Privacy Policy

Introduction

Arbutrix Moor Sdn. Bhd. ("Arbutrix Moor", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy describes how we collect, use, retain, and disclose information relating to individuals who visit our website, enquire about our programmes, or participate in our educational services.

This Policy is prepared in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and applies to personal data processed in connection with our commercial activities.

By using our website or engaging with Arbutrix Moor, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of it, please refrain from submitting your personal data through our channels.

1. Personal Data We Collect

We may collect the following categories of personal data when you interact with us:

• Identification data: full name, identity card number (where required for invoicing or certification)
• Contact data: email address, telephone number, mailing address
• Programme data: programme enrolment records, session attendance, assessment results
• Payment data: billing name, payment reference numbers (we do not store full card details)
• Technical data: IP address, browser type, pages visited, session duration, cookie identifiers
• Communications data: records of correspondence submitted through our contact form or by email

We collect only what is necessary for the specific purpose described at the point of collection. You are not obliged to provide any data to us, but declining to do so may mean we are unable to respond to your enquiry or provide certain services.

2. How We Use Your Personal Data

We use personal data for the following purposes:

• Responding to enquiries and providing information about our programmes
• Processing enrolments and administering programme participation
• Issuing invoices, receipts, and certificates of completion
• Communicating relevant programme updates, schedules, or changes
• Improving the quality and relevance of our educational content
• Maintaining records in compliance with applicable law
• Sending periodic education-related communications where you have consented
• Analysing aggregate website usage to improve user experience

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

3. Legal Basis for Processing

Under the PDPA, we process personal data on one or more of the following grounds:

• Consent: where you have given clear consent for a specific purpose (e.g., receiving our newsletter)
• Contract: where processing is necessary to perform a contract with you (e.g., programme enrolment)
• Legal obligation: where processing is required under Malaysian law
• Legitimate interests: where we have a legitimate interest that does not override your rights (e.g., improving our website and services)

4. Disclosure of Personal Data

We do not sell or rent your personal data. We may share data with:

• Service providers: third-party processors who assist us with hosting, payment processing, or communications, bound by confidentiality obligations
• Professional advisers: legal, accounting, or auditing professionals where required
• Regulatory bodies: government or regulatory authorities as required by Malaysian law
• Facilitators: programme facilitators engaged to deliver sessions, who receive only the data necessary for that purpose

All third parties with whom we share personal data are required to handle it in a manner consistent with this Policy and applicable law.

5. Data Retention

We retain personal data for as long as it is necessary to fulfil the purposes described in this Policy, or as required by law. Specifically:

• Enquiry and correspondence records: up to 2 years from last contact
• Enrolment and programme records: up to 7 years from programme completion, for administrative and legal compliance purposes
• Payment records: in accordance with applicable tax and accounting requirements
• Marketing consent records: until consent is withdrawn

6. Data Security

We implement reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, or alteration. These include access controls, encrypted transmission where applicable, and regular review of our data handling practices.

No transmission over the internet is entirely secure. While we take care to protect your data, we cannot warrant absolute security. If you have concerns about a specific data submission, please contact us directly.

7. Your Rights Under the PDPA

Subject to the provisions of the PDPA and applicable exceptions, you have the right to:

• Access personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent to processing based on consent, without affecting the lawfulness of prior processing
• Request deletion of your personal data where we have no continuing legal basis for retention
• Object to processing for direct marketing purposes

To exercise any of these rights, please contact us in writing at the address below or by email. We will respond within a reasonable period and in accordance with the PDPA.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve functionality and understand how the site is used. For full information on the types of cookies we use and how to manage your preferences, please refer to our Cookie Policy.

9. Third-Party Links

Our website may contain links to third-party websites or resources. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external sites you visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When changes are made, the revised Policy will be published on this page with an updated date. Continued use of our website or services following such changes constitutes acknowledgement of the updated Policy.

11. Contact Us

For any questions, access requests, corrections, or complaints relating to this Policy or to your personal data, please contact: