Agensi Pekerjaan Jaya Persona SDN. BHD. ("Jaya Persona", "we", "us", "our") is committed to protecting the privacy and personal data of our clients, domestic helpers, and website visitors. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights as a data subject under Malaysian law.
1. Our Commitment to PDPA
Jaya Persona strictly abides by the Personal Data Protection Act 2010 (PDPA) — the primary legislation governing the processing of personal data in commercial transactions in Malaysia. We treat compliance with the PDPA not as a legal minimum but as a core part of how we operate.
The PDPA establishes seven data protection principles that every data user in Malaysia must observe. We adhere to all seven:
1. General Principle
We process personal data only with your consent, or on another lawful basis recognised by the PDPA. We do not process data in a manner that causes harm or is contrary to law.
2. Notice & Choice Principle
We inform you of the purposes for which your personal data is collected and give you the choice to limit how it is used, including for direct marketing.
3. Disclosure Principle
We do not disclose your personal data to third parties without your consent except as permitted by the PDPA or required by law.
4. Security Principle
We take reasonable steps — including physical, administrative, and technical safeguards — to protect your personal data from loss, misuse, modification, unauthorised access, or disclosure.
5. Retention Principle
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Data is securely destroyed or anonymised when no longer needed.
6. Data Integrity Principle
We take reasonable steps to ensure that the personal data we hold is accurate, complete, not misleading, and kept up to date.
7. Access Principle
You have the right to access and correct your personal data held by us. Requests are handled promptly and free of charge unless otherwise permitted by the PDPA.
Our PDPA compliance is overseen by our designated Data Protection Officer. Any concern relating to personal data may be directed to us via the contact details in Section 12.
2. Personal Data We Collect
From Employers (Clients)
- Full name and NRIC / passport number
- Residential address and contact details (phone, email)
- Household composition and family background
- Preferences for domestic helper placement (language, nationality, experience)
- Correspondence and service request records
- Payment and billing information
From Domestic Helpers
- Full name, nationality, date of birth, and passport details
- Photograph and biometric data as required by immigration authorities
- Work permit (PLKS) and immigration documentation
- Employment history, skills, and language proficiency
- Medical records, FOMEMA results, and health declarations
- Next-of-kin and emergency contact details
- SOCSO / PERKESO registration details
From Website Visitors & Enquiries
- Name and contact details submitted via enquiry or contact forms
- IP address, browser type, and device information (collected automatically)
- Pages visited and duration of visit (analytics data)
- Communication history via WhatsApp or email
3. Purpose of Collection
We collect and process personal data only for specific, legitimate purposes directly related to our business as a licensed employment agency. These include:
- Processing and facilitating domestic helper placement requests
- Conducting background screening, reference checks, and FOMEMA medical coordination
- Preparing and managing employment contracts and documentation
- Applying for, renewing, or cancelling work permits (PLKS) with the Immigration Department
- Registering domestic helpers and employers with SOCSO / PERKESO
- Maintaining records as required by JTKSM licensing conditions
- Communicating with you about your enquiry or service arrangement
- Sending service-related updates, reminders, and notifications
- Improving our website and services through anonymised analytics
- Complying with legal obligations, regulatory requests, or court orders
We will not use your personal data for any purpose beyond what is stated here without first obtaining your explicit consent.
4. Consent & Lawful Basis
We collect personal data on the following lawful bases under the PDPA:
- Your consent — given verbally, in writing, or through action (e.g., submitting an enquiry form or engaging our services)
- Contractual necessity — processing required to fulfil the service agreement between Jaya Persona and you
- Legal obligation — processing required to comply with JTKSM licensing conditions, immigration law, SOCSO requirements, or other applicable regulations
You may withdraw consent at any time by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, nor does it affect processing carried out on a lawful basis other than consent.
5. Disclosure to Third Parties
Jaya Persona does not sell, rent, or trade your personal data. We may share your personal data only in the following circumstances:
- Government authorities — Immigration Department of Malaysia (for work permit applications), SOCSO / PERKESO, JTKSM, the Philippines Embassy, or the Indonesian Embassy, as required by law
- FOMEMA-accredited clinics — for mandatory medical screening of domestic helpers
- Sending countries' recruitment agents — to coordinate the deployment of domestic helpers from Indonesia or the Philippines, under confidentiality obligations
- Insurance providers — for the arrangement of mandatory insurance coverage
- Legal and professional advisers — where necessary to obtain legal advice or in connection with legal proceedings
- Law enforcement or courts — where required by a lawful order, warrant, or legal obligation
All third parties who receive personal data from us are bound by confidentiality obligations and are not permitted to use the data for any purpose other than the one for which it was shared.
6. Data Retention
We retain personal data for no longer than is necessary for the purposes for which it was collected or as required by law:
- Client and placement records — retained for a minimum of 7 years following the end of the relevant employment contract, in accordance with JTKSM licensing conditions and the Limitation Act 1953
- Domestic helper documentation — retained for the duration of the contract plus 5 years, or as required by the Immigration Department
- Enquiry and contact form data — retained for up to 2 years from the date of last contact
- Website analytics data — anonymised and aggregated; retained for up to 26 months
Upon expiry of the applicable retention period, personal data is securely deleted, destroyed, or permanently anonymised.
7. Security Measures
We implement appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss, destruction, alteration, or disclosure. These include:
- Access controls — only authorised personnel may access personal data on a need-to-know basis
- Password-protected digital systems and encrypted storage for sensitive documents
- Physical security of paper records (locked filing cabinets, restricted office access)
- Staff training on data protection obligations and confidentiality
- Prompt incident response — in the event of a data breach, we will notify affected individuals and the relevant authorities in accordance with applicable law
While we take every reasonable precaution, no system is completely secure. If you believe your personal data has been compromised, please contact us immediately.
8. Your Rights Under PDPA
As a data subject under the PDPA, you have the following rights:
Right of Access
Request a copy of the personal data we hold about you.
Right of Correction
Request that inaccurate or incomplete personal data be corrected or updated.
Right to Withdraw Consent
Withdraw consent for processing at any time, subject to legal or contractual limitations.
Right to Limit Processing
Request that we stop using your data for direct marketing or non-essential purposes.
Right to Lodge a Complaint
File a complaint with the Department of Personal Data Protection (JPDP) if you believe your rights have been violated.
Right to Information
Be informed of the purposes for which your data is collected and who it may be disclosed to.
To exercise any of these rights, please contact us using the details in Section 12. We will respond within 21 days of receiving a valid request, in line with the PDPA's prescribed timeframe.
9. Cookies & Website Data
Our website (jayapersona.my) may use cookies — small text files stored on your device — to improve your browsing experience. Cookies we may use include:
- Essential cookies — required for basic site functionality
- Analytics cookies — help us understand how visitors use our site (data is anonymised and aggregated)
You may disable cookies through your browser settings at any time. Disabling essential cookies may affect site functionality, but will not prevent you from accessing content.
We do not use advertising or tracking cookies, and we do not sell analytics data to third parties.
10. Children's Privacy
Our services are directed at adults (persons aged 18 and above). We do not knowingly collect personal data from children under the age of 18 without verifiable parental or guardian consent. If you believe we have inadvertently collected personal data from a minor, please contact us immediately and we will take steps to delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify existing clients directly.
We encourage you to review this policy periodically. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.
12. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us:
Wisma Khoo Boon Kim,
Jalan Pos Baru,
41150 Klang, Selangor, Malaysia
Sat · 9 AM – 1 PM
If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP), Ministry of Communications and Digital, Malaysia.