Privacy Policy

2. Information We Collect

We collect only the information that is necessary to respond to enquiries, administer course enrolments, and maintain booking records. This includes:

• Name and contact details (telephone number and email address) submitted via the website enquiry form.
• Session or programme preferences noted at the time of booking.
• Correspondence records held in email or written form relating to a booked service.
• Basic website usage data collected through session cookies — pages visited and approximate session duration — used solely for internal review of how this site is read.

We do not collect payment card numbers, identity document numbers, or any government-issued reference codes through this website. Any documents presented during an in-person indexing session remain in the possession of the participant at all times; we index only labels and filing locations, not document contents.

3. How We Use Your Information

Information submitted through this site is used for the following purposes only:

• Responding to your enquiry and confirming session or course availability.
• Sending booking confirmations, venue details, and pre-session notes by email.
• Maintaining a record of services rendered for accounting and administrative purposes.
• Reviewing aggregate, anonymised website usage data to improve the organisation and readability of this site.

We do not use your information to build marketing profiles, send promotional communications beyond a direct response to your enquiry, or share data with third-party advertising platforms.

4. Legal Basis for Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), we process personal data on the following bases:

• Consent — where you have submitted information through the website contact form, ticked the privacy acknowledgement, and voluntarily provided your contact details.
• Contractual necessity — where processing is required to confirm a booking, administer a session, or fulfil the terms of an agreed programme.
• Legitimate interest — for retaining administrative records in accordance with normal business practice, and for reviewing anonymised site usage data.

5. Data Sharing

We do not sell, rent, or exchange personal data with third parties for commercial purposes. We may share limited data in the following circumstances:

• With our email hosting provider, solely for the purpose of transmitting booking-related correspondence. The provider processes data on our behalf under a data processing agreement.
• Where required by applicable Malaysian law, a court order, or a regulatory authority with lawful authority to demand disclosure.

No data is transferred to servers outside Malaysia without adequate safeguards in place.

6. Retention Periods

Enquiry records that do not lead to a booking are deleted within 90 days of the last correspondence. Booking and session records are retained for seven years from the date of the service, in line with standard Malaysian accounting obligations. Website cookie data is retained for no longer than 12 months.

7. Cookies

This website uses a small number of session and preference cookies. These cookies do not identify you personally. They record whether you have acknowledged the cookie notice on this site and note basic navigation patterns for internal review. No advertising or cross-site tracking cookies are placed. Full details are available in our Cookie Policy.

8. Your Rights

Under the PDPA and related data protection principles, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of any inaccurate or incomplete data.
• Withdraw consent for processing, where consent was the legal basis.
• Request erasure of data where no legal obligation requires us to retain it.

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days. We may need to verify your identity before acting on a request.

9. Security

We maintain reasonable technical and organisational measures to protect personal data from unauthorised access, accidental loss, or disclosure. These include secure email protocols, password-protected administrative systems, and restricted access to booking records. No transmission over the internet is entirely without risk; we nonetheless take all practicable steps to keep your data safe.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The revision date at the top of this page will be updated accordingly. We encourage visitors to read this page periodically.

11. Contact

If you have a question about this policy or about how your data is handled, please contact us: