Privacy Policy

1. Introduction

Hearthline ("we", "us", "our") is the trading name of the organisation operating at 8 Jalan Pinang, 50450 Kuala Lumpur, Malaysia. This policy describes how we collect, use, store, and protect personal data in connection with our workshops, courses, and consulting engagements.

This policy applies to visitors to our website and to people who enquire about or attend our offerings. It is governed by Malaysian law, including the Personal Data Protection Act 2010 (PDPA).

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, and phone number provided when you complete our enquiry form or contact us directly.
• Booking data: name, contact details, and the offering you have booked or enquired about.
• Website usage data: pages visited, time on site, browser type, and approximate location — collected via analytics cookies where consent has been given.
• Session attendance records: your name and the date you attended a session, held for administrative purposes.

We do not collect any session content. Facilitators do not record what is discussed in workshops or courses. The content of household documents sessions belongs to participants.

Legal basis: contract performance (for bookings), legitimate interest (for enquiry responses), and consent (for analytics cookies).

Retention: contact and booking data is held for 24 months after your last interaction with Hearthline, then deleted. Attendance records are held for 36 months for administrative purposes.

3. How We Use Your Data

• To respond to enquiries about workshops, courses, and consulting engagements.
• To confirm bookings and send practical session information (venue, time, materials required).
• To follow up after a session if you have asked us to.
• To maintain attendance records for our own administrative purposes.
• To understand how our website is used, where analytics consent has been given.

We do not use your data for direct marketing without your explicit consent. We do not sell personal data to any third party.

4. Data Sharing

We share personal data only in the following circumstances:

• Service providers: we use an email hosting provider and a website analytics service. Both process data on our behalf under data processing agreements. We do not use providers outside Malaysia or the EEA for personal data storage.
• Legal obligation: we may disclose data if required by Malaysian law or a valid legal process.

5. Data Protection Measures

• Personal data stored in our systems is protected by access controls limiting access to those who need it for their role.
• Our website uses HTTPS. Data transmitted via the enquiry form is encrypted in transit.
• Session content is not recorded or held by Hearthline. Facilitators do not take notes on what participants discuss.
• In the event of a data breach affecting your personal data, we will notify you within 72 hours of becoming aware, as required by applicable law.

6. Cookies

We use essential cookies necessary for the website to function. We also use optional analytics cookies to understand how pages are visited. You can manage your cookie preferences at any time via our Cookie Policy page. Your preferences are stored in your browser's local storage.

7. Your Rights Under Malaysian PDPA

Under the Personal Data Protection Act 2010, you have the following rights in relation to your personal data held by Hearthline:

• Right of access: to request a copy of the personal data we hold about you.
• Right of correction: to request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time. This does not affect processing carried out before withdrawal.
• Right to object: to object to processing for direct marketing purposes.
• Right to erasure: to request deletion of your personal data, subject to our legal and administrative retention obligations.

To exercise any of these rights, write to [email protected]. We will respond within 21 days. If you are dissatisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

8. Third-Party Links

Our website and materials may include links to external websites, including the professional bodies named in our referral sheets. We are not responsible for the privacy practices of those sites. We recommend reading their privacy policies before providing personal data.

9. Children's Privacy

Hearthline's offerings are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted personal data to us, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy when our practices change or when required by law. We will notify you of material changes by posting the updated policy on our website with a revised date. Continued use of our services after a change constitutes acceptance of the revised policy.

11. Contact

For all privacy-related queries, write to: