Privacy Policy

1. Who We Are

Almora Hearth is a registered business in Malaysia operating from 64 Jalan Ampang, 50450 Kuala Lumpur. We offer family conversation workshops, household document organisation, and facilitated family meetings. We are the data controller for personal data collected through this website and our sessions. For data-related enquiries, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, and telephone number submitted through our website contact form.
• Session information: Names of household participants who attend our sessions. We do not record session content without explicit consent from all participants.
• Document organisation records: An inventory of document types held by a household. We do not retain copies of the documents themselves.
• Website usage data: Standard analytics data including pages visited, time on site, and browser type, where you have consented to analytics cookies.

We do not collect sensitive personal data such as health information, financial records, or identification numbers. Where such documents appear during a document organisation session, they are noted by type only and not read for content.

3. How We Use Your Data

• Responding to enquiries: Contact form submissions are used solely to respond to the message sent. We do not add enquirers to mailing lists without explicit consent.
• Session administration: Participant names are used to prepare session materials and written summaries.
• Service improvement: Anonymised feedback may inform how we structure future sessions.
• Legal compliance: We retain records as required by Malaysian law.

4. Legal Basis for Processing

We process personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). The legal bases we rely on are:

• Consent — for contact form submissions and analytics cookies
• Contractual necessity — for session participation records
• Legitimate interests — for basic website operation

5. Data Retention

Contact form data is held for six months from submission. Session participant records are held for the duration of the arrangement plus three months. Document organisation inventories are destroyed at the end of the final session unless you request otherwise. Website analytics data is held for twelve months.

6. Data Sharing

We do not sell or share personal data with third parties for commercial purposes. Data may be shared with service providers who assist in operating this website (such as hosting providers), under contracts requiring PDPA compliance. We may disclose data if required by law or a court order.

7. Data Security

Personal data is stored on servers located in Malaysia with access limited to Almora Hearth staff. Session summaries and inventories produced in physical form are held in locked storage. Digital records use password-protected systems. We review our security practices annually.

8. Cookies

This website uses essential cookies required for basic operation and, with your consent, analytics cookies. See our Cookie Policy for full details and preference controls.

9. Your Rights

Under the PDPA, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent at any time without affecting prior processing
• Object to processing for certain purposes

To exercise these rights, write to [email protected]. We will respond within 21 days.

10. Children

Our services are for adults aged 18 and above. We do not knowingly collect personal data from minors. If we become aware that data from a minor has been submitted, we will delete it promptly.

11. Third-Party Links

This website may link to external sites. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be noted on this page with a revised "Last Updated" date. Continued use of our website or services after changes constitutes acceptance of the updated policy.

13. Contact

For any questions about this policy or how we handle your data: