Privacy Policy

1. Data Controller

The data controller for personal information collected via this website and our services is:

2. Personal Data We Collect

We collect personal data in the following circumstances:

2.1 Enquiry and Contact Forms

When you submit an enquiry through this website, we collect your name, email address, and optionally your telephone number and a message. This data is used solely to respond to your enquiry and, if you proceed, to deliver the programme you have engaged.

2.2 Service Delivery

During the course of a programme appointment, we may handle family papers that contain third-party personal data (names, addresses, dates, relationships). We treat such data as confidential and do not record, copy, or retain it beyond what is strictly necessary for the clerical organisation work the family has commissioned. All scans are transferred to the family's own storage and are not retained by Patinafold.

2.3 Cookies and Website Analytics

This website uses cookies to understand how visitors use it. Analytics cookies are only placed with your consent. See our Cookie Policy for full details.

2.4 Legal Basis for Processing

• Responding to enquiries: legitimate interest in communicating with prospective clients
• Delivering a programme: performance of a contract (or steps prior to entering a contract)
• Analytics cookies: your consent, which you can withdraw at any time
• Keeping basic financial records: compliance with Malaysian legal obligations

2.5 Retention Periods

Enquiry correspondence is retained for 12 months unless you become a client, in which case basic contact and billing records are retained for 7 years in accordance with Malaysian tax record requirements. Analytics data is retained in aggregated form for up to 26 months. We do not retain any family documents or scans after the session at which they are transferred to your storage.

3. How We Use Personal Data

• To respond to your enquiry and discuss which programme may suit your needs
• To schedule and deliver programme appointments
• To issue invoices and maintain basic financial records
• To improve this website using anonymised analytics data
• To comply with applicable Malaysian law

We do not use your personal data for marketing communications without your explicit consent, and we do not sell, rent, or share personal data with third parties for their own marketing purposes.

4. Data Sharing

We do not share your personal data with third parties except in the following circumstances:

• Website hosting and analytics providers — our website is hosted and analytics are processed by standard service providers operating under appropriate data processing agreements.
• Legal obligation — if required by Malaysian law, regulation, or a court order, we may disclose personal data to the relevant authority.
• Professional advisers — accountants and legal advisers acting on our behalf, bound by confidentiality obligations.

5. Data Protection Measures

• Website forms are transmitted over an encrypted (HTTPS) connection
• Access to client data is restricted to staff directly involved in the relevant programme
• No family documents or scans are retained on Patinafold systems after transfer to the family's own storage
• Enquiry correspondence is stored in access-controlled email and administrative systems
• In the event of a data breach affecting your personal data, we will notify you and the relevant authority as required by Malaysian law

6. Cookies

This website uses essential cookies (necessary for it to function) and, with your consent, analytics cookies. You can manage your preferences at any time via our Cookie Policy page. Withdrawing consent for analytics cookies does not affect your ability to use the site.

7. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) and, where applicable, equivalent data protection legislation, you have the following rights in relation to personal data we hold about you:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete personal data
• Withdrawal of consent — withdraw consent for analytics cookies or marketing communications at any time
• Erasure — request deletion of personal data we hold, subject to any legal retention obligations
• Objection — object to processing of your personal data for purposes based on legitimate interest
• Complaint — lodge a complaint with the Department of Personal Data Protection Malaysia (www.pdp.gov.my) if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

This website may contain links to external websites, including the practitioner directories we reference. Patinafold is not responsible for the privacy practices of those sites. We encourage you to read the privacy policy of any external site you visit.

9. Children's Privacy

Our services and this website are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us at [email protected] and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. Any material changes will be posted on this page with a revised "Last Updated" date. Continued use of this website after a change is posted constitutes acceptance of the updated policy. For significant changes affecting your rights, we will make reasonable efforts to notify you directly.

11. Contact for Data Enquiries