PRIVACY POLICY

1. INTRODUCTION

1.1 About This Policy

This Privacy Policy ("Policy") explains how MyExpatGo ("we", "us", or "our") collects, uses, shares, and protects personal information obtained from individuals ("you") who use our website at [website address] (the "Website") and our relocation services (collectively, the "Services").

1.2 Data Controller

For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, MyExpatGo is the data controller responsible for your personal data. Our contact details are provided in Section 14 of this Policy.

1.3 Your Agreement

By accessing or using our Services, you agree to the collection and use of your information in accordance with this Policy. If you do not agree with any part of this Policy, please do not use our Services.

2. PERSONAL DATA WE COLLECT

2.1 Information You Provide to Us

We collect personal data that you voluntarily provide to us when using our Services, including:

  • Identity and Contact Information: Name, email address, postal address, phone number, nationality, passport information, date of birth, gender
  • Family Information: Details about family members if included in your relocation, such as names, ages, educational requirements
  • Employment Information: Your occupation, employer details, employment history relevant to visa applications
  • Financial Information: Payment details, banking information for transactions, financial documentation required for property rentals or purchases
  • Housing Preferences: Details about your accommodation requirements, budget, preferred locations
  • Educational Information: Information about educational needs and preferences if you have children
  • Immigration Status: Visa information, residency status, work permits
  • Service Preferences: Information about your specific relocation requirements and preferences
  • Communications: Records of your interactions with us, including emails, calls, messages, and feedback
  • Account Information: Username, password, and other details used to access our platforms

2.2 Information Collected Automatically

When you use our Website, we automatically collect certain information, including:

  • Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
  • Usage Data: Information about how you use our Website, including page views, time spent on pages, navigation paths, search queries
  • Cookie Data: Information stored in cookies placed on your device (see our Cookie Policy section for details)

2.3 Information from Third Parties

We may receive personal data about you from various third parties, including:

  • Business partners who provide services related to your relocation
  • Service providers who help us verify information you provide
  • Public databases, such as property registries or company directories
  • Social media platforms, if you choose to link your account or interact with our content
  • References you have listed when applying for our services

2.4 Special Categories of Personal Data

In providing our relocation services, we may sometimes need to collect sensitive personal data (also known as special categories of personal data), such as:

  • Health information relevant to your accommodation needs
  • Religious preferences that may impact housing location or school selection
  • Biometric data that might be required for certain visa applications

We only collect this information when it is necessary for providing our services, with your explicit consent, or as required by law.

3. HOW WE USE YOUR PERSONAL DATA

3.1 Purposes for Processing

We use your personal data for the following purposes:

To Provide Our Services

  • Processing your relocation requests and delivering our services
  • Managing your account and relationship with us
  • Facilitating property searches based on your requirements
  • Coordinating with third-party service providers on your behalf
  • Assisting with visa and immigration processes
  • Helping with school placement and educational requirements
  • Providing orientation and settling-in services
  • Responding to your inquiries and providing customer support

For Administrative and Legal Purposes

  • Processing payments and maintaining financial records
  • Verifying your identity and the information you provide
  • Complying with legal obligations and regulatory requirements
  • Resolving disputes and enforcing our agreements
  • Preventing fraud and protecting our legitimate business interests

For Marketing and Improvement of Our Services

  • Sending you information about our services, if you have consented to receive it
  • Conducting market research and gathering feedback to improve our services
  • Analyzing usage patterns to enhance user experience
  • Developing new products and services
  • Measuring the effectiveness of our marketing campaigns

3.2 Legal Bases for Processing

Under GDPR, we rely on the following legal bases to process your personal data:

  • Contractual Necessity: Processing necessary for the performance of our contract with you to provide relocation services
  • Legitimate Interests: Processing necessary for our legitimate interests, such as managing our business, improving our services, and marketing, provided these interests are not overridden by your rights
  • Legal Obligation: Processing necessary for compliance with our legal obligations
  • Consent: Processing based on your specific consent, particularly for marketing communications and where sensitive data is involved

Where we rely on consent as the legal basis, you have the right to withdraw your consent at any time.

4. COOKIES AND TRACKING TECHNOLOGIES

4.1 What Are Cookies

Cookies are small text files that are placed on your device when you visit our Website. They allow us to recognize your device and store certain information about your preferences or past actions.

4.2 Types of Cookies We Use

We use the following types of cookies:

  • Essential Cookies: Necessary for the Website to function properly
  • Preference Cookies: Enable the Website to remember your preferences and choices
  • Analytics Cookies: Help us understand how visitors interact with our Website
  • Marketing Cookies: Used to track visitors across websites to enable targeted advertising

4.3 Your Cookie Choices

You can manage your cookie preferences through your browser settings, which allow you to refuse some or all cookies. However, if you disable certain cookies, some parts of our Website may not function properly.

When you first visit our Website, we will ask for your consent to non-essential cookies through our cookie banner.

4.4 Other Tracking Technologies

In addition to cookies, we may use web beacons, pixel tags, and other tracking technologies to gather information about your browsing activities.

5. DATA SHARING AND DISCLOSURES

5.1 Third-Party Service Providers

We may share your personal data with trusted third-party service providers who assist us in delivering our services, including:

  • Real estate agents and property managers
  • Immigration and visa consultants
  • Moving and transportation companies
  • Schools and educational institutions
  • Financial institutions for processing payments
  • IT and system administration providers
  • Professional advisers, including lawyers, accountants, and insurers

These service providers are contractually bound to protect your data and can only use it for the specific purposes we authorize.

5.2 Business Partners

We may share relevant personal data with business partners who provide complementary services as part of your relocation package, such as:

  • Local concierge services
  • Cultural training providers
  • Language schools
  • Automobile purchasing or leasing agents

5.3 Legal Requirements

We may disclose your personal data when required by law, regulation, or legal process, including:

  • In response to a court order, subpoena, or similar legal request
  • To comply with legal obligations in the countries where we operate
  • To protect our rights, privacy, safety, or property
  • To investigate fraud or enforce our Terms and Conditions

5.4 Business Transfers

If we are involved in a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Website of any change in ownership or use of your personal data.

5.5 With Your Consent

We may share your personal data with other third parties when we have your consent to do so.

6. INTERNATIONAL DATA TRANSFERS

6.1 Cross-Border Transfers

As a relocation service operating in Southeast Asia, we may transfer your personal data across international borders, particularly between Malaysia, Thailand, Singapore, and your country of origin or destination.

6.2 Safeguards for International Transfers

When we transfer personal data from the European Economic Area (EEA) to countries that have not received an adequacy decision from the European Commission, we implement appropriate safeguards, which may include:

  • Standard Contractual Clauses approved by the European Commission
  • Binding Corporate Rules for transfers within a corporate group
  • Derogations for specific situations, such as when the transfer is necessary for the performance of a contract

6.3 Your Rights Regarding International Transfers

You have the right to obtain information about the safeguards we use for international transfers. To request this information, please contact us using the details provided in Section 14.

7. DATA RETENTION

7.1 Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • The duration of our contractual relationship with you
  • The period required to complete your relocation services
  • As necessary to comply with legal obligations, resolve disputes, and enforce agreements

Specifically, we generally keep:

  • Account information for as long as your account is active, plus a reasonable period afterwards
  • Service data for 7 years after service completion (to comply with tax and business record requirements)
  • Marketing preferences until you opt-out or withdraw consent
  • Website usage data for 26 months

7.2 Criteria for Determining Retention

We consider the following criteria when determining how long to retain data:

  • The amount, nature, and sensitivity of the personal data
  • The potential risk of harm from unauthorized use or disclosure
  • The purposes for which we process the data and whether we can achieve those purposes through other means
  • Applicable legal, regulatory, or contractual requirements

7.3 Data Deletion

When personal data is no longer needed, we securely delete or anonymize it so that it can no longer be associated with you.

8. DATA SECURITY

8.1 Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

  • Encryption of sensitive personal data and financial information
  • Secure storage on protected servers
  • Regular security assessments and vulnerability testing
  • Access controls and authentication requirements for staff
  • Staff training on data protection and security practices
  • Physical security measures for our offices and data centers

8.2 Third-Party Security

We require all third parties who process personal data on our behalf to respect the security of your personal data and to treat it in accordance with applicable laws and our policies.

8.3 Data Breach Procedures

In the event of a personal data breach, we will notify affected individuals and relevant supervisory authorities as required by applicable law, including GDPR.

9. YOUR DATA PROTECTION RIGHTS

Under GDPR and other applicable data protection laws, you have the following rights:

9.1 Right to Access

You have the right to request a copy of the personal data we hold about you and information about how we process it.

9.2 Right to Rectification

You have the right to request correction of any inaccurate personal data we hold about you, and to complete any incomplete personal data.

9.3 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

9.4 Right to Restrict Processing

You have the right to request restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

9.6 Right to Object

You have the right to object to processing of your personal data in certain circumstances, including processing based on legitimate interests and direct marketing.

9.7 Right to Withdraw Consent

Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time.

9.8 Rights Related to Automated Decision Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

9.9 How to Exercise Your Rights

To exercise any of these rights, please contact us using the details provided in Section 14. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

10. CHILDREN'S PRIVACY

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we will take steps to remove that information from our servers.

11. LINKS TO OTHER WEBSITES

Our Website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

12. UPDATES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We will also notify you via email and/or a prominent notice on our Website before the changes become effective. We encourage you to review this Privacy Policy periodically for any changes.

13. DATA PROTECTION OFFICER

While not legally required under current Malaysian law, we have voluntarily appointed a Data Protection Officer (DPO) to oversee our data protection strategy and ensure compliance with applicable data protection laws, including GDPR. You can contact our DPO at privacy@myexpatgo.com

14. CONTACT US

If you have any questions about this Privacy Policy, your personal data, or your rights, please contact us:

If you are in the European Union, you also have the right to make a complaint at any time to your local supervisory authority for data protection issues.

15. JURISDICTION-SPECIFIC PROVISIONS

15.1 European Union Residents

If you are located in the European Union, the following additional information applies:

  • The data controller is MyExpatGo, located in Malaysia
  • You have the right to lodge a complaint with your local data protection authority
  • International transfers of your personal data are protected by appropriate safeguards as described in Section 6

15.2 California Residents

While we primarily operate in Southeast Asia, if you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). Please contact us for more information about these rights.

15.3 Other Jurisdictions

As we operate across multiple jurisdictions, additional privacy rights may apply based on your location. We are committed to complying with all applicable data protection laws in the countries where we operate.

Last Updated: May 2025

‍