Legal · Data Protection
Privacy Policy
Linkfolk operates at 15 Jalan Gaya, 88000 Kota Kinabalu, Sabah, Malaysia. This Privacy Policy explains how we collect, use, and look after the personal data you provide when you use our website or enquire about our family records and document workshops.
1. Personal Data We Collect
When you submit our contact form or enquire about a session, we may collect the following:
- Full name and, if provided, the names of household participants
- Email address for correspondence
- Phone number, if you choose to provide it
- The content of your message or enquiry
- Technical data such as IP address, browser type, and pages visited (collected via analytics services)
- Cookie preference choices stored locally in your browser
We do not collect payment card details through this website. Any payment arrangements are handled separately and communicated directly to you.
2. How We Collect Data
- Contact form — when you fill in and submit our enquiry form
- Email or telephone — when you contact us directly
- Analytics tools — automatically, when you browse our website (see Cookies section)
- Session correspondence — notes and details gathered during the course of your session or programme
3. Legal Basis for Processing
Under Malaysia's Personal Data Protection Act 2010 (PDPA), we process your data on the following bases:
- Consent — when you submit our contact form, you agree to us using your data to respond to your enquiry
- Contractual necessity — to fulfil session bookings and programme arrangements you have requested
- Legitimate interest — to maintain records of sessions for administrative and service quality purposes
- Legal compliance — where required by applicable law
4. How We Use Your Data
- To respond to your enquiries and schedule session appointments
- To send session confirmation details, preparation notes, and follow-up information
- To improve our workshop content and service organisation
- To maintain records for internal administrative purposes
- To comply with any applicable legal requirements
We do not use your personal data for unsolicited marketing without your clear agreement.
5. Data Sharing with Third Parties
We do not sell or rent your personal data. We may share data with:
- Analytics providers (such as Google Analytics) to understand how the website is used — this data is aggregated and not personally identifying
- Advertising platforms (such as Google Ads, Meta, or Bing) where applicable, for campaign measurement only
- Service providers who assist with technical infrastructure, under appropriate data agreements
- Authorities where required by Malaysian law
6. Data Retention
- Enquiry and contact form data is retained for up to 24 months from the date of last correspondence
- Session records are retained for up to 36 months after completion of a programme
- Analytics data is retained according to the relevant platform's default retention settings
- You may request earlier deletion at any time (see Your Rights below)
7. Data Protection Measures
- Data is stored on servers protected by access controls and encryption in transit (HTTPS)
- Internal access to personal data is limited to staff who require it for session delivery
- We review our data handling practices on a regular basis
- In the event of a data breach affecting your rights, we will notify you and the relevant authority as required under the PDPA
8. Cookies
We use cookies and similar technologies to operate this website and to understand how visitors use it. These include:
- Essential cookies — required for basic site operation
- Analytics cookies — to count visits and understand which pages are helpful
- Marketing cookies — where enabled, for advertising measurement
- Preference cookies — to remember your cookie consent choices
Full details are available on our Cookie Policy page, where you can also manage your preferences.
9. Your Rights
Under the PDPA and general data protection principles, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request that inaccurate or incomplete data be corrected
- Withdrawal of consent — withdraw consent to processing at any time, without affecting prior processing
- Erasure — request that we delete your data where there is no overriding reason to retain it
- Objection — object to processing carried out on the basis of legitimate interest
To exercise any right, write to us at [email protected]. We will respond within 30 days.
10. Children's Privacy
Our website and services are directed at adults aged 18 and over. We do not knowingly collect data from individuals under 18. If you believe a minor has submitted data to us, please contact us at [email protected] so we can remove it.
11. External Links
This website may contain links to third-party resources. Linkfolk is not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external site you visit.
12. Policy Updates
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last Updated" date. Continued use of the website after changes are posted constitutes acceptance of the updated policy.
13. Contact for Data Enquiries
For any questions about this policy or to exercise your rights:
- Email: [email protected]
- Address: 15 Jalan Gaya, 88000 Kota Kinabalu, Sabah, Malaysia
- Phone: +60 88 269 1438
Malaysia — Personal Data Protection Act 2010 (PDPA) applies to data processing by Linkfolk.