Privacy Policy

1. Introduction

Compass Hours ("we", "us", "our") operates retirement preparation education workshops from our office at Unit 9-A, Wisma Pantai, Lebuh Light, 10200 George Town, Penang, Malaysia. We are registered with the Companies Commission of Malaysia (SSM).

This Privacy Policy explains how we collect, use, store, and protect the personal information you provide to us when registering for workshops, contacting us, or using our website. We handle personal data responsibly and in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have questions about this policy or how your data is handled, contact us at [email protected] or by phone at +60 4-263 7184.

2. What Data We Collect

2.1 Information you provide directly

• Full name (required for workshop registration)
• Email address (required for registration confirmation and follow-up)
• Phone number (optional, used for scheduling and enquiry follow-up)
• Message content submitted through our contact form
• Written feedback submitted after sessions

2.2 Information collected automatically

• Browser type and version (via analytics cookies, if consented)
• Pages visited and time spent on site (via analytics)
• General geographic location (country/region level, not precise)
• Referral source (how you arrived at our website)

2.3 Legal basis for processing

• Consent — for optional cookies and marketing communications
• Contractual necessity — to process workshop registrations and deliver the programme
• Legitimate interest — for basic site security and internal record-keeping

Retention: Registration data is retained for three years from your last interaction with Compass Hours, after which it is securely deleted. Feedback forms are retained for two years.

3. How We Use Your Data

• To confirm and manage your workshop registration
• To prepare session materials (workbooks, handouts) for the correct number of participants
• To respond to enquiries submitted by phone or through the contact form
• To send session reminders and follow-up reading lists where you have registered
• To improve our workshop content based on aggregate feedback patterns
• To maintain internal records for programme administration

We do not use your data for automated decision-making. We do not sell your data. We do not share your data with third parties for marketing purposes.

We may share data with service providers who help operate our website (hosting, analytics) under data processing agreements. These providers are not permitted to use your data for their own purposes.

4. How We Protect Your Data

• Our website is served over HTTPS with TLS encryption
• Physical registration records are stored in a locked cabinet accessible only to the programme coordinator and lead facilitator
• Digital records are stored on password-protected systems with access limited to Compass Hours staff
• In the event of a data breach affecting your personal information, we will notify affected individuals as soon as reasonably practicable and in line with PDPA requirements
• We review our data handling practices annually

5. Cookies

Our website uses cookies to support basic site functionality and, with your consent, to understand how visitors use our pages. Cookie categories include:

• Essential cookies — required for basic site operation (always active)
• Analytics cookies — help us understand traffic patterns (optional, consent required)
• Preference cookies — remember your cookie consent choice

For full details and to manage your cookie preferences, see our Cookie Policy.

6. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right of correction — request correction of inaccurate or incomplete data
• Right to withdraw consent — withdraw consent for data processing where consent is the legal basis
• Right to limit processing — request that we stop using your data in certain ways

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days. We may ask you to verify your identity before processing the request.

If you believe we have not handled your data appropriately, you may lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) at pdp.gov.my.

7. Third-Party Links

Our website and printed materials may include links to external resources — professional body websites, government departments, and reading references. We are not responsible for the privacy practices of those sites and recommend you review their privacy policies separately before sharing personal data with them.

8. Age Requirements

Compass Hours workshops are designed for adults and are not directed at individuals under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete the relevant information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last Updated" date at the top of this page. For material changes, we will notify registered participants by email. Continued use of our services after a policy update constitutes acceptance of the revised terms.