Privacy Policy

Introduction

Anyaman Rumah (registered in Penang, Malaysia) takes its responsibilities under Malaysia's Personal Data Protection Act 2010 (PDPA) seriously. This policy explains what personal data we collect through this website and through service delivery, why we collect it, how we use and protect it, and what rights you have in relation to it.

This policy applies to data collected via the website at anyaman.sbs and in the course of providing services to families. It does not apply to third-party websites linked from our pages.

Questions about this policy or how your data is handled can be sent to [email protected].

1. What personal data we collect

Via the website contact form

• Full name (required)
• Email address (required)
• Phone number (optional)
• Message content (optional)

In the course of service delivery

• Names and contact details of the individuals engaging the service
• Document content handled during the Documents and Records Package or Extended Coordination Programme
• Notes produced during facilitated sessions (which are shared with participants and not retained by us after handover)
• Scheduling and calendar information in the Extended Coordination Programme

Automatically collected data

When you visit this website, basic technical data may be logged by our hosting provider (such as IP address, browser type and pages visited). This data is used for security and maintenance purposes only. We may use analytics cookies if you have consented to them — see our Cookie Policy for details.

Legal basis for processing

• Consent — for cookie-based analytics and for processing enquiry form submissions
• Contractual necessity — for personal data processed in the course of delivering a service
• Legitimate interest — for basic website security logging

2. How we use personal data

• To respond to enquiries submitted through the contact form
• To deliver the service the family has engaged us for
• To maintain administrative records of service engagements for our own legal obligations
• To send service-related communications (such as meeting confirmations and written documents produced as part of the service)

We do not sell personal data. We do not use personal data for marketing purposes without explicit consent. We do not share personal data between family members without explicit agreement from all parties concerned.

Data retention

• Enquiry form data: retained for 12 months from the date of submission, then deleted
• Service delivery records (administrative records of engagements): retained for 7 years in accordance with Malaysian accounting and business record requirements
• Documents handled on behalf of clients: not retained after handover to the family; all copies deleted or securely destroyed within 14 days of handover

3. How we protect personal data

• Digital files transferred to clients are encrypted before transfer
• Access to client records within the practice is limited to the team members working on that engagement
• Physical documents are stored in locked cabinets during the period of active work and destroyed securely after handover
• The website is served over HTTPS
• In the event of a data breach that is likely to affect your personal data, we will notify you without undue delay and in accordance with our obligations under the PDPA

4. Cookies

This website uses cookies for basic site functionality and, if you consent, for analytics. Full details of the cookies used and how to manage your preferences are set out in our Cookie Policy.

5. Your rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request that inaccurate personal data be corrected
• Right to withdraw consent — where processing is based on consent, you may withdraw consent at any time; this does not affect processing that occurred before withdrawal
• Right to prevent processing — in certain circumstances, to object to or restrict processing of your personal data
• Right to complain — you may lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your rights under the PDPA have been infringed

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.

6. Third-party links

This website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend that you read their privacy policies separately.

7. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18 through the website contact form. In the course of service delivery, information about minors (such as children's school schedules in the Extended Coordination Programme) is handled only as necessary for the service and with the agreement of the responsible adult family member.

8. Changes to this policy

We may update this policy from time to time. The date at the top of the page reflects the most recent revision. Material changes will be noted on this page. Continued use of the website after a change constitutes acceptance of the updated policy.

9. Contact

Data controller: Anyaman Rumah
15 Jalan Kelawai, 10250 George Town, Pulau Pinang, Malaysia

Privacy enquiries: [email protected]
General enquiries: [email protected] | +60 4-229 6183