Privacy

ThreeQuotes is operated by Company legal name and registration number at Registered address. For questions about this notice or about your information, contact Privacy contact email.

• Account details — name, email address, phone number, password (stored in a protected form), and the role you signed up for.
• Property manager details — the property or properties you manage, your tender documents, your bank account details where you choose to charge a tender document fee, and your payment decisions.
• Contractor profile details — business name, categories and areas you cover, contact details, website and registration references, your description of your business, and the quotations and attachments you submit.
• Tender activity — tenders you post, view or download, questions and answers, site visit sign-ups, tender document fee receipts, and invitations sent to you.
• Technical information — log data such as sign-in times, approximate location from IP address, and the browser or device used.
• Information from other sources — publicly available business listings used to suggest contractors that match a tender's category and area.

• to create and secure your account, and to sign you in;
• to post tenders, read your documents into structured fields, and deliver them to the contractors you invite;
• to let contractors ask questions, sign up for site visits, and submit quotations and payment receipts;
• to verify tender document fee payments and release documents on the manager's decision;
• to suggest contractors for a tender and to invite them by email or WhatsApp;
• to send the transactional emails you have triggered or asked for;
• to keep records, prevent abuse, and comply with legal obligations;
• to improve the Platform, using aggregated or de-identified information where possible.

A contractor you invite can see the tender, its documents once you release them, and the contact details you choose to share for that tender. Other contractors cannot. On public tender listings, the tender and its scope are visible to anyone, but the poster's contact details are not shown for tenders that have not yet been claimed by their owner — they are masked, and contractors are pointed to the property manager's own sign-up flow instead.

Site visit sign-ups show the property manager how many contractors will attend, and who they are; visitors to a public listing see only the count. We do not sell personal information.

We share information with suppliers who help us run the Platform: hosting and database, email delivery, document storage, document reading and comparison, and business listing searches. They are allowed to use information only to provide those services to us. List of processors and their locations, if you wish to publish one

Account and tender records are kept while the account is open and afterwards for record-keeping, audit and legal purposes. Unclaimed guest tenders that were started but never completed are removed after 30 days. Payment receipts and tender documents are kept as long as the tender they belong to is kept.

You can ask to access, correct, update or delete your personal information, restrict certain processing, receive a copy of it, or object to processing. You can stop marketing messages at any time using the unsubscribe link in the message; you will still receive transactional emails about tenders you are involved in.

Requests to Privacy contact email. We may need to confirm your identity first, and some records must be kept for legal or audit reasons.

We use essential cookies and browser storage to keep you signed in and to make the site work, and log data to understand how the Platform is used. Analytics tools used, and how to opt out, if any

Access is protected by authentication, role checks and per-record access rules, and documents are stored in private storage that is only released through short-lived, controlled links. No method of storage or transmission is completely secure, so we cannot promise absolute security — please tell us immediately if you believe your account has been accessed without permission.

Information may be processed outside Malaysia by our service providers. We take steps to require comparable protection, and we comply with the Personal Data Protection Act 2010 where it applies.

The Platform is for businesses and adults, and is not intended for people under 18.

If we change this notice in a way that matters to you, we will tell you before it takes effect and update the "Last updated" date above.

Privacy questions: Privacy contact email or Phone number. Postal: Registered address.