Privacy Policy

1. What We Collect

When you enquire or enrol in a Tubuhku programme, we collect the following personal information:

• Name — to address you correctly and to personalise programme communications
• Email address — for scheduling, session notes, and service-related communications
• Phone number — optional, used only to follow up on enquiries if email is not suitable
• Session notes — observations relevant to your coaching block or check-in (not shared)
• Website usage data — via analytics cookies, see our Cookie Policy

Retention: Contact and enquiry data is kept for up to 24 months. Coaching session notes are retained for the duration of your programme plus 12 months.

2. How We Use Your Information

• To respond to your enquiry and confirm session details
• To deliver and adapt your coaching or membership programme
• To send session notes, schedule reminders, and programme updates
• To send information about new content or formats — only with your consent, and you may opt out at any time
• To improve our website and content using anonymised analytics data

Legal basis for processing: Contract performance (for programme delivery), consent (for marketing), and legitimate interest (for analytics and service improvement).

3. Data Sharing

We do not sell your personal information. We share data only in the following limited circumstances:

• Service providers: We use trusted third-party tools for website analytics (Google Analytics) and email delivery. These providers process data on our behalf under data processing agreements.
• Legal requirements: If required by Malaysian law or a valid court order.

4. Data Security

We use standard security measures to protect your data, including access controls, encrypted communications (HTTPS), and limiting data access to those who need it to deliver your programme. In the event of a data breach affecting your rights, we will notify you within the timeframe required by Malaysian PDPA.

5. Cookies

Our website uses cookies for essential functionality and, with your consent, for analytics. You can manage your cookie preferences at any time. Full details are in our Cookie Policy.

6. Your Rights Under Malaysian PDPA

As a data subject under the Personal Data Protection Act 2010, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Ask us to correct inaccurate or incomplete data
• Withdrawal of consent: Withdraw consent for marketing communications at any time
• Restriction: Request that we limit how we process your data in certain circumstances
• Complaint: Lodge a complaint with the Personal Data Protection Commissioner of Malaysia (pdp.gov.my)

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies before submitting personal information.

8. Children's Privacy

Our programmes are intended for individuals aged 18 and above. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information through our site, please contact us so we can remove it promptly.

9. Policy Updates

We may update this policy from time to time. When material changes are made, we will notify active participants by email. Continued use of our services after any update constitutes acceptance of the revised policy. The "Last Updated" date at the top of this page will always reflect the current version.