Privacy Policy

1. Introduction

Heirvale ("we", "us", "our") is committed to handling personal information responsibly and in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This Privacy Policy explains what information we collect, how we use it, how long we retain it, and what rights you have over it.

This policy applies to information collected through our website at heirval.blog and through our programmes and services. If you have questions, please contact us at [email protected].

2. Data We Collect

We may collect the following personal data:

• Contact information: name, email address, and telephone number provided via our enquiry form or during programme registration.
• Programme participation data: notes and records created during your sessions, held solely to support the programme you are attending.
• Website usage data: pages visited, time on site, and browser type, collected through cookies and analytics tools (see Section 6).

We do not collect sensitive personal data (such as financial account details, identity card numbers, or health information) through our website. Any documents you share during a programme are handled under a separate confidentiality arrangement and are not stored digitally by us without your explicit consent.

3. How We Collect Data

• Directly from you via the enquiry form on our website
• Via email or telephone communication when you make an enquiry or book a session
• Automatically through cookies and analytics tools when you use our website

4. Legal Basis for Processing

Under the PDPA, we process your personal data on the following grounds:

• Consent: when you submit an enquiry or accept cookies on our website
• Contractual necessity: to deliver the programme you have enrolled in
• Legitimate interest: to manage our business operations and improve our educational materials

5. How We Use Your Data

• To respond to your enquiry and provide information about our programmes
• To administer and deliver the programme you have enrolled in
• To send relevant follow-up information related to your programme, including factual query responses
• To improve the content and delivery of our educational materials
• To comply with applicable legal and regulatory obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not send unsolicited marketing communications.

6. Cookies

Our website uses cookies to understand how visitors use it and to remember your preferences. Essential cookies are required for the site to function; analytics and preference cookies are optional. For full details, please see our Cookie Policy.

7. Data Retention

• Enquiry data: retained for up to 24 months from the date of last contact, then securely deleted.
• Programme participation records: retained for up to 36 months from programme completion, then securely deleted or anonymised.
• Website analytics data: retained in aggregate, anonymised form for up to 26 months.

8. Data Protection Measures

We take reasonable steps to protect personal information from unauthorised access, loss, or misuse. Measures include restricted access to client records, secure email communications, and regular review of our data-handling practices. In the event of a data breach that poses a risk to individuals, we will notify affected parties and the relevant authority promptly.

9. Third-Party Services

Our website may use third-party tools such as website analytics services. These services may collect anonymised usage data in accordance with their own privacy policies. We do not pass identifiable personal information to these services. Links from our website to other sites are provided for reference only; we are not responsible for the privacy practices of those sites.

10. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for processing where consent is the basis
• Request that we cease processing your data for direct marketing purposes
• Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your data has been mishandled

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 business days.

11. Children's Privacy

Our programmes and website are intended for adults aged 18 and above. We do not knowingly collect personal information from individuals under 18. If you believe a minor has submitted information to us, please contact us and we will remove it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted with a revised "Last Updated" date at the top of this page. Continued use of our website or services after a change constitutes acceptance of the revised policy.

13. Contact

For any questions, access requests, or concerns related to this Privacy Policy, please contact:

Heirvale
33, Jalan Telawi 5, Bangsar Baru, 59100 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3 2201 5837