Privacy Policy

1. Introduction

Rumahwise ("we", "us", "our") is committed to handling personal data responsibly and in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy sets out how we collect, use, store, and protect the personal data of individuals who contact us, attend our programmes, or use our website.

This policy applies to all personal data we process in connection with the operation of Rumahwise, including enquiries made through our website, enrolment in our courses, and delivery of our corporate consulting engagements.

Questions about this policy may be directed to [email protected].

2. Personal Data We Collect

We collect personal data only where necessary for the purposes described in this policy. The categories we may collect include:

• Contact details: name, email address, telephone number
• Enquiry content: the message submitted through our contact form or sent to us directly
• Programme participation data: attendance records for courses attended
• Technical data: IP address, browser type, and pages visited, collected through analytics cookies where consent has been given

Legal basis for processing: We process personal data on the basis of consent (for enquiries and marketing communications), contract performance (for course enrolment and corporate engagements), and legitimate interests (for analytics and site improvement).

Retention periods: Contact and enquiry data is retained for two years from the date of last contact. Programme participation records are retained for five years for administrative purposes. Technical data is retained for 13 months.

3. How We Use Personal Data

Personal data we collect is used for the following purposes:

• Responding to enquiries and providing information about our programmes
• Processing enrolments and delivering courses and consulting engagements
• Sending programme-related communications to enrolled participants
• Improving our website and understanding how it is used (with consent)
• Complying with legal or regulatory requirements

We do not sell personal data. We do not share personal data with third parties for their own marketing purposes.

We may share personal data with service providers who process it on our behalf — for example, email hosting providers — under data processing agreements that require them to protect the data and use it only for specified purposes.

4. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss. These include:

• HTTPS encryption for data transmitted through our website
• Access controls limiting who within Rumahwise can access personal data
• Secure storage of digital records with access logging
• Procedures for identifying and responding to data incidents

In the event of a data breach affecting personal data, we will notify affected individuals and the relevant authority as required by Malaysian law.

5. Cookies

Our website uses cookies. Essential cookies are necessary for the site to function. Analytics cookies help us understand how the site is used. We set analytics and other optional cookies only where you have given consent through our cookie banner.

For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

6. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Access: the right to request a copy of personal data we hold about you
• Correction: the right to request correction of inaccurate or incomplete data
• Withdrawal of consent: the right to withdraw consent to processing where processing is based on consent
• Limitation: the right to request that we limit processing in certain circumstances
• Complaint: the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external websites, including government portals and referral resources. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policies of any external site you visit.

8. Children's Privacy

Our website and programmes are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been submitted by someone under 18, we will delete it promptly.

9. Policy Updates

We review this policy periodically and update it when necessary. The "Last Updated" date at the top of this page reflects the most recent revision. Where changes are material, we will notify enrolled participants by email.

Continued use of our website after a policy update constitutes acceptance of the revised policy.

10. Contact Information

For any questions about this policy or about how we handle your personal data: