagram are a separate matter — those are hosted by Meta and are covered above.

You can block or delete cookies in your browser settings. The site will still work, though some conveniences may not.

Keeping your data safe

Enquiry records are held in an access-controlled system that only Ann and authorised staff can open, reached over encrypted connections. This website is served over HTTPS. We take reasonable practical steps to protect personal data from loss, misuse and unauthorised access, and we require the providers who process data for us to do the same. No system is perfectly secure, but if a breach occurs we will act on it and notify the authorities and affected individuals where the law requires.

Changes to this notice

If we change how we handle personal data we will update this page and change the dates below. Please check back from time to time.

Effective 11 August 2026 · Last reviewed 11 August 2026