Privacy Policy

1. Introduction

Slowharbor ("we", "us", "our") is committed to protecting the personal data of the individuals and families who use our services. This policy describes the personal data we collect, how we use it, how we protect it, and what rights you have under Malaysian law.

Slowharbor operates as a records information and educational briefing service based at 22 Jalan Sultan Ismail, 25000 Kuantan, Pahang, Malaysia. This policy applies to all data collected through our website and through session registrations.

If you have questions about this policy, please contact us at [email protected].

2. Personal Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, telephone number
• Session enquiry information: the type of session you are enquiring about and any details you choose to include in your message
• Attendance records: name and contact details of briefing attendees, for session administration purposes
• Website usage data: pages visited, session duration, browser type (via cookies, where consented)

We collect personal data through:

• The contact form on our website
• Session registration and intake forms
• Direct telephone and email communication
• Cookies and analytics tools, where you have consented to their use

Legal Basis for Processing

We process your personal data on the following legal bases under the Personal Data Protection Act 2010 (Malaysia):

• Consent: for marketing communications and non-essential cookies, where you have provided explicit consent
• Contract: to fulfil the service you have booked or enquired about
• Legitimate interests: for internal record-keeping and service improvement, where this does not override your rights

3. How We Use Your Personal Data

We use your personal data to:

• Respond to your enquiries and arrange session appointments
• Administer briefing and records build appointments
• Maintain correspondence logs for stewardship engagements (from copies you provide)
• Send session confirmations and any relevant preparatory information
• Comply with our legal obligations under Malaysian law
• Improve our website and session content (using anonymised analytics data)

We do not sell your personal data. We do not share your personal data with third parties except where:

• You have provided explicit consent
• We are required to do so by law
• We use service providers (such as email hosting) who process data on our behalf under strict data processing agreements

Data Retention

Contact enquiry data is retained for 24 months from the date of last contact. Session attendance records are retained for 36 months. You may request deletion at any time (see Section 6).

4. How We Protect Your Data

• Access to personal data is restricted to staff who need it to deliver the session you have booked
• Electronic records are stored on password-protected systems with access controls
• Physical documents you bring to sessions are not retained by Slowharbor after the appointment closes
• Scanned copies of documents are placed only on the client's own device and not retained on our systems
• In the event of a data breach, we will notify affected individuals and the relevant authority as required by law

5. Cookies

Our website uses cookies. Essential cookies are necessary for basic site functionality and cannot be disabled. Optional cookies (analytics, marketing, preferences) are used only where you have provided consent via our cookie banner.

You can manage your cookie preferences at any time. See our Cookie Policy for full details.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right of correction: to request correction of inaccurate or incomplete data
• Right to withdraw consent: to withdraw consent for processing where consent is the legal basis, without affecting the lawfulness of prior processing
• Right to limit processing: to request that we restrict the use of your data in certain circumstances
• Right to complain: to lodge a complaint with the Personal Data Protection Department of Malaysia (pdp.gov.my) if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected] or by post at 22 Jalan Sultan Ismail, 25000 Kuantan, Pahang. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external websites — including the websites of government agencies or registered professional bodies. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policy of any external site you visit.

8. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected] so that it can be deleted.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For significant changes, we will make a notice visible on our website. Continued use of our services after an update constitutes acceptance of the revised policy.

10. Contact for Privacy Matters