Privacy Policy
Last Updated: 28 July 2025 · Hearthline, Kuala Lumpur, Malaysia
Hearthline is committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy describes what data we collect, why we collect it, how we use it and how it is protected.
If you have questions about this policy, contact us at [email protected].
1. Who we are
Hearthline is a family coordination practice registered in Malaysia and operating from No. 33, Jalan Metro Perdana Barat, Taman Usahawan, 52100 Kuala Lumpur. We provide educational and organisational services to families, including template setup appointments, coordination workshops and a twelve-month coordination programme. We are the data controller for personal data collected through this website and our services.
2. Data we collect
We collect the following categories of personal data:
- Contact information: name, email address and phone number submitted through our contact form.
- Enquiry content: the message you submit when making an enquiry or booking request.
- Session records: notes relating to the organisational services we provide, held only for the duration needed to deliver those services.
- Website usage data: anonymised analytics data collected through cookies where you have consented to analytics cookies.
We do not collect sensitive personal data such as health information, financial account details or identity document numbers through this website.
3. Legal basis for processing
Under the PDPA 2010, we process personal data on the following bases:
- Consent: for marketing communications and analytics cookies, where you have opted in.
- Contract: to confirm and deliver sessions you have booked.
- Legitimate interest: to respond to your enquiries and maintain basic records of sessions delivered.
4. How we use your data
- To respond to enquiries and confirm session bookings.
- To deliver the organisational services you have requested.
- To send you information about your booking, including reminders and follow-up materials.
- To improve our website based on anonymised analytics (only where analytics cookies are accepted).
- To comply with legal obligations under Malaysian law.
We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling.
5. Data retention
Contact enquiry data is held for up to 12 months from the date of last contact. Session records are retained for 3 years from the date of the final session to allow for legitimate follow-up. After these periods, data is deleted securely. Analytics data is retained in anonymised, aggregated form only.
6. Data sharing
We share personal data with third parties only in the following circumstances:
- Service providers: email hosting and website hosting providers who process data on our behalf under data processing agreements.
- Analytics providers: anonymised usage data only, where analytics cookies are accepted.
- Legal requirement: where disclosure is required by Malaysian law or a lawful government request.
No personal data is transferred outside Malaysia without appropriate safeguards in place.
7. Data protection measures
- All data is stored on password-protected systems with restricted access.
- Contact form submissions are transmitted over HTTPS encryption.
- Access to personal data is limited to staff who need it to deliver services.
- In the event of a data breach, we will notify affected individuals and the relevant authority within 72 hours where required under applicable law.
8. Cookies
We use cookies to keep the site working and, where you consent, to understand how it is used. See our Cookie Policy for full details including how to manage your preferences.
9. Your rights under the PDPA 2010
Under Malaysia's Personal Data Protection Act 2010, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request that we stop processing your data for direct marketing purposes.
- Withdraw consent where processing is based on consent.
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. There is no fee for a standard access request.
If you have concerns about how we handle your data, you may contact the Department of Personal Data Protection Malaysia (JPDP) at pdp.gov.my.
10. Third-party links
This website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data to them.
11. Children's privacy
Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data through our site, contact us at [email protected] so we can remove it promptly.
12. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the website after a policy change constitutes acceptance of the updated terms. For material changes we will post a notice on the homepage.
13. Contact
Data controller: Hearthline
No. 33, Jalan Metro Perdana Barat, Taman Usahawan, 52100 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3-6203 8471