Legal
Privacy Policy
Last Updated: 10 May 2025 · Effective: 10 May 2025
Stillmoor ("we", "us", "our") is committed to handling your personal data responsibly and transparently. This policy explains what information we collect, why we collect it, and how it is used and protected. It applies to all visitors to our website and all participants in our programmes.
1. Data Controller
The data controller responsible for your personal information is Stillmoor, operating from 220 Jalan Tun Razak, 50400 Kuala Lumpur, Malaysia. For data-related enquiries, contact us at [email protected].
2. Personal Data We Collect
We collect personal data in the following ways:
- Contact forms: When you submit an enquiry on our website, we collect your name, email address, and phone number (if provided).
- Programme enrolment: When you enrol in a programme, we collect name, contact details, emergency contact, and any accessibility requirements you choose to share.
- Correspondence: If you contact us by email or phone, we retain that communication.
- Website usage: We use cookies to understand how visitors use our site (see our Cookie Policy for details).
We collect only what is necessary for the purpose stated. We do not collect sensitive personal data (such as health or financial records) unless you voluntarily share it and it is relevant to your participation.
3. How We Use Your Data
- To respond to enquiries and communicate about programme availability
- To process enrolment and administer programme participation
- To send programme materials and post-programme newsletters (where opted in)
- To improve our programmes based on aggregated, anonymised feedback
- To meet our obligations under Malaysian law
We do not use your personal data for marketing unrelated to Stillmoor programmes, and we do not share it with third parties for commercial purposes.
4. Legal Basis for Processing
Processing of your personal data is carried out in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. Our legal basis for processing is:
- Consent: Where you have provided explicit consent (e.g., newsletter subscription).
- Contractual necessity: Where processing is needed to deliver the programme you have enrolled in.
- Legitimate interest: Where we have a reasonable and proportionate interest, such as improving our programmes through anonymised feedback.
5. Data Retention
Enquiry data is retained for twelve months from receipt. Programme participant records are retained for three years following programme completion, after which they are securely deleted. Newsletter subscriber data is retained for as long as the subscription is active. You may request deletion at any time (see Section 8).
6. Data Sharing
We do not sell, rent, or share your personal data with third parties for commercial purposes. We may share data with:
- Service providers who process data on our behalf (e.g., email platform, website hosting) under data processing agreements
- Malaysian regulatory authorities if required by law
7. Data Protection Measures
- Personal data is stored on servers located in or compliant with Malaysian data standards
- Access to participant records is restricted to Stillmoor staff who require it
- All staff are briefed on data protection obligations annually
- In the event of a data breach, affected individuals will be notified within a reasonable timeframe
8. Your Rights
Under Malaysia's PDPA 2010, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Withdraw consent for processing where consent was the basis
- Request that we cease processing your data for direct communications
- Request deletion of your data (subject to our retention obligations)
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.
9. Cookies
We use cookies on our website. Essential cookies are necessary for the site to function; analytics cookies help us understand how visitors use the site. You can manage cookie preferences through our Cookie Policy page.
10. Third-Party Links
Our website may include links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
11. Children
Our programmes and services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18.
12. Policy Changes
We may update this policy from time to time. Changes will be published on this page with an updated effective date. Continued use of our website or services after changes are published constitutes acceptance of the updated policy.
13. Contact for Data Enquiries
For any questions about this policy or how your data is handled, contact:
Email: [email protected]
Address: 220 Jalan Tun Razak, 50400 Kuala Lumpur, Malaysia