Privacy Policy

Carefinder is a caregiver matching platform based in Kota Kinabalu, Sabah, Malaysia. We are a marketplace — not an agency and not an employer. Families hire caregivers directly. We provide the structure, matching, and trust infrastructure.

Contact: team@carefinder.my

We collect only the information needed to match caregivers with families and operate the platform safely.

From caregivers:

• Name, age range, gender, religion
• Languages spoken
• Zone in KK (selected in the form)
• Full address — collected via WhatsApp after a match is confirmed, shared only with the selected caregiver, never stored publicly
• WhatsApp number
• Height, weight, and physical capability details (used for safe matching only)
• Skill levels and experience declarations
• Availability and expected daily rate
• Household compatibility preferences
• Job history and employer reviews (accumulated over time)

From employers (families):

• Name and WhatsApp number
• Patient details — gender, age, weight, ethnicity, condition
• Care needs and budget
• Zone and address (address kept private — see Section 4)
• Arrangement type and preferences

• To match caregivers with families based on care needs, zone, and budget
• To contact you via WhatsApp about job matches or platform updates
• To build and display verified caregiver profiles and reputation scores
• To identify and address platform misuse or fraud patterns
• To improve our matching and platform quality over time
• To send you relevant updates and information if you have given marketing consent

What employers can see about caregivers:

• Name, age range, gender, religion
• Languages spoken
• Zone (not exact address)
• Skill levels and verified job history
• Would hire again score (after minimum 3 jobs)
• Availability and expected daily rate

What employers cannot see:

• Caregiver's exact address — never collected or shared
• Caregiver's height and weight — used internally for matching only
• Individual employer reviews written by caregiver about past employers
• Backend confidence score or matching priority level

What caregivers can see about employers:

• Zone of patient (not exact address) — shown at soft ping stage
• Type of arrangement, shift type, and daily rate
• Would work again score from previous caregivers (after minimum 3 jobs)
• Full job details and exact address — only after employer selects the caregiver

During early access, your information is stored securely in our platform systems. We take reasonable steps to protect your data from unauthorised access, loss, or misuse.

Carefinder is a matching platform only. We do not verify, screen, or guarantee the work permit status or legal eligibility to work of any caregiver listed on the platform.

Both employers and caregivers are responsible for ensuring that any working arrangement complies with Malaysian employment and immigration law. By using this platform, both parties acknowledge this responsibility.

If you have given consent to receive marketing communications, we may contact you from time to time with updates, tips, and relevant platform information via WhatsApp or email.

You can withdraw your marketing consent at any time by emailing team@carefinder.my. Withdrawing marketing consent does not affect your ability to use the platform.

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate personal data
• Withdraw consent for processing your personal data
• Request deletion of your personal data

To exercise any of these rights, email us at team@carefinder.my. We will respond within 14 working days.

To request deletion of your account and personal data, email team@carefinder.my with the subject line "Data deletion request" and your registered WhatsApp number.

We will process your request within 14 working days. Note that anonymised aggregate data used for platform improvement may be retained.

As the platform grows, we plan to implement the following:

• Formal secure storage for any identity documents collected
• Restricted access controls for sensitive caregiver data
• Formal vendor data processing agreements with hosting providers
• A documented data breach response plan
• A formal data retention and deletion schedule

This policy will be updated when these measures are in place.

We may update this privacy policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of the platform after changes means you accept the updated policy.