Privacy Policy

1. Who We Are

Tallowmark is an educational organisation based at 45 Lebuh Pantai, 10300 George Town, Pulau Pinang, Malaysia. We offer structured family education programmes on estate organisation, legacy conversations, and household planning. We are not a law firm, financial advisory, medical practice, or licensed professional services provider of any kind. Our programmes are educational in nature only.

For data protection enquiries, contact us at: [email protected] or by telephone at +60 4 263 9418.

---

2. Personal Data We Collect

We collect personal data when you:

• Submit an enquiry through our contact form
• Register for or attend a programme or workshop
• communicate with us by telephone, email, or in person
• Visit our website (technical data collected automatically)

The categories of personal data we may collect include:

• Identity data: full name, salutation
• Contact data: email address, telephone number, mailing address
• Programme data: programme preferences, attendance records, feedback and survey responses
• Payment data: payment references (we do not store full card details)
• Technical data: IP address, browser type, device type, pages visited, session duration, referring URL, and cookie identifiers where cookies are accepted
• Communication data: records of correspondence with us

We do not collect sensitive personal data as defined under Malaysian law (such as health information, political opinions, or religious beliefs) unless you volunteer such information in correspondence, and we will not process it beyond the purpose for which it was provided.

---

3. How We Use Your Personal Data

We process personal data on the following lawful bases and for the following purposes:

• Performance of a contract / pre-contract steps: to respond to enquiries, process programme registrations, arrange participation logistics, and issue receipts or confirmation documents.
• Legitimate interests: to improve our educational programmes, maintain the security of our systems, and send programme updates directly related to a programme you have attended or enquired about.
• Consent: to send you general programme announcements, newsletters, or information about new offerings, where you have opted in to receive such communications. You may withdraw this consent at any time.
• Legal compliance: to meet our obligations under applicable Malaysian law, including record-keeping requirements.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

---

4. Sharing of Personal Data

Tallowmark does not sell, rent, or trade personal data. We may share data only in the following limited circumstances:

• Service providers: third-party providers who assist us in operating our website, processing payments, or delivering programmes (e.g., email service platforms, payment processors). These parties are bound by confidentiality obligations and may only process data on our instructions.
• Legal requirements: where disclosure is required by Malaysian law, court order, or regulatory authority.
• Business continuity: in the event of a restructure or transfer of business operations, where participant records may be transferred to a successor organisation under equivalent data protection commitments.

We take reasonable steps to ensure that any third party receiving personal data provides an adequate level of protection.

---

5. Retention of Personal Data

We retain personal data only as long as is necessary for the purposes described in this policy or as required by law. As a general guide:

• Enquiry records: up to 12 months from last contact, unless a programme registration follows.
• Programme participant records: up to 7 years from the date of participation, for administrative and legal compliance purposes.
• Financial transaction records: as required under Malaysian accounting and tax regulations.
• Email marketing consent records: for the duration of the consent and for 3 years thereafter.

After the applicable retention period, data is securely deleted or anonymised.

---

6. Your Rights Under the PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct personal data that is inaccurate, incomplete, or out of date
• Withdraw consent to any processing conducted on the basis of your consent
• Request limitations on the processing of your data in certain circumstances
• Object to processing for direct marketing purposes at any time

To exercise any of these rights, contact us in writing at [email protected] or at our postal address. We will respond within 21 days of receipt of a written request. There is no fee for exercising these rights, though we reserve the right to charge a reasonable administrative fee for manifestly repetitive or excessive requests.

---

7. Cookies and Website Analytics

Our website uses cookies and similar technologies. For full details on how we use cookies, please refer to our Cookie Policy. A summary:

• Strictly necessary cookies enable core website functions and cannot be disabled.
• Analytics cookies (such as those provided by Google Analytics) help us understand how visitors use our website. These are only set with your consent.
• Marketing cookies may be used to track interactions with advertising platforms. These are only set with your consent.

You may manage your cookie preferences at any time by adjusting your browser settings or revisiting the cookie preferences notice on our homepage.

---

8. Security

We maintain reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These include secure data storage, limited internal access controls, and regular review of our data handling practices.

No method of transmission over the internet is entirely secure. If you have reason to believe your personal data has been compromised through an interaction with us, please contact us promptly at [email protected].

---

9. Links to Third-Party Websites

Our website may contain links to third-party websites for reference purposes. Tallowmark is not responsible for the privacy practices of those websites and encourages you to review their policies independently before providing any personal data to them.

---

10. Children

Our programmes are designed for adults. We do not knowingly collect personal data from individuals under the age of 18 without the involvement of a parent or guardian. If you believe we have inadvertently collected such data, please contact us so we can take appropriate steps.

---

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or programme offerings. The "last updated" date at the top of this page will reflect when the most recent revision was made. We encourage you to review this policy periodically. Continued use of our website or participation in our programmes following any update constitutes acknowledgement of the revised policy.

---

12. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data:

• Email: [email protected]
• Telephone: +60 4 263 9418 (Mon–Fri 9:00am–5:30pm, Sat 9:00am–1:00pm)
• Postal address: Tallowmark, 45 Lebuh Pantai, 10300 George Town, Pulau Pinang, Malaysia