Privacy Policy

1. Information We Collect

We collect the following personal information when you contact us or enrol in a session:

• Full name
• Email address
• Phone number (optional, if provided)
• Enquiry or message content submitted via our contact form

We also collect standard technical data through website cookies (see Section 5). We do not ask for or collect financial account details, identity document numbers, or any sensitive personal data.

2. Legal Basis for Processing

We process your personal information on the following bases under the PDPA:

• Consent — when you submit a contact form or enrol in a session, you consent to us processing your information for that purpose.
• Contract performance — to confirm your enrolment, communicate session details, and provide the service you have engaged.
• Legitimate interest — to improve our sessions and respond to enquiries effectively.

3. How We Use Your Information

• To respond to your enquiry and confirm session availability
• To process your enrolment and communicate session details, including what to bring
• To send session reminders and follow-up information related to your enrolment
• To collect and review participant feedback after sessions
• To maintain records of session attendance for administrative purposes

We do not use your information for unsolicited marketing communications. You may opt out of non-essential communications at any time by writing to [email protected].

4. Data Retention

Contact form submissions and enquiry records are retained for twelve months from the date of last contact. Enrolment records are retained for three years from the date of the session attended, to support administrative and feedback purposes. After these periods, data is securely deleted.

5. Cookies

Our website uses essential cookies to support basic functionality. We may also use analytics cookies to understand how the website is used. We do not place cookies until you have acknowledged our cookie notice. For full details, please see our Cookie Policy.

6. Sharing Your Information

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share information with service providers who assist in operating our website (such as hosting providers) where necessary, subject to confidentiality obligations. We do not transfer personal data outside Malaysia unless required by law.

7. Data Protection Measures

• Contact form submissions are transmitted over encrypted connections (HTTPS)
• Access to stored personal data is restricted to authorised Retiraq staff only
• We conduct periodic reviews of our data handling practices
• In the event of a data breach that affects your rights, we will notify you without undue delay in accordance with PDPA requirements

8. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data held by Retiraq:

• Right of access — to request a copy of personal data we hold about you
• Right to correction — to request correction of inaccurate or incomplete data
• Right to withdraw consent — to withdraw consent to processing at any time
• Right to limit processing — to request that we limit how we use your data in certain circumstances
• Right to enquire — to ask questions about how your data is handled

To exercise any of these rights, please write to [email protected]. We will respond within fourteen working days. For complaints about how your data has been handled, you may contact the Personal Data Protection Commissioner of Malaysia.

9. Third-Party Links

Our website may contain links to external websites, including official government publications. We are not responsible for the privacy practices of these external sites and recommend reviewing their policies separately.

10. Children's Privacy

Our services are intended for adults. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has submitted information to us, please contact us so that we may remove it.

11. Changes to This Policy

If we make material changes to this policy, we will update the date at the top of this page. Where changes are significant, we will make reasonable efforts to notify enrolled participants directly.