1. Introduction
Homerow ("we", "us", "our") is committed to handling your personal information with care and transparency. This Privacy Policy describes what personal data we collect when you use our website or engage with our workshops and programmes, how we use it, and the choices you have.
Our services are educational and administrative in nature. We do not offer legal, financial, or other professional advice. Any personal data you share is used only to arrange and deliver the sessions you request.
This policy applies to all personal data collected through our website at homerowih.world and through direct communications with us. It is governed by Malaysia's Personal Data Protection Act 2010 (PDPA).
2. Data We Collect
2.1 Information You Provide
- Name — used to address correspondence and personalise your session preparation notes.
- Email address — used to confirm your booking and send relevant session materials.
- Phone number — used to arrange scheduling and answer brief pre-session questions.
- Message or enquiry content — used only to respond to your specific question or request.
2.2 Information Collected Automatically
- Browser and device data — type, operating system, and screen size, collected via analytics cookies.
- Pages visited and interaction data — to understand how our site is used and where it can be improved.
- IP address — retained in anonymised form in server logs.
2.3 Legal Basis for Processing
- Consent — where you have agreed to cookies or to receive communications from us.
- Contract performance — to deliver the sessions or programme you have requested.
- Legitimate interest — to improve the quality and relevance of our website and services.
2.4 Retention
Enquiry records and session notes are retained for up to three years from the date of last contact, then securely deleted. Analytics data is retained for up to 26 months.
3. How We Use Your Data
- To respond to your enquiry and arrange your session or programme.
- To send session preparation notes and programme materials by email.
- To contact you regarding rescheduling, follow-ups, or relevant upcoming programmes.
- To improve our website content and user experience using aggregated analytics.
- To comply with applicable Malaysian law, including the PDPA 2010.
3.1 Marketing Communications
We may occasionally send you information about new programmes or workshops. You can withdraw consent for marketing emails at any time by replying to any email with "Unsubscribe" or by contacting us directly at [email protected].
3.2 Third-Party Sharing
We do not sell your personal data. We may share data with the following trusted service providers who assist in running our website:
- Google Analytics — website usage analytics (anonymised)
- Meta (Facebook) Pixel — if you have consented to marketing cookies
- Microsoft Bing Ads — if you have consented to marketing cookies
- Email service provider — used to deliver session correspondence
Each of these providers operates under their own privacy policy and data processing agreements. We require that they handle your data only for the purpose for which it is shared.
4. Data Protection Measures
- Our website is served over HTTPS with TLS encryption.
- Access to personal data is restricted to staff who need it to deliver your session.
- Enquiry data is stored in password-protected systems and not shared via unsecured channels.
- We conduct periodic reviews of how data is stored and accessed.
- In the event of a data breach affecting your personal information, we will notify you and the relevant authority as required by the PDPA 2010 and applicable guidelines from the Department of Personal Data Protection (JPDP) Malaysia.
6. Your Rights Under PDPA 2010
Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:
- Right of Access — you may request a copy of the personal data we hold about you.
- Right of Correction — you may request that we correct personal data that is inaccurate or incomplete.
- Right to Withdraw Consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Right to Prevent Processing for Direct Marketing — you may ask us to stop using your data for marketing at any time.
- Right to Erasure (where applicable) — you may request deletion of your data where there is no longer a lawful reason to retain it.
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you are dissatisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.
7. Third-Party Links
Our website may include links to external websites for reference purposes. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal information.
8. Children's Privacy
Our services and website are intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a minor has submitted personal data through our website, please contact us at [email protected] and we will remove it promptly.
Family members under 18 may participate in household sessions arranged by a parent or guardian, but the enquiry and registration must be completed by an adult.
9. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page.
We encourage you to review this page periodically. Continued use of our website after a policy update constitutes your acknowledgement of the revised terms.
10. Contact Us
For questions about this Privacy Policy, to access or correct your data, or to withdraw consent, please contact: