Privacy Policy
Last Updated: 15 June 2025 | Effective Date: 15 June 2025
1. Introduction
Rainvault ("we", "us", "our") is committed to protecting the personal information of everyone who uses our website or enrols in our programmes. This Privacy Policy explains what data we collect, how we use it, how we protect it, and your rights as a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA).
If you have questions about this policy or how we handle your information, please contact us at [email protected].
2. Data We Collect
2.1 Information You Provide
- Contact form submissions: Name, email address, and optionally, phone number and message content.
- Programme enrolment: Name, email address, and phone number to confirm your place and send programme materials.
2.2 Data Collected Automatically
- Website usage data via analytics cookies (if you have consented to these).
- Browser type, device type, and approximate location (city-level) from server logs.
- Cookie preferences stored in your browser's local storage.
2.3 Legal Basis for Processing
- Consent: For analytics cookies and marketing communications.
- Contractual necessity: For processing enrolment and delivering programme content.
- Legitimate interest: For responding to enquiries and maintaining service records.
2.4 Data Retention
Contact form data is retained for 12 months. Enrolment records are retained for 3 years after programme completion for administrative purposes. Analytics data is retained for up to 14 months in aggregate form. You may request earlier deletion at any time (see Section 6).
3. How We Use Your Data
- To respond to enquiries submitted via our contact form.
- To confirm enrolment and send programme-related information and materials.
- To communicate programme updates, schedule changes, or relevant notices.
- To understand how visitors use our website and improve our content (analytics, with consent).
- To comply with legal obligations under Malaysian law.
We do not use your personal data for automated decision-making or profiling. We do not send unsolicited marketing communications. If you receive a communication from us that you did not expect, please contact us at [email protected] to have your details removed.
4. Sharing Your Data
We do not sell, rent, or trade personal information to any third party. We may share data with the following categories of service providers, strictly for the purposes described above:
- Website hosting providers — for operating our website securely.
- Email delivery services — for sending programme confirmation and communications.
- Analytics services — aggregated, anonymised usage data only (if consent is given).
All third-party providers are required to handle data in accordance with applicable data protection standards. No data is transferred outside Malaysia except where a service provider's infrastructure requires it, in which case appropriate safeguards apply.
5. Data Protection Measures
- Our website uses HTTPS encryption for all data transmitted between your browser and our server.
- Access to participant data is restricted to authorised team members on a need-to-know basis.
- We conduct periodic internal reviews of our data handling practices.
- In the event of a data breach affecting your personal information, we will notify you and the relevant authority in accordance with our obligations under the PDPA 2010.
6. Cookies
We use cookies for essential site functionality and, with your consent, for analytics purposes. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies cannot be disabled as they are necessary for the website to function correctly.
7. Your Rights
Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you.
- Right to correction: Ask us to correct inaccurate or incomplete information.
- Right to withdraw consent: Withdraw your consent to data processing at any time (this does not affect processing carried out before withdrawal).
- Right to object: Object to processing based on legitimate interest.
- Right to erasure: Request deletion of your personal data, subject to our legitimate record-keeping obligations.
To exercise any of these rights, please email us at [email protected]. We will respond within 21 days. If you are unsatisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.
8. Third-Party Links
Our website may contain links to external websites for reference or information. Rainvault is not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.
9. Children's Privacy
Our programmes are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted information to us, please contact us at [email protected] and we will arrange for it to be deleted promptly.
10. Updates to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website or programmes after the updated policy is published constitutes your acknowledgement of the changes. We recommend reviewing this page periodically.
11. Contact
Data Controller: Rainvault
Jalan Cheras, 56000 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3-3097 5842