Privacy Policy
This Privacy Policy explains how BS Expert Sdn Bhd (Registration No. XXXXXXXXXXXX (XXXXXX-X)) (“we“, “us” or “our“) collects, uses, stores and protects your personal data when you use the BS Expert Inspection mobile application for Android and iOS (the “App“). This notice is issued in accordance with the Personal Data Protection Act 2010 (Malaysia) (“PDPA“), as amended.
By using the App, you acknowledge that you have read and understood this Privacy Policy.
1. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account information | Name, email address, phone number, job title / role, organisation, login credentials (passwords are encrypted and never visible to us) | You or your organisation’s administrator |
| Inspection content | Project and building details, property addresses, defect descriptions, checklists, notes, signatures and reports created in the App | You |
| Photos | Photos taken with the device camera or selected from your gallery to document defects | You |
| Location | Approximate or precise location when you tag an inspection or photo (only while the feature is in use) | Your device, with permission |
| Device and diagnostic data | Device model, operating system version, app version, crash logs and performance data | Collected automatically |
The App works offline. Inspection data you create while offline is stored temporarily on your device and synchronised to our servers when an internet connection is available.
We do not collect sensitive personal data, payment card details, contacts, or browsing history, and we do not track you across other apps or websites.
2. How we use your data
- To create and manage your account and authenticate your login;
- To record, synchronise and manage building inspections, defects and reports;
- To generate inspection reports for the relevant project owners or clients;
- To provide technical support and respond to your enquiries;
- To maintain, secure, troubleshoot and improve the App;
- To comply with legal, regulatory and contractual obligations.
We do not sell your personal data and we do not use it for advertising.
3. App permissions
| Permission | Purpose |
|---|---|
| Camera | To take photos of building defects during inspection |
| Photos / Media | To attach existing photos to inspection records |
| Location | To tag the location of an inspection or defect (optional) |
| Storage | To save inspection data and photos for offline use |
| Internet / Network | To synchronise data with our servers |
You may withdraw any permission at any time in your device settings. Some features may not work without the related permission.
4. Sharing and disclosure
We share personal data only in the following circumstances:
- Service providers who host and operate the App on our behalf, namely Google Firebase (Authentication, Cloud Firestore, Cloud Storage and Crashlytics), bound by their own data protection terms;
- Project owners, developers or clients who commissioned the inspection, to whom inspection reports are delivered;
- Authorised staff of our organisation who need the data to perform their duties;
- Authorities where required by law, court order or a lawful request by a government body.
Google’s privacy policy is available at policies.google.com/privacy.
5. Data storage and international transfer
Your data is stored on Google Cloud infrastructure, which may be located outside Malaysia. Where personal data is transferred outside Malaysia, we take reasonable steps to ensure it receives a level of protection substantially similar to that required under the PDPA.
6. Data retention
- Account information is kept for as long as your account is active.
- Inspection records and reports are kept for the duration of the project and thereafter for as long as required for contractual, warranty or legal purposes, after which they are deleted or anonymised.
- Crash and diagnostic logs are kept for up to 90 days.
7. Data security
We apply reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS/TLS) and at rest, role-based access control, and secure authentication. No method of transmission or storage is completely secure; however, should a personal data breach occur, we will take prompt action and notify the Personal Data Protection Commissioner and affected users as required by law.
8. Your rights
Subject to the PDPA, you have the right to:
- Access the personal data we hold about you;
- Correct personal data that is inaccurate, incomplete or outdated;
- Withdraw your consent to the processing of your personal data;
- Request that your personal data be transmitted to another data controller (data portability);
- Request deletion of your account and personal data.
To exercise these rights, contact us using the details in Section 12. We will respond within 21 days. We may need to verify your identity before acting on your request.
9. Account and data deletion
You may delete your account in the App via Profile → Settings → Delete Account, or request deletion through our Account Deletion page. Full details of what is deleted and what is retained are provided on that page.
10. Children’s privacy
The App is intended for professional use and is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page with the updated date. Material changes will be notified through the App.
12. Contact us
For any enquiries, requests or complaints regarding your personal data, please contact:
BS Expert Sdn Bhd
58A, Jalan Badminton 13/29, Tadisma Business Park, Seksyen 13, 40100 Shah Alam, Selangor, Malaysia
Email: info@bsexpert.com
Phone: 03-5038 5123
If there is any inconsistency between the English and Bahasa Melayu versions of this policy, the English version shall prevail.