Privacy Notice
Last updated: 15 August 2026
Who we are
BreastpumpJe is a directory where Pump Owners list breastpumps and Renters find and contact them. We handle the personal data described below as the data controller. Reach us on WhatsApp support for anything on this page.
What we collect from a Renter
A Renter has no account and no profile here. We only collect data when she sends a Qualified Enquiry, and only these fields:
- Her name
- Her phone number
- Her message to the Pump Owner
- The preferred start and end dates, and which listing the enquiry is about
Nothing else. We do not ask for an email address, an IC number, an address, or any health information about her or her baby. Please do not put health details in the message, we do not need them.
Separate enquiries are not linked together into a hidden profile, not even when they use the same phone number.
What we collect from a Pump Owner
A Pump Owner signs in with Google. Our sign-in provider stores the name, email address, and profile picture that Google gives us, plus the tokens that keep the session working. On top of that we store her name, state, area, and phone number for her public profile and listings, along with the listings, photos, and enquiries themselves.
Her name, area, state, and phone number are visible to Renters, since that is how a Renter judges whether a pump is nearby and reaches her afterwards. Her email address is not shown on the site.
Why we collect it
- To pass an enquiry to the Pump Owner so she can reply and arrange a Rental.
- To show listings, photos, owner profiles, and Reviews to Renters.
- To keep a Pump Owner signed in and let her manage her own listings and enquiries.
- To review reports, grant or revoke verification, and deal with misuse.
Our basis under the PDPA
We rely on consent. A Renter gives it by choosing to fill in and send an enquiry form after reading this notice, and a Pump Owner gives it by signing in and publishing a listing. We also process what is necessary to take the steps you asked for, such as passing an enquiry to the Pump Owner you contacted. Giving your name and phone number is required to send an enquiry, because a Pump Owner cannot reply without them. You can decline, but then the enquiry cannot be sent.
Who we share it with
When a Renter sends an enquiry, her name, phone number, message, and preferred dates go to the Pump Owner of that listing. That is the whole point of an enquiry, and it is the only person we pass it to. Coordination usually continues on WhatsApp, which is outside BreastpumpJe and covered by WhatsApp's own terms and privacy policy.
We do not sell personal data and we do not share it with advertisers. We only disclose it otherwise where Malaysian law requires it, or to protect someone from real harm.
Where it is stored
The site runs on Cloudflare. Listings, enquiries, accounts, and Reviews are stored in a Cloudflare database, and listing photos are stored in a private Cloudflare R2 bucket and served through the app rather than from a public bucket. Cloudflare operates a global network, so your data may be processed outside Malaysia while it is being served.
Your Shortlist stays on your device
The Shortlist is saved in your browser's local storage on the device you are using. It never reaches our server, we cannot see it, and clearing your browser data removes it. Your light or dark theme choice is stored the same way.
Cookies
The only cookie we set is the sign-in session cookie for a Pump Owner, so she stays signed in while managing her listings. There are no advertising cookies, no third-party trackers, and no cross-site profiling. A Renter who only browses and sends an enquiry gets no cookie from us.
We do count anonymous events for the owner sign-up flow, for example how many people opened the listing page or started a listing. Those counts hold no name, phone number, or identifier that points back to a person.
Spam protection
To stop scripts from flooding Pump Owners, we keep a scrambled one-way fingerprint of the network address that sent an enquiry or a report, with a timestamp. It is not the address itself, it cannot be turned back into one, and it is not attached to the enquiry or report it came from. We only use it to count how many submissions came from the same place in the last hour, and we delete these records after a day.
How long we keep it
- Enquiries: kept while the Rental is being arranged and afterwards as the Pump Owner's record of it, so a completed Rental can carry a Review. Ask us and we will delete an enquiry that is no longer needed.
- Listings and photos: kept until the Pump Owner deletes the listing or her account.
- Pump Owner accounts: kept while the account is in use, then deleted when she asks us to close it.
- Reviews: kept while the Pump Owner's profile exists, since they are part of her public record.
- Reports: kept while a Moderator is handling them and for a reasonable period afterwards. They hold no reporter identity.
We delete personal data when we no longer need it for the purpose we collected it for.
Your rights
Under the PDPA you can ask for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, or withdraw your consent. Message us on WhatsApp support and tell us enough to find your data, such as the phone number used in an enquiry or the listing it was about. We will reply within 21 days.
One limit worth knowing: once an enquiry has reached a Pump Owner, we can delete our copy, but we cannot delete the copy she already has or any WhatsApp conversation between you. Ask her directly for that.
Security
Traffic is encrypted in transit, photos sit in a private bucket, and only signed-in Pump Owners can see the enquiries for their own listings. No system is perfectly secure, so if a breach affects your data we will tell you and the Commissioner as required by the PDPA.
Children
BreastpumpJe is for adults. We do not knowingly collect personal data from anyone under 18.
Changes to this notice
We update this page when the product changes what it collects. The date at the top shows the last update. See also our Terms of Use.