Privacy Policy

1. Introduction

Melati ("we", "us", "our") is committed to protecting the personal data of every person who contacts us, enquires about our programmes, or attends our classes. This Privacy Policy explains what data we collect, how we use it, how long we keep it, and what rights you have under the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By using this website or submitting an enquiry, you acknowledge that you have read and understood this policy. If you have questions, please contact us at [email protected].

2. Data We Collect

We may collect the following personal data:

• Contact details: name, email address, and phone number when you submit an enquiry form.
• Programme information: which class or programme you are interested in, and any details you share during enrolment or follow-up.
• Website usage data: pages visited, time on site, browser type, and approximate location — collected via analytics cookies where you have provided consent.
• Communications: any emails, messages, or notes exchanged between you and Melati staff.

We do not collect sensitive personal data such as financial account details, KWSP or EPF numbers, or identity card numbers through this website.

3. How We Use Your Data

We use your personal data only for the following purposes:

• Responding to your enquiry and providing information about our programmes.
• Processing your enrolment and managing your participation in a class.
• Sending you occasional updates about Melati programmes if you have opted in to receive them.
• Improving our website and understanding how visitors use it (analytics, with consent only).
• Complying with legal or regulatory requirements.

We do not use your data for advertising, profiling, or automated decision-making. We do not sell your data to any third party.

4. Legal Basis for Processing

Under the PDPA 2010, we process your data on the following grounds:

• Consent: when you submit an enquiry form or opt in to communications.
• Contract: when processing is necessary to fulfil a programme enrolment you have agreed to.
• Legitimate interest: for internal administrative purposes, fraud prevention, and improving our services.

5. Data Retention

We keep enquiry and contact data for up to 24 months after last contact. Programme enrolment records are kept for up to 5 years for administrative and legal purposes. Analytics data is retained in aggregated, anonymised form.

After retention periods expire, data is securely deleted or anonymised.

6. Data Sharing

We do not share your personal data with third parties for their marketing purposes. We may share data with:

• Service providers who help us operate this website and manage communications (e.g. web hosting), bound by data processing agreements.
• Legal authorities if required by Malaysian law or court order.

We do not transfer your data outside Malaysia unless necessary for a service provider, and only with appropriate safeguards in place.

7. Cookies

Our website uses cookies to help it function and, with your consent, to understand how visitors use it. For a full explanation of the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Security

We take reasonable technical and organisational measures to protect your personal data, including secure hosting, access controls, and staff awareness of data protection responsibilities. No method of transmission over the internet is completely secure; if you have concerns about a specific data risk, please contact us.

9. Your Rights

Under the PDPA 2010 and applicable Malaysian law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Withdraw consent to marketing communications at any time.
• Request deletion of your data where it is no longer necessary for us to hold it.
• Lodge a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of these rights, email us at [email protected]. We aim to respond within 14 days.

10. Children's Privacy

Our programmes and website are intended for adults aged 18 and above. We do not knowingly collect data from anyone under 18. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

11. Third-Party Links

This website may include links to external resources. We are not responsible for the privacy practices of third-party sites and recommend you read their privacy policies before sharing any personal data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the website after changes are posted constitutes acceptance of the revised policy.

13. Contact Us

For privacy-related enquiries, please contact:

• Email: [email protected]
• Address: 48, Persiaran Greentown 3, 30450 Ipoh, Perak, Malaysia
• Phone: +60 3-5631 0492