Privacy notice

This notice explains how Utilitybloom (“we”) handles personal data as controller for this website and for the professional work described on it. It should be read with the cookie notice.

Who we are

Utilitybloom, Office 11, 62 Placeholder Street, George Town 00000. Email: info@utilitybloom.click. Telephone: +60 4 0000 6520.

Data we collect

From the enquiry form: name, email address, optional insurer name, the review you selected, and the message you write. We also receive technical logs from the host (IP address, browser type, time of request) as a consequence of visiting the site.

From an engagement: names and work emails of staff you introduce, and — only with the authority you arrange — limited details needed to moderate a policyholder session (usually first name, language preference, and the self-service task they attempted). We do not ask for identity-card numbers, medical diagnoses, or full policy numbers unless a session cannot proceed without a masked reference you already use internally.

Why we use it

We reply to enquiries, perform the review you instructed, keep engagement records required for tax and professional accountability, and — if you accepted analytics cookies — understand which pages are read. The legal bases under the Personal Data Protection Act 2010 are performance of a contract, legitimate interests in running a professional practice, and consent where you have chosen optional cookies or a policyholder session.

Retention

Enquiry messages are kept for twenty-four months after the last reply, then deleted, unless they became a paid engagement. Engagement files, including the written account, are kept for seven years after the final invoice. Host logs follow the host’s rotation, typically ninety days. Policyholder session notes are destroyed within thirty days after the findings session unless the letter of engagement sets a shorter period.

Sharing

We use a website host and an email provider to operate the site and the desk. They process data on our instructions. We do not sell lists. We may share facts with professional advisers or with a Malaysian authority if required by law. During an engagement, session notes stay with the named reviewers and the client contacts you designate.

International transfers

Our primary files sit in Malaysia. If a host or email provider stores a copy outside Malaysia, we use providers that offer a written processing term and we limit the data to what the service requires. You may ask which providers are current at the date of your request.

Your rights

Subject to the Personal Data Protection Act 2010, you may request access to personal data we hold about you, correction of inaccuracies, and — in some cases — withdrawal of consent or limitation of processing. Policyholders should usually route session-related requests through the insurer that invited them; we will cooperate with that insurer. Write to info@utilitybloom.click. We may need to verify that we are speaking with the right person.

Children

The site and our reviews are aimed at insurers and adult policyholders. We do not knowingly collect data from children.

Complaints

You may complain to us first. You may also contact the Department of Personal Data Protection in Malaysia.