Privacy Policy

Quietharbor Enterprise ("Quietharbor", "we", "us", "our") is committed to protecting the personal information of people who contact us, attend our programmes, or use this website. This Privacy Policy explains what information we collect, how we use it, and the choices you have in relation to it.

We operate under Malaysian law and the Personal Data Protection Act 2010 (PDPA). By engaging with our website or our programmes, you confirm that you have read and understood this policy.

If you have questions about this policy, contact us at [email protected].

We collect personal data in the following ways:

Contact form enquiries: When you submit the contact form on this site, we collect your name, email address, and phone number (if provided), and the content of your message.

Programme enrolment: When you book a session or enrol in the stewardship plan, we collect your name, email address, phone number, and where relevant, the address of the household whose documents will be managed.

Session participation: For one-to-one and stewardship plan participants, we may handle copies of documents you bring or send to sessions. These are used solely for the clerical purpose of the programme and remain your property.

Website usage: We may use cookies and basic analytics tools to understand how visitors use this site. See Section 5 and our Cookie Policy for details.

Legal basis: We process personal data on the basis of your consent (for enquiries and enrolment) and for the performance of a service you have requested (for programme delivery).

Retention: Contact enquiry data is retained for twelve months. Programme participant records are retained for three years after the programme ends, then securely deleted. Document copies made for stewardship purposes are deleted or returned at the end of the arrangement.

We use personal data only for the purpose for which it was collected:

Responding to enquiries: Contact form submissions are used to reply to your question and, if relevant, to confirm a booking or provide programme information.

Delivering programmes: Participant data is used to schedule and deliver the programme you have enrolled in and to send reminders related to that programme.

Stewardship reminders: For stewardship plan participants, we use your contact details to send the four quarterly reminders and to schedule the annual review meeting.

We do not: sell personal data, share it with advertisers, or use it for any purpose other than programme delivery and communication directly related to your enquiry or enrolment.

Third parties: We do not share personal data with third parties except where required by Malaysian law or where you have explicitly requested a referral to a professional on our directory.

Physical documents are held in locked storage accessible only to the assigned programme assistant. Digital records are held in password-protected systems with access restricted to staff with a direct role in your programme.

We do not transmit personal data over unencrypted channels. Email communication uses standard business email with TLS encryption in transit.

In the event of a data breach that affects your personal information, we will notify you as soon as reasonably practicable in accordance with our obligations under the PDPA and will take steps to contain and address the breach.

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that took place before the withdrawal.
• Right to object: You may object to the use of your data for marketing purposes.
• Right to inquire: You may contact the Department of Personal Data Protection Malaysia (JPDP) if you have concerns about how we handle your data.

To exercise any of these rights, contact us at [email protected] or write to us at the address below. We will respond within twenty-one days.