Privacy Policy

1. Introduction

Foxhaven ("we", "us", "our") is an educational provider based in George Town, Pulau Pinang, Malaysia. We take the handling of personal data seriously. This Privacy Policy sets out how we collect, use, store, and protect information provided to us through our website and programme registration processes.

This policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using our website or enquiring about our programmes, you acknowledge that you have read and understood this policy. For questions, contact us at [email protected].

2. Data We Collect and How We Collect It

We may collect the following categories of personal data:

• Contact information: name, email address, phone number — submitted via our website enquiry form or provided directly by telephone or email.
• Programme registration data: name, contact details, and your responses to programme-related questions when registering for a session.
• Website usage data: pages visited, time on page, browser type, device type — collected via cookies and analytics tools where you have consented.

We do not collect sensitive personal data (as defined under the PDPA) and do not request information about health, financial accounts, or religious or political beliefs.

3. Legal Basis and How We Use Your Data

We process personal data for the following purposes:

• Responding to enquiries submitted through our contact form or by phone and email.
• Managing programme registrations and sending practical information about sessions you have enrolled in.
• Sending programme updates or notifications about upcoming runs, where you have provided consent or where we have a legitimate interest in keeping you informed about services similar to those you have already used.
• Improving our website and programme materials using aggregated, anonymised analytics data.

4. Data Retention

Enquiry and registration data is retained for up to three years from the date of last contact. After this period, data is securely deleted unless a longer retention period is required by applicable law. Anonymous feedback data from post-programme evaluations is retained indefinitely for the purposes of programme improvement.

5. Data Sharing and Third Parties

We do not sell or trade your personal data. We may share data with:

• Service providers: email platform operators and website hosting providers, who process data on our behalf under appropriate data processing agreements.
• Analytics tools: where you have consented to analytics cookies, aggregated usage data may be processed by third-party tools such as Google Analytics.
• Legal requirements: where disclosure is required by Malaysian law or by a competent authority.

6. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include access controls on systems holding personal data, use of secure email and storage services, and limiting staff access to data on a need-to-know basis. In the event of a data breach that is likely to result in harm, we will notify affected individuals and, where required, the relevant authority.

7. Cookies

We use cookies to support website functionality and, where you have consented, to collect usage analytics. For a full explanation of the cookies we use, see our Cookie Policy.

8. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights:

• Right of access: request a copy of personal data we hold about you.
• Right of correction: request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Right to prevent processing for direct marketing: you may request that we stop using your data for direct marketing purposes.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any external sites you visit.

10. Children's Privacy

Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our website. Continued use of the website after such changes constitutes acceptance of the updated policy.

12. Contact Information

For privacy-related enquiries, contact the data controller:

Foxhaven
67 Jalan Burmah, 10350 George Town, Pulau Pinang, Malaysia
Email: [email protected]
Phone: +60 4 229 6418