Privacy Policy

1. Introduction

Bayu Permata ("we", "us", "our") is committed to protecting the personal data of those who interact with us, including enquirers, programme participants, and visitors to this website. This policy describes how we collect, use, store, and protect personal information, and explains the rights available to individuals whose data we hold.

This policy is written in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Our registered address is 235 Jalan Klang Lama, 58000 Kuala Lumpur, Malaysia.

For questions relating to this policy or to exercise any of the rights described below, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, telephone number — collected via the website enquiry form or direct correspondence.
• Programme registration data: Name, email address, telephone number, and any information provided in enrolment communications.
• Written exercise materials: Content produced by participants during programmes. These are held privately and are not reviewed by other participants or staff beyond the facilitator assigned to that programme.
• Website usage data: Standard web analytics data, including pages visited, browser type, and approximate location — collected via cookies where consent has been given.

We do not collect sensitive personal data such as financial account numbers, national identity card details, or health information unless specifically and voluntarily provided by a participant in a private session context, in which case such information is treated with the highest level of confidentiality.

Legal basis for processing: Contact form submissions are processed on the basis of consent. Programme administration is conducted on the basis of contractual necessity. Website analytics are processed on the basis of consent (where given via the cookie modal).

3. How We Use Your Data

Personal data is used for the following purposes:

• Responding to enquiries submitted via the website contact form
• Administering enrolment in and delivery of our programmes
• Communicating programme scheduling, session reminders, and relevant updates
• Maintaining records required for programme administration
• Analysing website usage to improve our online presence (analytics cookies only, and only where consent has been given)

We do not use personal data for marketing communications unless explicit consent has been provided. We do not share personal data with financial product providers, investment platforms, insurance companies, or advertising networks.

4. Data Retention

We retain personal data for the following periods:

• Enquiry correspondence: 12 months from last communication, unless enrolment follows.
• Programme participant records: 3 years from programme completion date, for administrative and record-keeping purposes.
• Written exercise materials: Returned to or deleted for the participant at programme end, unless the participant requests we hold a copy. Copies held at participant request are deleted within 2 years.
• Website analytics data: As per our analytics provider's standard retention settings, typically 14 months.

5. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• Encrypted email storage and secure password practices
• Restricted access — only staff with a direct programme administration role can access participant records
• Written exercise materials stored separately from contact information
• Annual review of data handling practices

In the event of a data breach that affects participant data, we will notify affected individuals and, where required, the relevant supervisory authority, within a reasonable timeframe.

6. Cookies

This website uses cookies for basic functionality (session management) and, where consent is given, for website analytics. A cookie consent modal is presented on your first visit. You may change your cookie preferences at any time via our Cookie Policy page.

7. Your Rights Under Malaysian PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that we correct inaccurate or incomplete personal data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Right to limit processing: You may request that we cease using your personal data for marketing or non-essential purposes.
• Right to prevent processing causing damage or distress: You may contact us if you believe our processing of your data is causing or likely to cause you damage or distress.

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days of receipt.

If you believe your data protection rights have not been respected, you may lodge a complaint with the Department of Personal Data Protection (PDPD) of Malaysia.

8. Third-Party Links

Our website may contain links to third-party resources, including regulatory bodies and professional associations. We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policies of any external site you visit.

9. Children's Privacy

Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently received data from a minor, please contact us at [email protected] and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of our website or services after a change constitutes acceptance of the updated policy. For material changes, we will notify programme participants by email where practicable.

11. Contact for Data Enquiries

For questions about this Privacy Policy or to exercise your rights:

• Email: [email protected]
• Post: Bayu Permata, 235 Jalan Klang Lama, 58000 Kuala Lumpur, Malaysia
• Phone: +60 3-7195 8264