Legal Document
Privacy Policy
This document sets out how Quietyears collects, holds, uses, and discloses personal data submitted through this website, and describes the rights available to individuals under applicable Malaysian law.
LAST UPDATED: 01 JANUARY 2025
VERSION: 1.0
01
Data Controller
The data controller for personal information submitted through this website is Quietyears, registered and operating from the following address:
Quietyears
No. 49, Jalan Tun Sambanthan 3
Brickfields, 50470 Kuala Lumpur
Malaysia
Tel: +60 19 8273 5462 | Email: [email protected]
All enquiries relating to the handling of personal data may be directed to the above contact details.
02
Data We Collect
Quietyears collects only the personal data that individuals choose to provide, together with certain technical data generated automatically when this website is accessed. The categories of personal data we hold are as follows.
Full name, email address, and telephone number, as submitted via the contact form on this website.
The content of any message or enquiry submitted through the contact form, including any programme preferences indicated.
IP address, browser type, operating system, referring URL, and pages visited, collected automatically through server logs and analytics tools where enabled.
Preference records stored in the browser regarding cookie consent, as described in the Cookie Policy. No session or tracking cookies are placed without consent.
Quietyears does not collect sensitive personal data, including health information, financial account numbers, or identification document numbers.
03
How Data Is Collected
Personal data is collected through two channels on this website:
Contact form submissions. When a visitor completes and submits the contact form, the name, email address, telephone number, and message content entered are transmitted to Quietyears by electronic means and stored in the organisation's correspondence records.
Quietyears does not purchase, obtain from brokers, or otherwise acquire personal data from external sources. All personal data held by Quietyears has been submitted directly by the individual to whom it relates.
04
Purposes of Processing
Personal data collected through this website is used only for the following purposes:
To respond to enquiries submitted through the contact form, including providing information about session dates, programme details, and fees.
To log and file correspondence in Quietyears' internal records for administrative continuity.
To send session confirmation notes and pre-session preparation materials where a session booking has been confirmed.
To analyse aggregate, non-personal website usage data for the purpose of improving the organisation and content of this website.
Quietyears does not use personal data for marketing communications, profiling, or automated decision-making of any kind.
05
Storage and Retention
Personal data submitted through this website is stored on servers located in Malaysia or in jurisdictions that maintain adequate data protection standards consistent with the Personal Data Protection Act 2010 (PDPA).
Enquiry correspondence is retained for a period of two years from the date of the last exchange, after which it is deleted from active records. Where a programme booking follows from an enquiry, records related to that booking are retained for seven years from the date of the session, in accordance with standard administrative practice.
When the retention period for a record has elapsed, the personal data in that record is deleted or anonymised so that it can no longer be associated with an identifiable individual.
06
Disclosure to Third Parties
Quietyears does not sell, rent, or transfer personal data to any third party for commercial purposes. Personal data may be shared in the following limited circumstances only:
Service providers. Third-party service providers who assist in operating this website or delivering correspondence (such as email hosting providers) may process personal data on Quietyears' behalf, strictly for the purposes described in this policy and under contractual obligation.
Legal obligation. Where Quietyears is required by law, regulation, or court order to disclose personal data, it will do so to the extent required and will notify the individual where permitted to do so.
In all other circumstances, personal data is held within Quietyears' own correspondence and administrative systems and is not disclosed to external parties.
08
Your Rights
Under the Personal Data Protection Act 2010 (Malaysia), individuals whose personal data is held by Quietyears have the following rights:
The right to request a copy of the personal data Quietyears holds about you.
The right to request that inaccurate or incomplete personal data be corrected.
The right to withdraw consent to processing at any time, where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
The right to request that Quietyears cease processing your personal data where there are grounds relating to your particular situation.
Requests to exercise any of the above rights should be submitted in writing to [email protected]. Quietyears will respond within 21 days of receipt of the request. Where a request requires additional time to fulfil, the individual will be notified of the expected timeframe.
09
Security
Quietyears takes reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, loss, or destruction. These measures include the use of encrypted connections for data transmitted through this website (HTTPS), access controls on correspondence records, and regular review of data handling practices.
No method of electronic transmission or storage is completely secure. While Quietyears applies the measures described above, it cannot warrant absolute security. In the event of a data breach that is likely to result in a risk to individuals, Quietyears will take steps to mitigate the breach and, where required, notify relevant parties in accordance with applicable law.
10
Changes to This Policy
Quietyears may update this Privacy Policy from time to time to reflect changes in its data handling practices or applicable law. When a material change is made, the date at the top of this document will be updated and, where appropriate, a notice will be placed on the homepage of this website.
Continued use of this website after a policy update constitutes acceptance of the revised terms. Individuals who do not accept the revised policy are asked to cease using the website and to contact Quietyears if they wish to request deletion of any personal data previously submitted.
11
Contact
All questions, requests, or concerns relating to this Privacy Policy or the handling of personal data by Quietyears should be directed to:
Quietyears — Data Enquiries
No. 49, Jalan Tun Sambanthan 3
Brickfields, 50470 Kuala Lumpur
Email: [email protected]
Tel: +60 19 8273 5462
If an individual is not satisfied with how Quietyears handles a data-related request or concern, they may refer the matter to the Department of Personal Data Protection (JPDP) of Malaysia, which is the competent supervisory authority under the Personal Data Protection Act 2010.
Related Documents