Privacy Policy

1. Introduction

Quietharbor ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our website and register for our workshops and programmes. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it.

This policy applies to personal data processed through the Quietharbor website at https://quietharboriopo.pro and through our workshop registration processes. We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: Full name, email address, and phone number provided through our contact form or workshop registration.
• Enquiry content: The content of messages submitted through our contact form, including questions about specific programmes.
• Website usage data: Technical information including IP address, browser type, pages visited, and session duration, collected through analytics tools where consent is provided.
• Cookie data: Cookie preferences stored in your browser, as described in our Cookie Policy.

We do not collect any household document data. No personal records, financial statements, or identity documents are submitted to Quietharbor through our website or during sessions.

3. Legal Basis for Processing

Under Malaysia's Personal Data Protection Act 2010, we process your personal data on the following grounds:

• Consent: For optional analytics and marketing cookies, where you have provided consent through our cookie banner.
• Contractual necessity: For processing enquiries and registrations related to our workshops and programmes.
• Legitimate interest: For maintaining website functionality and responding to enquiries about our services.

4. How We Use Your Data

• Responding to enquiries submitted through our contact form
• Providing information about workshop availability and programme details
• Processing registrations for sessions and programmes
• Sending administrative communications related to registered sessions
• Improving our website and session offerings based on usage data (where consent is given)
• Complying with applicable legal obligations

We do not use your personal data for automated decision-making or profiling.

5. Data Sharing

We do not sell your personal data. We may share limited personal data with:

• Website hosting providers: For maintaining and operating the website infrastructure.
• Analytics providers: Where you have consented to analytics cookies, aggregated usage data may be processed by third-party analytics services.
• Legal authorities: Where required by Malaysian law or a valid legal process.

6. Data Retention

We retain personal data for the following periods:

• Enquiry data: Up to 24 months from the date of the enquiry, unless a programme registration follows.
• Registration data: Up to 36 months from the conclusion of the last programme attended.
• Website analytics data: As determined by the analytics provider's retention settings, subject to your cookie preferences.

After the applicable retention period, personal data is securely deleted or anonymised.

7. Data Protection Measures

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. These include:

• Use of HTTPS encryption for all website communications
• Access controls limiting data access to authorized personnel only
• Regular review of data handling procedures
• Prompt notification to affected individuals in the event of a data breach affecting their rights

8. Cookies

Our website uses cookies to support functionality and, where consent is given, to collect usage analytics. You can manage your cookie preferences at any time through our Cookie Policy page.

Essential cookies required for basic website function are set without requiring consent. All other cookie categories require your explicit consent, which you can provide or withdraw at any time.

9. Your Rights

Under the Personal Data Protection Act 2010, you have the following rights in relation to your personal data held by Quietharbor:

• Right of access: Request a copy of personal data we hold about you.
• Right to correction: Request correction of inaccurate personal data.
• Right to withdraw consent: Withdraw consent for data processing at any time, without affecting the lawfulness of processing prior to withdrawal.
• Right to limit processing: Request that we limit how we use your personal data in certain circumstances.
• Right to complain: Lodge a complaint with the Department of Personal Data Protection Malaysia if you believe we have not handled your data in accordance with the PDPA.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 business days.

10. Third-Party Links

Our website may contain links to external sites. Quietharbor is not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any third-party site you visit through a link on our website.

11. Participants Under 18

Our workshops and programmes are designed for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided personal data through our website, please contact us promptly at [email protected] and we will take steps to remove the data.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page will be revised accordingly. Material changes will be communicated via notice on our website. Continued use of our website after such changes constitutes acceptance of the revised policy.