Privacy Policy

1. Data Controller

The data controller responsible for your personal information is:

2. Personal Data We Collect

We collect personal data in the following ways:

2.1 Data You Provide Directly

• Full name and email address (required when contacting us or registering)
• Phone number (optional, if provided in our contact form)
• Message content submitted via our contact or enquiry forms
• Programme registration details

2.2 Data Collected Automatically

• Browser type, device type, and operating system
• IP address and general geographic location
• Pages visited, time spent on site, and referral source
• Cookie data (see our Cookie Policy for details)

Legal basis for processing: Consent (for marketing communications and cookies), Legitimate interest (for website analytics and security), and Contract performance (for programme delivery).

Retention: Contact enquiry data is retained for up to 2 years. Programme participant records are retained for up to 5 years for administrative purposes. Analytics data is retained as configured by third-party platforms (typically 14 months for Google Analytics).

3. How We Use Your Personal Data

• To respond to your enquiries and provide information about our programmes
• To process registrations and manage programme participation
• To send you information about Mintara programmes if you have opted in
• To improve our website and user experience through aggregated analytics
• To comply with legal obligations under Malaysian law
• To detect and prevent fraudulent or abusive activity on our site

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

4. Data Sharing with Third Parties

We may share your data with the following categories of third parties, only where necessary:

• Analytics providers — such as Google Analytics, to understand site usage (anonymised where possible)
• Email service providers — for sending programme communications you have requested
• IT and hosting providers — who support the operation and maintenance of our website
• Legal authorities — where required by Malaysian law or to protect rights and safety

All third-party processors are required to handle your data securely and in accordance with applicable data protection laws.

5. How We Protect Your Data

• Our website is served over HTTPS with SSL/TLS encryption
• Access to personal data is restricted to authorised Mintara staff only
• We do not store full credit card or payment details on our systems
• Our systems undergo periodic security reviews
• In the event of a data breach, we will notify affected individuals and the relevant authorities as required under Malaysian law

6. Cookies

We use cookies to improve website functionality and understand how visitors use our site. You can manage your cookie preferences at any time. For full details on the types of cookies we use and how to control them, please see our Cookie Policy.

7. Your Rights Under Malaysian PDPA

Under the Personal Data Protection Act 2010, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request that we correct inaccurate or incomplete data
• Right to withdraw consent — at any time, for processing based on your consent
• Right to limit processing — to request that we stop using your data for certain purposes

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

If you believe we have not handled your data correctly, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies before providing any personal data.

9. Children's Privacy

Mintara's programmes are designed for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us at [email protected] so we can remove it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised "Last Updated" date. Continued use of our website after any changes constitutes your acceptance of the updated policy.