Privacy Policy

About This Policy

Quillkraft is the trading name of the plain-language document drafting workshops operated from Level 7, Wisma UOA II, Jalan Pinang, 50450 Kuala Lumpur, Malaysia. We are the data controller for personal information submitted through this website.

This policy applies to information collected via our website contact form and workshop enquiry process. It does not cover data processed under separate written agreements with organisations that engage Quillkraft for workshop delivery.

Our handling of personal data is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia. If you have questions about this policy, write to [email protected].

Data We Collect

We collect personal data only when you choose to provide it. The types of data we may collect include:

• Contact enquiry data — name, email address, phone number (optional), and message text submitted through our website contact form.
• Usage data — anonymous data about how visitors interact with this website, collected through analytics cookies where consent has been given. This may include pages visited, time on site, and device type. It does not identify individuals.
• Cookie data — preferences stored in your browser to remember your cookie consent choice. See Section 6 for detail.

Legal basis for processing: Contact enquiry data is processed on the basis of your consent (provided when you submit the form) and our legitimate interest in responding to workshop enquiries. Analytics data is processed only where you have given explicit consent through the cookie preference tool.

Retention: Contact enquiry data is retained for up to 24 months from the date of last communication, unless you request earlier deletion. Analytics data is retained for up to 14 months in aggregated form.

How We Use Your Data

Personal data submitted through this website is used for the following purposes:

• Responding to workshop enquiries and providing information about our programmes
• Scheduling and administering workshop sessions where an engagement proceeds
• Sending information about future workshops or relevant programme updates, where you have indicated an interest — you may opt out at any time
• Improving the design and content of this website using aggregated, anonymous usage data
• Complying with applicable legal obligations

We do not use your personal data for automated profiling or decision-making that produces legal or similarly significant effects.

Data Sharing

We do not sell personal data. We share it only in the following limited circumstances:

• Service providers — website hosting and email delivery providers who process data on our behalf under contractual data protection terms. These providers do not use data for their own purposes.
• Analytics services — where you have consented to analytics cookies, anonymised usage data may be processed by Google Analytics. This data cannot be used to identify you personally.
• Legal obligations — where required by Malaysian law, a court order, or a legitimate request from a competent authority, we may be required to disclose personal data. We will notify you where legally permitted to do so.

Where data is transferred outside Malaysia (for example, to cloud service providers), we take steps to ensure an adequate level of protection is in place, consistent with the PDPA 2010.

Data Protection Measures

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or loss. These include:

• HTTPS encryption for all data transmitted via this website
• Access to personal data restricted to staff with a direct operational need
• Periodic review of data handling practices and system security
• Use of reputable, contractually-bound service providers for hosting and email

In the event of a personal data breach that is likely to result in a risk to your rights, we will take prompt remedial action and notify you as required by applicable law.

Cookies

This website uses cookies. A brief summary of the categories used:

You can review and update your cookie preferences at any time on our Cookie Policy page.

Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to personal data we hold about you:

To exercise any of these rights, write to [email protected]. We will respond within 21 days. Some rights are subject to conditions and exceptions under the PDPA 2010.

Third-Party Links

This website may contain links to third-party websites, including partner venues, professional bodies, and HRDC. We are not responsible for the privacy practices of those sites. We recommend reading their privacy policies before submitting personal data to them.

Children's Privacy

Our workshops and this website are directed at professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that data from a minor has been submitted without appropriate consent, we will delete it promptly. Contact [email protected] if you have a concern.

Policy Updates

We review this policy periodically and will update it when our data practices change or when required by law. Material changes will be indicated by a revised "Last Updated" date at the top of this page. Continued use of the website after a change constitutes acceptance of the revised policy.

Contact for Data Enquiries

For any questions about this policy, to exercise your data rights, or to report a concern about how your personal data is being handled:

For complaints regarding data protection, you may also contact the Department of Personal Data Protection (JPDP) Malaysia via pdp.gov.my.