Last updated: 10 August 2026
Who we are
Home Hunter Malaysia (“HHM”, “we”, “us”) is operated by Home Hunter Global Group Ltd, a company registered in England and Wales (company number 17387203), registered office International House, 64 Nile Street, London, N1 7SR, United Kingdom. We are the data controller for the personal data described in this policy.
Home Hunter Malaysia is an international property advertising and discovery portal connecting overseas and local buyers with licensed real estate agents, negotiators (REN), and developers operating in Malaysia. We do not provide real estate agency, brokerage, legal, tax, or investment advice, and we are not a party to any property transaction arising from a listing on this site.
What we collect, and why
What we collect depends on how you use the site. We deliberately collect as little as possible.
If you’re searching or browsing listings (no account)
Searching Home Hunter Malaysia does not require an account or any personal information. We collect:
- IP address, and a country-level location derived from it
- Device, browser, and operating system type
- Pages viewed, and the search filters you use (property type, location, price range) — recorded only as anonymised, aggregate tallies (for example, “312 searches this month for 3-bed condos under RM800k in KL”)
- Cookie/analytics identifiers (see Cookies, below)
- Name and email address, but only if you voluntarily provide them — for example, through a contact or enquiry form
This data is used to operate the site, understand aggregate search demand and visitor geography, secure the site against abuse, and monitor performance. Search-filter data cannot be traced back to an individual visitor — we retain filter-combination tallies, not a profile of you.
If you register as an agent or lister
Agents, negotiators, and developers who register to list properties do hold an account with us, and we collect more data as a result:
- Name, firm/agency name, work email and phone number
- REA/REN registration number and related regulatory details
- Billing and account records, and support correspondence
- ID documents and professional credentials, submitted for verification
This is used for subscription/account administration, invoicing, support, and regulatory vetting — cross-checking your REA/REN number against the relevant regulator’s register as part of our agent verification process.
ID documents and credentials are handled separately from the rest of the site. They are stored in a private, access-controlled cloud folder, not in the website’s own media library or database — so a compromise of the website itself would not expose these documents. Once an ID document has been checked and your registration verified, the original upload is deleted; we retain only a verification record (verifier name, date, REA/REN number, and outcome), not the document itself.
Legal basis for processing
| Processing activity | Legal basis (UK GDPR, Art. 6) |
|---|---|
| Operating the site, service improvement, security, performance monitoring | Legitimate interests — Art. 6(1)(f) |
| Non-essential/analytics cookies | Consent — Art. 6(1)(a) |
| Agent account administration, invoicing, support | Performance of a contract — Art. 6(1)(b) |
| Tax and invoicing records | Legal obligation — Art. 6(1)(c) |
| Agent identity/regulatory (REA/REN) verification and fraud prevention | Legitimate interests — Art. 6(1)(f) |
We do not collect any special category data (Art. 9), and we do not use your data for profiling or automated decision-making.
Who we share data with
We share data only where necessary to run the service:
- Our hosting provider, to run the website itself
- Our analytics provider, on an aggregate-reporting basis only
- Payment service providers (e.g. Stripe, Wise), for agent subscription billing once paid tiers are introduced
- Our professional advisers (legal, accounting)
- Regulators and law enforcement, where we’re legally required to
- A successor organisation, in the event of a sale or restructuring of the business
We never sell your data, and we do not share visitor search/browsing data with agents.
How long we keep data
- Analytics and technical logs: up to 26 months
- Country-level location data: up to 12 months
- Enquiry correspondence: 12 months after your last contact with us
- Anonymised, aggregate search data: retained indefinitely (it cannot be linked back to any individual)
- Agent contract and invoicing records: 6 years after the end of the contract (UK tax/company-law requirement)
- Agent support correspondence: 2 years
- Agent ID documents/credentials: deleted once verification is complete; only the verification record (not the document) is retained thereafter
- Cookie consent records: retained for 12 months after withdrawal or expiry
Your rights
Under UK GDPR, you have the right to request access to, correction of, or erasure of your personal data, and to restrict or object to certain processing, or request that your data be provided to you in a portable format. To exercise any of these rights, contact us using the details below — we aim to respond within one month.
If you believe we haven’t handled your data properly, you also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
Cookies
We use two categories of cookies:
- Strictly necessary cookies (always on) — required to make the site work, such as remembering your cookie preference and keeping the site secure. These cannot be switched off.
- Analytics cookies (only with your consent) — help us understand how the site is used, in aggregate, so we can improve it, for example which search criteria are common and which countries visitors are searching from.
We do not use advertising cookies, and we never sell your data. You can change your cookie choice at any time via the cookie settings link in the site footer. Non-essential cookies are only set after you’ve given consent.
International transfers
We aim to keep data within the UK wherever possible. Where a service provider (such as a payment processor) is based outside the UK, we rely on the UK’s adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses.
Contact us
If you have any questions about this policy, or want to exercise any of your rights, email us at info@homehuntermalaysia.com.
This policy is reviewed at least annually, and whenever we make a material change to how we collect or use data.