Privacy Policy

This policy explains how the independent, personal website iniPrice.com ("iniPrice", "we", "our" or "us") handles information when you browse or contact us. For privacy questions or requests, email [email protected] or use our contact form.

Browsing without an account

You do not need to register or log in to browse iniPrice. We do not provide public user accounts or ask visitors for identity documents, payment information or a property ownership profile. Buyer and seller identities are not displayed in our transaction reports. Population pages show only aggregate DOSM statistics for states and districts. They contain no information about individual residents and are not combined with visitor information.

Information we receive

• Contact messages: if you contact us, we receive the name, email address, subject and message you provide, together with subsequent correspondence. Please do not send identity numbers, bank details, passwords or confidential transaction documents.
• Technical information: our hosting server and service providers may record IP addresses, request times, requested pages and query strings, response codes, browser information and referring pages in access or error logs. Search terms and filters appear in page URLs, so they may also appear in server logs, browser history or a link you share. Do not enter private information in property searches.
• Contact-form security: we use a temporary session identifier and security token to protect submissions. A hashed IP address and recent attempt timestamps are used to limit automated submissions. A hashed address is pseudonymous, not necessarily anonymous. The active rate-limit window is 15 minutes; expired entries are removed when the limiter next runs.

Why we use information

We use contact details to respond to enquiries, investigate reported errors and handle privacy requests. Technical information helps deliver the website, diagnose faults, prevent abuse and maintain security. We do not use contact messages for marketing mailing lists, sell contact details or publish your correspondence as a property review.

Where applicable privacy law requires a legal basis, this processing supports responding to your request, our legitimate interests in operating and securing the website, compliance with legal obligations, or consent where required. Submitting an enquiry is not consent to advertising tracking.

Cookies and browser storage

The contact page uses an essential PHP session cookie to keep its anti-forgery token and temporary arithmetic CAPTCHA associated with your browser. The CAPTCHA is generated and checked on our server, expires after 10 minutes, and does not send your answer to an external CAPTCHA provider. It is not an advertising identifier. The cookie is set with HttpOnly and SameSite protection, and with Secure protection when accessed over HTTPS. It is a browser-session cookie; browser session-restoration settings can affect when it disappears. Blocking it may prevent the form from working; you can email us instead.

The current website does not install visitor analytics or advertising scripts. Property search settings are carried in page URLs rather than a public user profile. External services described below may have their own storage practices. You can manage or delete cookies through your browser settings.

External maps, charts and content delivery services

Property report pages load chart and map software from providers including jsDelivr, unpkg and OSM Buildings. Maps and map layers can request content from OpenStreetMap, Esri ArcGIS, OpenTopoMap, OpenFreeMap and OSM Buildings. Those providers can receive your IP address, browser information, request time and requested resources. Map requests can reveal the approximate property location being viewed.

Location searches may use Nominatim/OpenStreetMap and Photon/Komoot, and nearby-place searches use Overpass services. Many lookups are made through our server, but some browser-side map or fallback requests go directly to a provider. These services are governed by their own policies, including the OpenStreetMap Foundation Privacy Policy (opens in a new tab) and Esri privacy information (opens in a new tab). We do not ask your browser for your precise device location.

Following an external link takes you to a separate website with its own privacy practices. We do not control those websites.

Advertising and Google AdSense

Google AdSense is not currently installed in this version of iniPrice. If we introduce it, we will update this policy and implement the applicable consent controls before enabling advertising that requires consent. The following explains how Google advertising can work; it is not a statement that advertising cookies are already being set here.

• Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website or other websites.
• Google's advertising cookies enable Google and its partners to serve ads based on visits to this site and/or other sites on the Internet. Advertising services may also use web beacons, IP addresses, device identifiers or similar technologies to deliver and measure ads and help prevent fraud.
• You can opt out of personalised Google advertising through Google Ads Settings (opens in a new tab). You can learn about other vendors' interest-based advertising choices at YourAdChoices (opens in a new tab). Opting out of personalisation does not necessarily remove all advertising or essential fraud-prevention processing.
• Read how Google uses information from sites or apps that use its services (opens in a new tab) and the Google Privacy Policy (opens in a new tab).

Where required, including for relevant advertising to visitors in the European Economic Area, United Kingdom and Switzerland, we will use the applicable Google-certified consent-management platform and provide a way to manage or withdraw consent. This policy alone is not a consent mechanism. We will identify any other advertising or analytics providers here before deploying them.

Sharing, service providers and international processing

Hosting and email providers process technical information and correspondence as needed to operate the site and deliver messages. External content providers receive the requests described above. We may disclose information when required by law, to respond to a valid legal process, or as reasonably necessary to protect rights and investigate abuse. These providers may process information outside Malaysia under their own service arrangements and applicable safeguards.

Retention and security

The contact form sends enquiries by email; it does not create a public post or store a separate copy of your message in the transaction database. Enquiries and replies remain in our email system for as long as reasonably needed to handle the matter, resolve disputes or meet legal obligations. You can request deletion of correspondence that no longer needs to be kept. Hosting logs and email backups follow the relevant providers' retention and backup cycles; a deletion may take longer to disappear from restricted backups.

We use measures such as input validation, access restrictions and form security controls to reduce risk. No website, network transmission or email system can be guaranteed completely secure. Please use the HTTPS version of this site and avoid sending sensitive information.

Your choices and privacy requests

Depending on the law that applies to you, you may request access to, correction of or deletion of personal information, withdraw consent, or object to or request limits on certain processing. Email [email protected] with enough information to locate your correspondence. We may need proportionate verification before acting on a request. Some information may need to be retained for security or legal reasons; we will explain any applicable limitation. You may also raise a concern with the relevant data-protection authority, including Malaysia's Personal Data Protection Commissioner where applicable.

iniPrice is intended for general property research and is not directed at children. We do not knowingly seek personal information from children. Contact us if you believe a child has sent us personal information so we can review and remove it where appropriate.

Changes to this policy

We will publish changes on this page and revise the date above. Material changes to data collection or third-party services will be described before they take effect, with additional notice or consent where required by law.