Privacy Policy

1. Introduction

Rizana ("we", "us", "our") is committed to protecting the personal information of individuals who interact with us — whether through this website, our enquiry process or by attending one of our programmes. This Privacy Policy describes what personal data we collect, how we use it, and the rights you have in relation to your information.

We operate under the Personal Data Protection Act 2010 (PDPA) of Malaysia. By providing us with personal data — through this website or in person — you acknowledge that you have read and understood this policy.

If you have any questions about this policy, please contact us at [email protected].

2. Data We Collect

2.1 Information You Provide Directly

When you submit an enquiry through our website contact form or register for a programme, we may collect:

• Your full name
• Email address
• Phone number (if provided)
• Name of your organisation
• Message content and programme interest

2.2 Information Collected Automatically

When you visit our website, we may collect technical data such as your browser type, IP address, pages visited and time spent on pages. This data is collected through cookies and similar technologies. Please see Section 5 (Cookie Information) and our Cookie Policy for further details.

2.3 Legal Basis for Processing

We process personal data on the following bases:

• Consent — where you have given clear consent for us to process your data for a specific purpose (e.g. submitting an enquiry form)
• Contractual necessity — where processing is necessary to fulfil a programme enrolment or respond to a service request
• Legitimate interest — for activities such as improving our website and programmes, where our interests do not override your rights

3. How We Use Personal Data

We use the personal data we collect for the following purposes:

• Responding to your enquiries about our programmes
• Processing enrolments and delivering programme materials
• Communicating programme schedules, updates and relevant information
• Improving our website, session content and participant experience
• Maintaining records for our internal administration
• Complying with applicable legal obligations under Malaysian law

3.1 Data Sharing with Third Parties

We do not sell personal data. We may share data with service providers who assist us in operating the website (such as web hosting providers), but only to the extent necessary and under appropriate data protection obligations. We do not share personal data with third parties for their own marketing purposes.

3.2 Marketing Communications

If you provide your email address when making an enquiry, we may send occasional information about our programmes. You may opt out of these communications at any time by contacting us at [email protected] or using the unsubscribe option included in any email we send.

4. Data Retention

We retain personal data for as long as reasonably necessary for the purposes described in this policy:

• Enquiry records: up to 2 years from last contact
• Programme enrolment records: up to 5 years following programme completion
• Website analytics data: up to 12 months

Where data is no longer required, we take reasonable steps to delete or anonymise it.

5. Cookie Information

Our website uses cookies to support basic functionality and to understand how visitors use the site. We use the following categories of cookies:

• Essential cookies — required for the website to function correctly (e.g. storing your cookie preferences)
• Analytics cookies — used to understand how pages are visited and how we can improve the website (optional)
• Preference cookies — used to remember settings you have chosen (optional)

You can manage your cookie preferences at any time. See our Cookie Policy for full details and controls.

6. Data Protection Measures

We take reasonable precautions to protect personal data from unauthorised access, disclosure, alteration and destruction. These include:

• Limiting access to personal data to staff members who need it to carry out their responsibilities
• Using secure connections (HTTPS) for data transmitted through our website
• Storing electronic records on password-protected systems
• Reviewing our data handling practices periodically

In the event of a data breach that is likely to result in a risk to the rights and freedoms of individuals, we will take steps to contain the breach and notify affected parties where required under Malaysian law.

7. Your Rights

Under the Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• Right of access — to request a copy of the personal data we hold about you
• Right to correction — to request correction of inaccurate or incomplete data
• Right to withdraw consent — to withdraw consent for processing at any time (where processing is based on consent)
• Right to prevent processing for direct marketing — to request that we stop using your data for marketing communications

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. We may request proof of identity before processing requests.

If you are unsatisfied with our response, you may contact the Department of Personal Data Protection (JPDP) in Malaysia, the supervisory authority responsible for the PDPA.

8. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of those websites. We recommend that you review the privacy policies of any third-party sites you visit.

9. Children's Privacy

Our programmes are intended for adults (18 years and above). We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from a minor without appropriate consent, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Where changes are material, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact

For any questions, requests or concerns relating to this Privacy Policy or how we handle personal data:

• Email: [email protected]
• Phone: +60 5-246 8730
• Address: No. 47, Jalan Dato Onn, 30300 Ipoh, Perak, Malaysia