Privacy Policy — Folioheir

1. Introduction

Folioheir ("we", "us", "our") is committed to handling personal data responsibly. This Privacy Policy describes the types of personal data we collect, how we use and protect it, and the rights available to individuals whose data we hold. It applies to data collected through the website at folioheiring.biz and through bookings and enquiries made with the studio.

Our studio is operated from Block A, Suite 5-1, Jalan Tun Mustapha, 88000 Kota Kinabalu, Sabah, Malaysia. We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Data We Collect

2.1 Data you provide directly

Name — collected via the contact form to address correspondence
Email address — used to respond to enquiries and confirm bookings
Phone number — collected optionally if you choose to provide it for booking coordination
Message content — the text of your enquiry, used solely to respond

2.2 Data collected automatically

Browser type and version, IP address (collected via standard server logs)
Pages visited and session duration (collected via analytics cookies if consent is given)

2.3 What we do NOT collect

We do not collect, copy, or retain any participant materials produced during workshops or documentation sessions. Folios, booklets, notes, and any other documents produced in sessions belong to and leave with the participant.

3. Legal Basis for Processing

Under the PDPA 2010, we process personal data on the following bases:

Consent — for analytics cookies and marketing communications (where applicable)
Legitimate interest — for responding to enquiries and managing bookings
Contractual necessity — for delivering workshop sessions and membership services

4. How We Use Your Data

To respond to enquiries submitted via the contact form
To confirm and manage workshop or membership bookings
To send session information and pre-session materials to confirmed participants
To send the membership follow-up note and quarterly prompts to membership participants
To improve our website based on aggregate analytics data

We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties.

5. Data Sharing

We do not share personal data with third parties except in the following limited circumstances:

Service providers — email and hosting providers who process data on our behalf under data processing agreements
Legal requirements — where disclosure is required by Malaysian law or regulatory authority

We do not share personal data with advertising networks or data brokers.

6. Data Retention

Enquiry data (name, email, message) is retained for up to twelve months after last contact, after which it is deleted. Booking records are retained for three years for administrative and legal purposes. Analytics data is retained in aggregated, anonymised form only.

7. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. These include access controls on our systems, use of encrypted email where possible, and limiting data access to staff who need it for their role. In the event of a data breach that is likely to harm individuals, we will notify affected parties and the relevant authority in accordance with applicable law.

8. Cookies

Our website uses cookies. Essential cookies are required for the site to function. Optional analytics and preference cookies are only set if you provide consent via the cookie banner. For full details, see our Cookie Policy.

9. Your Rights

Under the PDPA 2010 and applicable data protection law, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete personal data
Request deletion of your personal data (subject to legal retention requirements)
Withdraw consent for processing based on consent
Object to processing based on legitimate interest

To exercise any of these rights, contact us at [email protected]. We will respond within thirty days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policies of any external sites you visit.

11. Children

Our workshops are designed for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will post a notice on the website. Continued use of the website after changes take effect constitutes acceptance of the updated policy.

13. Contact

For questions about this policy or your personal data:

Email: [email protected]
Address: Block A, Suite 5-1, Jalan Tun Mustapha, 88000 Kota Kinabalu, Sabah, Malaysia