Privacy Policy
Last updated: 14 April 2025
1. Introduction
Mossreed ("we", "us", "our") is committed to protecting the personal data of everyone who interacts with us — whether through our website, our programmes, or our enquiry process. This Privacy Policy explains what data we collect, how we use it, and what your rights are under the Personal Data Protection Act 2010 (PDPA) of Malaysia.
Our registered place of business is: 28 Jalan Sultan Ismail, 50250 Kuala Lumpur, Wilayah Persekutuan, Malaysia.
Questions about this policy may be directed to: [email protected]
2. Data We Collect
Information you provide to us
- Name and contact details (email address, phone number) submitted through our enquiry form
- Information shared during the programme registration process
- Feedback and survey responses submitted after programme participation
Information collected automatically
- Technical data including your browser type, IP address, and pages visited (via analytics cookies, with your consent)
- Cookie preferences and consent records
Legal basis for processing
We process personal data on the following bases: your consent (for communications and analytics); the performance of a contract (for programme registration); and our legitimate interests (for responding to enquiries and maintaining records).
3. How We Use Your Data
- Responding to your enquiries about our programmes
- Processing programme registrations and managing cohort logistics
- Sending programme-related communications including schedule updates and materials
- Improving our website and programme content based on usage patterns (analytics data, with consent)
- Maintaining records as required for administrative and legal purposes
We do not sell, rent, or share your personal data with third-party marketing organisations. We do not use your data to make automated decisions about you.
4. Data Retention
Enquiry records are retained for 12 months from the date of last contact. Programme participant records are retained for 3 years after the completion of a programme, for administrative and quality assurance purposes. After these periods, data is securely deleted.
5. Data Protection Measures
We take reasonable technical and organisational steps to protect your personal data against unauthorised access, disclosure, or loss. Our website uses HTTPS encryption. Access to personal data is restricted to staff members who require it for their work. We review our data security practices regularly.
In the event of a data breach that is likely to affect your rights or interests, we will notify you and the relevant authorities in accordance with applicable Malaysian law.
6. Cookies
We use essential cookies to maintain basic website functionality and, with your consent, analytics cookies to understand how visitors use our pages. For full details, please see our Cookie Policy.
7. Third-Party Services
Our website uses Google Analytics (with your consent) to collect anonymised usage data. We may use third-party email delivery services to send programme-related communications. These services are bound by data processing agreements and are not permitted to use your data for their own purposes.
Links on our website to external resources (such as regulatory websites or reading lists) are provided for your convenience. We are not responsible for the privacy practices of those external sites.
8. Your Rights
Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Withdraw consent for marketing communications at any time
- Request that we stop processing your data in certain circumstances
- Request deletion of your personal data, subject to our legal retention obligations
To exercise any of these rights, please write to us at: [email protected]. We will respond within 21 days.
9. Children's Privacy
Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have done so, we will delete that data promptly.
10. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page. We recommend reviewing this policy periodically.
11. Contact
For privacy-related questions or requests:
- Email: [email protected]
- Address: 28 Jalan Sultan Ismail, 50250 Kuala Lumpur, Wilayah Persekutuan, Malaysia