Privacy Policy

1. Introduction

Sukha Golden respects your privacy and is committed to protecting the personal data of our residents, prospective residents, family members, authorised representatives, website visitors and business contacts.

This Privacy Policy applies to personal data collected through our website, enquiry and booking forms, WhatsApp communications and the provision of senior living and care services.

2. Personal Data We Collect

Enquiry and Booking Data

When you submit an enquiry, request a tour or arrange a visit through our website or other communication channels, we may collect your name, telephone number, email address and any information you provide regarding the prospective resident’s care needs.

Contact Form Data

Information submitted through our contact forms may be sent to our company email account and used to respond to and manage your enquiry.

WhatsApp Communications

When you contact us through WhatsApp, we may collect your telephone number, profile information made available through the platform and the contents of your messages. This information is used to respond to your enquiry, arrange a booking or provide relevant assistance.

Resident and Care Data

For individuals who become residents of Sukha Senior Resort, we may collect additional personal and sensitive personal data that is necessary for the provision of appropriate care and accommodation.

This may include:

• Health and medical information;
• Medication and care requirements;
• Emergency contact details;
• Next-of-kin information;
• Identification and residency documentation; and
• Other information relevant to the resident’s health, safety and well-being.

This information is collected directly from residents or their authorised representatives and is used only for legitimate care, safety, administrative and legal purposes.

Website Usage Data

Our website may use cookies and similar technologies to support essential functionality, manage user sessions, maintain website security and understand how visitors interact with our website.

3. How We Use Personal Data

We may use personal data to:

• Respond to enquiries and process visit or tour bookings;
• Assess the care and accommodation needs of prospective residents;
• Provide senior living, accommodation and care services;
• Communicate with residents, family members and authorised representatives;
• Provide updates regarding care arrangements, events and facility operations;
• Process administrative, billing and payment-related matters;
• Maintain the safety, security and proper administration of our facility;
• Operate, maintain and improve our website and communications systems;
• Investigate incidents, complaints or potential security concerns; and
• Comply with applicable legal, regulatory and record-keeping obligations.

Marketing Communications

Where permitted and with your consent where required, we may send you updates, newsletters, service information or promotional communications.

You may opt out at any time by using the unsubscribe option provided in the communication or by contacting us using the details in Section 11.

4. Disclosure of Personal Data

Personal data is accessible only to authorised Sukha Golden employees and personnel who require the information to perform their duties. This may include enquiry staff, administrative personnel, care staff, management and authorised service providers.

We do not sell, rent or trade personal data to third parties.

We may disclose limited personal data to:

• Service providers that support our operations, including website hosting providers, communications platforms, cloud storage providers, software systems, payment processors and customer relationship management systems;
• Medical or emergency service providers where disclosure is necessary to protect a resident’s health, safety or well-being;
• Professional advisers, including lawyers, accountants, auditors or insurers, where reasonably necessary; and
• Government authorities or regulatory bodies where disclosure is required or permitted by Malaysian law.

Where appropriate, third-party service providers are required to maintain the confidentiality and security of the personal data they process on our behalf.

5. Cross-Border Transfer of Personal Data

Some of our service providers, including cloud storage, email, communications and software providers, may store or process personal data outside Malaysia.

Where a cross-border transfer occurs, we will take reasonable steps to ensure that the transfer complies with applicable requirements under the PDPA. This may include assessing the protection provided by the receiving jurisdiction, obtaining consent where required or implementing appropriate contractual and organisational safeguards.

6. Data Storage and Security

We implement reasonable technical and organisational security measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, disclosure or destruction.

These measures may include:

• Restricting access to authorised personnel;
• Using password-protected systems and accounts;
• Using SSL/HTTPS encryption on our website;
• Maintaining appropriate physical security controls;
• Reviewing access permissions and operational procedures; and
• Securely deleting or disposing of personal data when it is no longer required.

While we take reasonable precautions, no electronic storage or transmission method can be guaranteed to be completely secure.

7. Personal Data Breach Notification

In the event of a personal data breach, we will assess the nature and potential impact of the breach and take appropriate steps to contain and address it.

Where notification is required, we will notify the Personal Data Protection Commissioner and affected individuals in accordance with the applicable requirements and timelines under the PDPA.

8. Retention of Personal Data

We retain personal data only for as long as it is reasonably necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes and maintain appropriate business and care records.

• Enquiry and booking information that does not result in residency will be retained only for as long as reasonably necessary to respond to and manage the enquiry, unless a longer period is required by law or consent has been given for further communication.
• Resident care and administrative records will be retained throughout the period of residency and for any additional period required under applicable Malaysian laws, regulations and record-keeping requirements.

9. Your Rights Under the PDPA

Subject to the PDPA and any applicable legal limitations, you may have the right to:

• Request access to the personal data we hold about you;
• Request the correction of inaccurate, incomplete, misleading or outdated data;
• Request information about how your personal data has been used or disclosed;
• Request a copy or transfer of your personal data in an applicable and commonly used format, where the right to data portability applies;
• Withdraw consent to the processing of your personal data where processing is based on consent, subject to legal and contractual limitations;
• Object to or limit certain direct marketing communications; and
• Submit a complaint regarding the handling of your personal data, including a complaint to the Personal Data Protection Commissioner.

Withdrawing consent may affect our ability to provide certain services, particularly where the information is necessary for resident care, safety, administration or compliance with legal obligations.

To exercise your rights, please contact us using the details in Section 11. We may request additional information to verify your identity before processing your request.

10. Third-Party Websites and Platforms

Our website may contain links to third-party websites and platforms, including Facebook, Instagram, TikTok, YouTube and WhatsApp.

These third parties maintain their own privacy policies and data-processing practices. We are not responsible for the content, security or privacy practices of third-party websites or platforms. We encourage you to review their privacy policies before providing personal data.

11. Contact Us

For questions about this Privacy Policy, requests concerning your personal data or complaints about how your personal data has been handled, please contact us:

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, operational practices or legal requirements.

Any updated version will be published on this page together with its revised effective date. We encourage you to review this Privacy Policy periodically.

Last updated: July 2026