Legal

Privacy Policy

Last updated: 25 May 2026

About this policy

This policy is provided by Lifestyle and Health Care Services Sdn. Bhd. (1016743-M), the owner and operator of Millennia Village, Seremban, Negeri Sembilan (“Millennia Village”, “we”, “our”, “us”).

This policy describes how and when we collect your personal information, what that information may be used for, how it may be disclosed to other parties, how you may access and correct your details, and how you may exercise your rights under Malaysian data protection law.

We collect personal information in connection with your residency at Millennia Village, your short stay or event booking, your use of our wellness and care programmes, and your use of our website at millenniavillage.com. We collect only what is necessary for those purposes.

By submitting personal information to us, using our services, or browsing our website, you are deemed to have read this policy and to consent to the collection, use, processing and disclosure of your personal information in the manner set out here. If you do not agree, please do not submit personal information to us or use our services.

These terms are governed by the Malaysian Personal Data Protection Act 2010 (“PDPA”). This policy applies alongside our Residency Terms, Booking Policy and Terms of Use.

Information we collect

Information you provide to us:

Full name, email address, telephone number, nationality and country of residence
Passport or national identification number, where required for residency, immigration or legal compliance purposes
Date of birth and gender
Residency application content, including supporting documentation and financial information
Booking dates, suite preferences, dietary requirements and accessibility needs
Payment details, processed by our secure payment partner — we do not store full card numbers
Health-related information you choose to share in connection with your residency application, wellness planning or ongoing care needs
Nominated beneficiary details provided in connection with your residency agreement
Messages, enquiries, application content and correspondence

Information collected automatically:

IP address, device type, browser and operating system
Pages viewed, time spent on the site, referring URLs
Cookies and similar technologies (see the Cookies and analytics section)

Where you provide personal information about a third party — for example, a family member, guest or nominated beneficiary — you confirm that you have obtained that person’s consent to share their information with us and to allow us to use it in accordance with this policy. You agree to indemnify us in the event we suffer any loss or damage as a result of your failure to do so.

How we use your information

We collect and use your personal information for one or more of the following purposes:

a) To process your residency application, booking, enquiry or wellness programme registration, and for related operational and administrative purposes, including processing payments and managing your account;

b) To complete your residency or stay — for example, to ensure your suite is available, to manage your residency agreement, and to provide you with the services you have requested;

c) To provide customer support and services, and to respond to your correspondence and enquiries;

d) To send newsletters, updates and marketing communications where you have given consent, and to manage your participation in any loyalty or programme membership;

e) To improve our website, services and guest and resident experience, including through data analysis, usage trend identification and assessment of our promotional activities;

f) To maintain the safety and security of our residents, guests, team and property, including through the use of security systems on site;

g) To comply with legal, regulatory and accounting obligations, including financial reporting requirements, and for the establishment, exercise or defence of legal claims;

h) For any other purpose made known to you at the time of collection of your personal information.

You may opt out of receiving marketing communications from us at any time by contacting us at info@millenniavillage.com, and we will remove your details from our mailing list accordingly.

Sensitive health information

a) For the purposes of this policy, “Sensitive Health Information” means information relating to your physical or mental health, medical history, care needs, dietary requirements linked to a medical condition, mobility or disability, and any health-related information you provide to us in connection with your residency application, wellness planning or ongoing stay at Millennia Village.

b) We collect Sensitive Health Information only where you have voluntarily provided it to us, or where it is reasonably necessary to deliver the services you have requested. This may include information provided during the residency application process, in connection with wellness or fitness programmes offered at the village, or in circumstances where your care needs require us to coordinate with healthcare providers or emergency services.

c) We will not collect or process your Sensitive Health Information without your explicit consent, except where we are required or permitted to do so under applicable Malaysian law, or where processing is necessary to protect your vital interests or those of another person.

d) Sensitive Health Information collected by us may be shared with:

members of the Millennia Village wellness and care team who are directly involved in your care or programme;
external healthcare providers, hospitals or clinics engaged in connection with your treatment or referral, where you have consented to such referral or where it is necessary in an emergency;
professional advisers and relevant authorities where required by law.

We do not share Sensitive Health Information with third parties for marketing or advertising purposes.

e) Where a resident’s health or care needs change during the course of their residency, we will discuss any implications for the handling of your personal data with you directly, in accordance with the process described in the Residency Terms.

f) You may withdraw your consent to the processing of Sensitive Health Information at any time by contacting us at info@millenniavillage.com. Please note that in some circumstances, withdrawal of consent may affect our ability to provide certain wellness services or to manage your residency arrangement safely.

Sharing your information

We share personal information only where necessary, and only with:

Service providers who assist us in operating the village, including booking platforms, email and CRM systems, payment processors, and IT and analytics providers;
Trusted partners delivering specific services on our behalf, including catering, healthcare referrals and transport;
Professional advisers, including accountants, auditors and lawyers, bound by confidentiality obligations;
Owners, investors or acquirers of Millennia Village or its operating entity, in the event of any reorganisation, merger, sale, or transfer of all or any portion of our business or assets;
Authorities and regulators where disclosure is required by Malaysian law or necessary to pursue available legal remedies.

We do not sell your personal data, and we do not share it for third-party advertising purposes.

Cookies and analytics

This website uses cookies and similar technologies to remember your preferences, maintain your session during the booking or enquiry process, measure how visitors use the site, and direct you to the correct page based on your location. You can control cookies through your browser settings, though some functionality — such as remembering form entries — requires cookies to work.

We use a small number of analytics tools to understand visitor behaviour in aggregate. These tools do not identify individual visitors to us.

Data security and retention

Personal data is stored on secured systems with reasonable technical and organisational safeguards in place. Access is restricted to team members and partners who require it to perform their roles. Where personal data is held in hard copy form, equivalent safeguards apply.

We retain personal data only for as long as is necessary to provide our services, meet our legal and accounting obligations, and resolve disputes. Specific retention periods vary by data type and are reviewed regularly. Where data is no longer required, it is destroyed or de-identified in accordance with applicable law.

Please note that the transmission of information over the internet is inherently insecure. Whilst we take reasonable steps to protect personal data in transit, we cannot guarantee the security of data transmitted to us electronically, and you do so at your own risk.

In the event of a personal data breach, we will act promptly to contain the incident, assess its scope, and notify the Personal Data Protection Department of Malaysia and any affected individuals in accordance with our obligations under the PDPA. Where a breach is likely to result in a risk to your rights or interests — in particular where it involves Sensitive Health Information, financial documentation, identification records or beneficiary details — we will contact you directly without undue delay using the contact details we hold for you, and will describe the nature of the breach, the data affected, the likely consequences, and the steps we are taking to address it. EU residents should refer to Appendix A for additional notification rights under the GDPR. If you believe your personal data held by us has been compromised, please contact us immediately at info@millenniavillage.com.

Your rights under PDPA

Under the Malaysian Personal Data Protection Act 2010, you have the right to:

Access the personal data we hold about you or any third party whose personal information you have provided to us;
Request correction of inaccurate or incomplete data — where we do not agree that correction is warranted, we will note your disagreement on the relevant record;
Withdraw consent for marketing communications at any time;
Request that we cease processing all or part of your personal data, subject to our legal retention obligations;
Lodge a complaint with the Personal Data Protection Department of Malaysia.

To exercise any of these rights, email info@millenniavillage.com. We will respond within 21 days as required by PDPA. Please note that we may charge a fee for processing requests for access or correction in accordance with the Act, and that we may decline to comply where the Act permits us to do so.

International transfers

Some of our service providers operate from outside Malaysia. Where personal data is transferred internationally, we put appropriate safeguards in place — including contractual data protection obligations — to ensure your information continues to be protected to the standard required by PDPA.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices, services or applicable law. The current version is always available at this URL, with the last-updated date at the top. Material changes will be communicated through the website and, where appropriate, by direct notification to residents and subscribers.

Appendix A: Additional provisions for residents and applicants in the European Union

These additional provisions apply to EU residents and to the processing of their personal information pursuant to Regulation (EU) 2016/679 (“GDPR”). In the event of any inconsistency between the main body of this Privacy Policy and the provisions of this Appendix, the terms of this Appendix shall prevail for EU residents.

A1. Why we process your personal information

We may process your personal information for the following purposes and on the following legal bases:

a) To provide our residency, short-stay and wellness services to you. When you apply for residency, make a booking or enrol in a programme, we process your personal information — including your full name, nationality, identification documents, contact information, payment details, health-related information and residency documentation — in order to complete your application or reservation, manage your residency agreement, administer your tenure deposit and nominated beneficiary arrangements, and deliver the services you have requested. The legal basis for this processing is the performance of a contract to which you are party, or steps taken at your request prior to entering into a contract.

b) To send you marketing and promotional communications about Millennia Village, including newsletters, programme updates and special offers. The legal basis for this processing is your consent. You may withdraw consent at any time as described at Section A3(f) below.

c) To improve our services and understand how our residents and guests engage with us, including through surveys, analytics and programme development. The legal basis for this processing is our legitimate interests in operating and developing a high-quality residential and wellness village, provided those interests are not overridden by your rights and freedoms.

d) To maintain the safety and security of our residents, guests and team, including through the operation of security systems on site. The legal basis for this processing is our legitimate interests in maintaining a safe residential environment, and where relevant, the vital interests of residents or other persons.

e) To manage changes in a resident’s health or care needs, including coordination with healthcare providers and, where necessary, emergency services. The legal basis for this processing is the protection of your vital interests or those of another person, or — where you have provided it — your explicit consent to the processing of Sensitive Health Information as described in the Sensitive health information section of this policy.

f) To comply with our legal obligations, including financial reporting, immigration record-keeping and regulatory requirements. The legal basis for this processing is compliance with a legal obligation to which we are subject.

g) To work with third parties who support the delivery of our services, including healthcare referral partners, transport providers and catering partners. The legal basis for this processing is the performance of a contract, our legitimate interests, or your consent, depending on the nature of the processing involved.

h) For any other purpose described in the How we use your information section of this policy or made known to you at the time of collection.

A2. How long we retain your personal information

We retain your personal information for the period necessary to fulfil the purpose for which it was collected. For residents, this will ordinarily cover the duration of your residency agreement and any period thereafter required to manage tenure deposit refunds, resolve disputes, meet legal and accounting obligations, or comply with applicable law. For short-stay guests and website enquirers, retention periods are shorter and vary by data type. All retention periods are reviewed regularly and personal information is destroyed or de-identified when it is no longer required.

A3. Your rights as an EU resident

In addition to the rights described in the Your rights under PDPA section of this policy, EU residents have the following rights under the GDPR:

a) Access, correction and erasure. You have the right to confirm whether we are processing your personal information, to obtain a copy of it, to receive information about how it is being processed, to request corrections or updates, and to request erasure of your personal information where the processing is no longer necessary, where you have withdrawn consent, or where processing is unlawful.

b) Right to object. You have the right to object to the processing of your personal information where we rely on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless processing is necessary for the establishment, exercise or defence of legal claims. You have an unconditional right to object to processing for direct marketing purposes, including profiling for marketing.

c) Right to restrict processing. You have the right to request that we restrict the processing of your personal information in the following circumstances: while we are verifying the accuracy of data you have disputed; where processing is unlawful and you request restriction rather than erasure; where we no longer require the data but you need it for the establishment, exercise or defence of legal claims; or where you have objected to processing and we are assessing whether our legitimate grounds override your interests.

d) Right to data portability. Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal information in a structured, commonly used and machine-readable format, and to request that we transmit it directly to another controller where technically feasible.

e) Right not to be subject to automated decision-making. You have the right not to be subject to a decision based solely on automated processing — including profiling — that produces legal or similarly significant effects concerning you. Where we conduct any such processing, we will ensure that appropriate human oversight is available and that you are able to contest the decision.

f) Right to withdraw consent. Where processing is based on your consent, you may withdraw that consent at any time by contacting us at info@millenniavillage.com. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Please note that withdrawal of consent to the processing of Sensitive Health Information may affect our ability to deliver certain wellness or care services, as described in the Sensitive health information section of this policy.

To exercise any of the rights described above, please contact us at info@millenniavillage.com. We will respond within the timeframes required by applicable law. If you have concerns about our handling of your personal information, you also have the right to lodge a complaint with the supervisory authority in the EU member state of your habitual residence, place of work or the place of the alleged infringement.

A4. International transfers of personal data

As Millennia Village operates in Malaysia, your personal information will be transferred to and processed in Malaysia, which is outside the European Economic Area. We ensure that such transfers are subject to appropriate safeguards in accordance with the GDPR, including standard contractual clauses approved by the European Commission or other lawful transfer mechanisms. Where we share personal data with service providers located in other countries, we apply equivalent transfer safeguards.

A5. Miscellaneous

In the event of any inconsistency between the English version and any other language version of this policy or this Appendix, the English version shall prevail. If you have questions about this Appendix or wish to exercise any of your GDPR rights, please contact us at info@millenniavillage.com.