Legal
Privacy Policy
Last updated: 10 July 2025 · Bequestly, 29 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia
Bequestly is committed to handling personal data with care and transparency. This policy explains what data we collect, how we use it, and what rights you hold in relation to it. It applies to data collected through our website and in the course of our records coordination engagements.
If you have any questions about this policy, please write to [email protected]. We will respond within five working days.
1. Who we are
The data controller is Bequestly, operating from 29 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia. We provide estate and heirloom records coordination services — document cataloguing, object description, archive organisation and related administrative work. We are not solicitors, valuers or financial advisers, and we do not process personal data for any regulated advisory purpose.
2. What data we collect and why
We collect personal data only for the purposes listed below, and only to the extent necessary for each purpose.
2.1 Enquiry and contact forms
When you write to us through our website, we collect your name, email address, and any information you choose to include in your message. We use this data to respond to your enquiry and, if an engagement proceeds, to administer that engagement. Legal basis: legitimate interests (responding to a direct contact request).
2.2 Engagement data
In the course of an engagement, we may hold names, contact details and scheduling information for the family members we work with. We do not retain copies of the family's documents, photographs or catalogue entries after the engagement is delivered. Legal basis: performance of a contract.
2.3 Website analytics
We use basic analytics to understand how visitors use our website. This may involve the use of cookies. Please see our Cookie Policy for details. Legal basis: consent (obtained via the cookie banner on our homepage).
3. How we use and store your data
We use personal data only for the purpose for which it was collected. We do not sell, rent or share personal data with third parties except as follows:
- Service providers who assist with website hosting and basic analytics, bound by data processing agreements
- Where we are required by Malaysian law to disclose information
Enquiry data is retained for twelve months from the date of last contact. Engagement-related contact data is retained for two years from the close of the engagement, after which it is deleted.
We do not retain any family archive materials — documents, photographs or catalogue entries — after delivery to the family. No family records are held on our systems after an engagement closes.
4. Data security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss or disclosure. Access to personal data is restricted to the coordinators directly involved in your engagement. Data in transit is encrypted.
In the event of a data breach that is likely to result in risk to individuals, we will notify affected parties and the relevant authority in accordance with Malaysian data protection law (Personal Data Protection Act 2010).
5. Cookies
Our website uses cookies for basic functionality and analytics. You can manage your cookie preferences at any time through our Cookie Policy page, which includes toggle controls for each cookie category.
6. Your rights
Under the Malaysian Personal Data Protection Act 2010, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Withdraw consent where processing is based on consent
- Request that we stop processing data for direct marketing purposes
- Lodge a complaint with the Department of Personal Data Protection (JPDP) in Malaysia
To exercise any of these rights, write to [email protected]. We will respond within ten working days.
7. Third-party links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal data.
8. Children
Our services are directed at adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. When we do, we will revise the date at the top of this page. Material changes will be communicated to enquirers and clients by email where we hold a contact address.
Your continued use of our website after a change is published constitutes acceptance of the revised policy.
10. Contact
For any questions about this policy or your personal data, please write to:
Bequestly29 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia
Email: [email protected]