Privacy Policy

Wayfinder Nook ("we", "us", "our") is committed to protecting the personal information of everyone who visits our website or uses our services. This policy explains what data we collect, why we collect it, how we use it, and what rights you have under the Personal Data Protection Act 2010 (PDPA) of Malaysia.

Our registered address is 532, Block A, Kelana Centre Point, Jalan SS7/19, Kelana Jaya, 47301 Petaling Jaya, Selangor, Malaysia. We are the data controller for information collected through this website and through our session booking process.

If you have questions about this policy, contact us at [email protected].

1. What personal data we collect

When you use our contact form, book a session, or communicate with us, we may collect:

• Your full name
• Email address
• Phone number (if provided)
• The nature of your enquiry or the service you're interested in
• Company name and HR contact details (for employer programme enquiries)

We also collect standard technical data when you visit our website, including your IP address, browser type, pages visited, and time spent on each page. This data is collected via cookies and analytics tools and is used in aggregate — it is not linked to your identity unless you have submitted a contact form.

2. How we collect data

• Contact form submissions — when you fill in the form on our website
• Direct communication — when you call or email us
• Session intake — information gathered during a booked session at our centre
• Cookies and analytics — automatically collected when you browse our site (see Section 5)

3. Legal basis for processing

Under the PDPA 2010, we process your personal data on the following grounds:

• Consent — when you submit a contact form or book a session, you consent to us using your details to respond and arrange the service you've requested.
• Legitimate interests — we may retain records of completed sessions to improve our service quality and update our materials. This interest does not override your rights.
• Contract performance — when you have booked and paid for a programme, we process your data to deliver that service.

4. How we use your data

• To respond to your enquiry or arrange a session booking
• To deliver the session or programme you've booked
• To send the follow-up message included with individual sessions
• To send administrative communications related to your booking (appointment reminders, changes)
• To improve our website and session materials based on aggregated usage data

We do not use your personal data for unsolicited marketing. If you wish to receive occasional updates about new sessions or programmes, you may opt in when contacting us. You can withdraw this at any time.

5. Cookies

Our website uses cookies to improve functionality and to understand how visitors use the site. We use essential cookies (required for the site to function), and optional analytics and preference cookies. You can manage your cookie preferences when you first visit the site or at any time via our Cookie Policy page.

6. Data retention

• Contact form enquiries that do not proceed to a booking are deleted after 6 months.
• Session booking records are retained for 3 years from the date of the session for quality assurance purposes.
• Employer programme records are retained for 3 years from programme completion.
• Anonymised feedback data may be retained indefinitely for service improvement purposes.

7. Data sharing

We do not sell, rent, or trade your personal data. We may share limited data with:

• Service providers who support our operations (e.g. email delivery, website hosting) — only what is necessary for them to perform their function, under confidentiality obligations.
• Authorities if required by law or to comply with a valid legal obligation.

We do not transfer your personal data outside Malaysia except where necessary for hosting or email delivery services, in which case we ensure appropriate safeguards are in place.

8. Data protection measures

• Our website uses HTTPS encryption for data transmitted via the contact form.
• Internally held records are stored on access-controlled systems with restricted staff access.
• Paper session notes are stored in a locked cabinet and disposed of securely when retention periods end.
• In the event of a data breach affecting your personal data, we will notify you and the relevant authority within the timeframe required by Malaysian law.

9. Your rights

Under the PDPA 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent for processing based on your consent, at any time
• Request deletion of your data where it is no longer required for the purpose it was collected
• Object to processing based on legitimate interests
• Lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your rights have been violated

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Third-party links

Our website may contain links to external sites, including government portals and community resources. We are not responsible for the privacy practices of those sites. We recommend you review their privacy policies before providing any personal information.

11. Children's privacy

Our website is intended for adults aged 18 and above. For the Youth Civic Basics Programme, enrolment enquiries are handled by a parent or guardian on behalf of the participant. We do not knowingly collect personal data directly from individuals under 18 without parental consent.

12. Changes to this policy

We may update this policy from time to time. When we do, the "Last updated" date at the top of this page will change. We recommend reviewing this page periodically. Continued use of our website after any change constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or to exercise your rights:

• Email: [email protected]
• Address: 532, Block A, Kelana Centre Point, Jalan SS7/19, Kelana Jaya, 47301 Petaling Jaya, Selangor, Malaysia
• Phone: +60 3-7800 0899