Privacy Policy

1. Introduction

Quietleaf ("we", "us", "our") is committed to protecting the privacy of individuals who interact with our website and enrol in our educational workshop programmes. This Privacy Policy explains how we collect, use, store, and protect personal data in connection with our services.

This policy applies to personal data collected through our website at quietleaf.sbs, through our contact and enquiry forms, and through the enrolment process for our programmes. It does not apply to information collected through third-party websites or services that we may link to.

For questions about this policy, contact us at [email protected].

2. Data We Collect

We collect only the personal data necessary to provide our educational programmes and to respond to enquiries.

• Contact information: name, email address, and phone number — provided when you submit our enquiry form or register for a programme.
• Programme enrolment data: programme name, date of enrolment, and payment records.
• Website usage data: anonymised analytics data collected via cookies, including pages visited, session duration, and device type.
• Communications: messages you send to us by email or through our website form.

We do not collect any personal financial data (account numbers, salary details, spending records) from participants. Reflection materials produced during workshop sessions remain with participants; we do not retain copies.

Legal basis for processing: contract performance (enrolment and programme delivery), legitimate interest (responding to enquiries, improving our programmes), and consent (marketing communications and analytics cookies where applicable).

Retention: contact and enrolment records are retained for up to three years after last interaction. Communications are retained for two years. Anonymised analytics data may be retained indefinitely.

3. How We Use Personal Data

• To respond to enquiries about our programmes.
• To process enrolment and deliver our educational workshop programmes.
• To send programme-related communications (session reminders, follow-up calls, relevant updates).
• To improve the quality and content of our programmes based on aggregated, anonymised feedback.
• To comply with legal and regulatory obligations applicable in Malaysia.

We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties. We do not send unsolicited marketing communications without your consent.

4. Data Sharing

We do not share personal data with third parties except in the following limited circumstances:

• Service providers: we may share data with trusted service providers (such as payment processors or email service providers) who assist in delivering our programmes. These providers are contractually required to protect personal data and may not use it for their own purposes.
• Legal requirements: we may disclose personal data if required to do so by applicable law, court order, or regulatory authority in Malaysia.
• Business transfers: in the event of a merger or transfer of business assets, personal data may be transferred as part of that transaction. We would notify affected individuals before any such transfer.

We do not share personal data with financial product providers, advertisers, or any party offering services to our participants without explicit consent.

5. Data Protection Measures

• Data transmitted via our website is protected by TLS/SSL encryption.
• Access to personal data within our organisation is restricted to staff who need it to fulfil their responsibilities.
• We review our data handling practices regularly and update them as needed.
• In the event of a data breach that may affect your rights and freedoms, we will notify affected individuals as required under Malaysian law.

6. Cookies

We use cookies on our website to understand how it is used and to improve your experience. Cookies are small text files stored on your device. You can manage cookie preferences at any time.

• Essential cookies: required for basic site functionality. These cannot be disabled.
• Analytics cookies: help us understand how visitors use our site. These are optional and require your consent.
• Preference cookies: remember your settings and choices. Optional.

For full details, see our Cookie Policy.

7. Your Rights

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to correction: to request that we correct inaccurate or incomplete data.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
• Right to limit processing: to request that we restrict how we use your data in certain circumstances.
• Right to lodge a complaint: you may contact the Department of Personal Data Protection Malaysia (JPDP) if you believe your data has been handled unlawfully.

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may contain links to third-party websites, including licensed financial adviser directories and professional referral resources. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

9. Children's Privacy

Our programmes are designed for adults aged 18 and above (with our Quiet Habits Cohort specifically for adults aged 40 and above). We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has provided personal data through our website, we will delete that data promptly.

10. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this page indicates when the policy was last revised. Where changes are material, we will notify enrolled participants directly by email.

Continued use of our website or services after an update constitutes acceptance of the revised policy.

11. Contact

Data controller: Quietleaf
25 Jalan Mayang Sari, 50450 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3 2168 5743

For data protection enquiries, the relevant supervisory authority in Malaysia is the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi — JPDP), Ministry of Digital.