CoreSync

Privacy Policy

1. Data Collection

We collect information necessary to provide our business suite services, including:

  • Identity Data: Name, NRIC/Passport numbers (for tenancy/clinic records), and contact details.
  • Transaction Data: Payment history via FPX, direct debit records, and commission payouts.
  • Business Data: Property listings, patient medical history, and staff performance metrics.

 

2. Use of Data

CoreSync processes your data to:

  • Facilitate automated workflows (e.g., sending rent reminders or appointment alerts).
  • Process payments and generate financial reports.
  • Comply with legal obligations (e.g., LHDN e-Stamping or tax reporting).

 

3. Data Security

We implement enterprise-grade security measures:

  • Encryption: All sensitive data is encrypted at rest and in transit.
  • Role-Based Access Control (RBAC): You decide which staff members can see specific data.
  • Backups: Regular automated backups are performed to prevent data loss.

 

4. Third-Party Sharing

We do not sell your data. We only share information with third-party providers essential to the service, such as:

  • Payment Gateways: For processing subscription and tenant fees.
  • Cloud Hosting: Secure servers where the platform is hosted.
  • Regulatory Bodies: When required for legal compliance in Malaysia.

 

5. PDPA Compliance

In accordance with the Malaysian Personal Data Protection Act 2010 (PDPA), users have the right to access, correct, or request the deletion of their personal data stored within our systems.

6. Cookies

We use cookies to enhance user experience, remember login sessions, and analyze website traffic to improve our platform’s performance.