Privacy Policy
What personal data we collect, why we collect it, and the rights you have over it under the PDPA.
Last updated: 27 July 2026 · SmartStays, operated by EMBUN DIGITAL SOLUTIONS (SSM 003541782-V)
Who we are
SmartStays, operated by EMBUN DIGITAL SOLUTIONS (SSM 003541782-V) sells and installs smart home hardware for customers in Malaysia. For the purposes of the Personal Data Protection Act 2010 (“PDPA”), EMBUN DIGITAL SOLUTIONS is the data user responsible for personal data collected through this website and our order process.
What we collect
We collect only what we need to sell, deliver and support an order:
- Contact details — your name, phone number and email address.
- Delivery and installation address — needed to get the product to you and to schedule a technician.
- Order information — what you bought, the price paid, and the status and history of the order.
- Payment confirmation — where you pay by bank transfer, the receipt or proof of payment you upload.
- Messages — what you send us by WhatsApp, email or phone, so we can follow up.
- Basic technical data — standard web server information such as browser type, needed to serve and secure the site.
What we never collect
We do not receive, process, or store your card details. Card payments are handled entirely on our payment provider’s own secure page. Your card number never passes through, and is never stored on, our systems — we only ever learn whether a payment succeeded, and the amount.
We do not knowingly collect personal data from anyone under 18. If you believe a minor has given us personal data, tell us and we will delete it.
Why we use it
- To process, deliver and install your order, and to keep you updated on it
- To send your order confirmation and the link to your own order record
- To arrange and confirm installation appointments
- To provide warranty support, handle returns and answer enquiries
- To keep accounting and tax records as the law requires
- To detect and prevent fraud and abuse of the site
We do not sell your personal data, and we do not send marketing messages unless you have asked us to. If you ever opt in, you can opt out again at any time.
Who we share it with
We share the minimum necessary, only with parties who help us fulfil your order:
- Couriers and logistics partners — to deliver your order
- Our installation technicians — to carry out an installation appointment
- Our payment provider — to take payment and process any refund
- Our email provider — to send your order confirmation
- Our hosting and database providers — who store the data on our behalf
- Government or law-enforcement bodies, where we are legally required to disclose
Some of these providers operate servers outside Malaysia. Where personal data is transferred abroad, we take reasonable steps to ensure it remains protected to a comparable standard.
How long we keep it
We keep order and customer records for as long as you are a customer, and afterwards for as long as we need them to meet warranty, accounting, tax and other legal obligations. After that we delete or anonymise them. Payment receipts you upload are held in private storage and are not publicly accessible.
How we protect it
Data is transmitted over encrypted connections and stored with access controls that limit it to the people who need it to run the business. Administrative access to customer data requires authentication. No system is perfectly secure, so if you believe your data has been exposed, contact us immediately and we will investigate.
Cookies
We use a small number of strictly necessary cookies — for example, to remember the contents of your shopping cart between pages and to keep an administrator signed in. These are required for the site to work. You can block cookies in your browser, but the cart will not function if you do.
Your rights under the PDPA
You have the right to:
- Ask for a copy of the personal data we hold about you
- Ask us to correct data that is wrong or incomplete
- Withdraw consent you have previously given, including for marketing
- Ask us to limit how we process your data in certain circumstances
- Ask us to delete data we no longer have a lawful reason to keep
To exercise any of these, email hello@smartstays.my. We may need to verify who you are before we act, so that we do not disclose your data to someone else. We will respond within the period the PDPA allows.
Changes to this policy
We may update this policy as the business or the law changes. The “last updated” date at the top of this page always reflects the current version.
Contact us
Questions about this policy, or about an order, can go to any of these — we answer fastest on WhatsApp.
- Email: hello@smartstays.my
- Phone / WhatsApp: 013-914 0841
- Hours: Monday to Friday, 10am–7pm (MYT)
