Privacy Notice
Citrine Hills Privacy Notice
Last updated: 12 July 2026
Citrine Hills uses Rimays Community to manage residential operations, security access, visitor registration, finance workflows, notices, support requests and audit records. This notice explains how personal data is handled for residents, family members, visitors, owners, tenants, guards, management users and service providers.
Who Handles Your Data
The community management body for Citrine Hills is the data user for community operations. Rimays Community and approved technical providers process data only to operate, secure, maintain and support the platform on behalf of the community.
Personal Data We Collect
- Account and resident recordsName, phone number, email, role, unit, family members, emergency contact and account activity.Core
- Vehicle and access recordsPlate number, vehicle type, RFID or access card information, visitor pass details, gate entry/exit records and related security notes.Security
- Finance and documentsMonthly invoices, payment references, uploaded receipts, approval history and supporting files submitted through the app.Finance
- Support and incident recordsComplaints, SOS requests, incident reports, attachments, announcements, notifications, audit logs and device/browser metadata needed for security.Operations
Why We Use It
We use personal data to verify accounts, manage units and residents, issue visitor passes, support guardhouse checks, review payments, respond to complaints and emergencies, send community notices, maintain audit trails, prevent misuse and comply with legal or operational obligations.
Consent, Notice and Choice
By using the platform or submitting information to management, you acknowledge that your data may be processed for the purposes above. Where optional integrations such as browser push, SMS, WhatsApp, email, ANPR or RFID hardware are enabled, the app will use only the data needed for that function. You may contact management to update preferences or withdraw optional consent where withdrawal does not affect required community operations.
Disclosure
Data may be shared with authorised management users, guards, finance users, committee viewers, support staff, hosting providers, payment or messaging providers, device vendors and public authorities where required by law or for security response. We do not sell resident or visitor personal data.
Retention and Security
Records are retained only for operational, audit, legal, finance and security purposes. The system supports configurable retention periods for visitor records, access logs, notifications and audit logs. Access is role-based, sensitive actions are logged, uploads are restricted by file type and size, and administrative users should use strong passwords and two-factor controls where enabled.
Access and Correction
You may request access to your personal data, correction of inaccurate details, a privacy export or deletion where legally and operationally appropriate. Requests can be submitted through the in-app Privacy screen or directly to community management.
Contact
For privacy questions, contact Citrine Hills management or the platform administrator through the app support screen. This notice is designed to align with Malaysia's Personal Data Protection Act 2010 and related amendments, but it should be reviewed by the community's appointed legal adviser before full production launch.