Privacy Policy

1. Introduction

Hearthly ("we", "us", "our") is committed to protecting the personal data of individuals who visit our website, enquire about our programmes, or participate in any Hearthly session or community. This Privacy Policy explains what information we collect, how we use it, how long we keep it, and what rights you have over it.

This policy applies to data collected through our website at hearthly.cyou, through our contact form, and in connection with our programme delivery. It is governed by Malaysian data protection law, including the Personal Data Protection Act 2010 (PDPA).

If you have questions about this policy, you may contact our privacy team at [email protected].

2. Data We Collect

Information you provide directly

• Name and contact details (email address, phone number) when you submit our enquiry form or register for a programme
• Details about your circumstances that you choose to share during session registration or intake
• Community contributions (posts, questions, replies) within the Hearthly couples' community, where applicable

Information collected automatically

• Browser type, device type, and operating system when you visit our website
• Pages visited, time spent on pages, and referral source (collected via analytics tools if consent is given)
• Cookie data, subject to your cookie preferences (see our Cookie Policy)

Legal basis for processing (PDPA Malaysia)

• Consent: For marketing communications and non-essential cookies
• Contract: To process enquiries and deliver sessions you have enrolled in
• Legitimate interest: For website analytics and security monitoring

3. How We Use Your Data

• Responding to enquiries and providing information about Hearthly programmes
• Processing enrolment and delivering programme sessions
• Sending confirmation emails and session-related communications
• Issuing certificates of attendance where applicable
• Improving our website and programme content based on aggregated usage data
• Sending updates about Hearthly programmes (only where you have given consent to marketing communications, with the ability to opt out at any time)
• Complying with our legal obligations under Malaysian law

We do not use your personal data for automated decision-making or profiling.

4. Data Sharing

We do not sell personal data to third parties. We may share data in the following limited circumstances:

• Service providers: We use trusted service providers for website hosting, email delivery, and analytics. These providers are bound by contractual obligations to protect your data and may only use it as instructed by Hearthly.
• Analytics: We may use analytics tools (such as Google Analytics) to understand how our website is used. This data is anonymised where possible.
• Legal requirements: We may disclose data where required by Malaysian law, court order, or government authority.

We do not share participant data with other programme participants without your consent.

5. Data Retention

• Enquiry form data is retained for up to 12 months from last contact
• Programme enrolment and participation records are retained for up to 3 years for administrative purposes
• Certificate records are retained for 5 years
• Analytics data is retained in accordance with the settings of the analytics provider used (typically 14 months for Google Analytics)

After the applicable retention period, data is securely deleted or anonymised.

6. Data Security

We take reasonable precautions to protect personal data from unauthorised access, loss, or disclosure. These measures include:

• Secure HTTPS connections on our website
• Limited internal access to participant data on a need-to-know basis
• Regular review of data handling practices

In the event of a data breach that is likely to affect your rights, we will notify affected individuals as required under the PDPA and notify the relevant authority where applicable.

7. Cookies

Our website uses cookies to improve your experience and to understand how the site is used. Essential cookies are necessary for the site to function. Non-essential cookies (analytics, preferences) are only used with your consent.

For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that inaccurate or incomplete data be corrected
• Withdrawal of consent: Withdraw consent for marketing communications at any time
• Erasure: Request deletion of your personal data, subject to our legal retention obligations
• Objection: Object to certain uses of your personal data

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days. If you are not satisfied with our response, you may raise a complaint with the Department of Personal Data Protection Malaysia (JPDP).

9. Third-Party Links

Our website may contain links to external websites or resources. Hearthly is not responsible for the privacy practices of third-party websites. We encourage you to read the privacy policy of any website you visit through a link on our site.

10. Children and Minors

Hearthly programmes are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact [email protected] and we will delete the relevant information promptly.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify participants via the email address on record or through a notice on our website. The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of our website or services after a policy update constitutes acceptance of the updated terms.

12. Contact Us

For any privacy-related questions or requests, please contact:

• Email: [email protected]
• Address: Hearthly, No. 7, Jalan Burma, 10350 George Town, Pulau Pinang, Malaysia
• Phone: +60 4-229 7468

We aim to respond to all privacy enquiries within 21 calendar days.