Legal
Privacy Policy
Last Updated: 5 May 2025
Wickleaf ("we", "us", "our") is an education organisation registered in Malaysia and headquartered at 9 Lebuh Light, 10200 George Town, Pulau Pinang. This Privacy Policy describes how we collect, use, and protect personal data you provide when enquiring about or participating in our education programmes.
We take the protection of personal data seriously. This policy is written in plain language so that you can understand exactly what we do with information you share with us. If you have any questions, contact us at [email protected].
This policy applies to information collected through our website at wickleaf.co, through our contact form, by email, by telephone, and in connection with our programme registration and delivery processes.
1. Personal Data We Collect
We collect only the personal data necessary to respond to enquiries and administer our education programmes. This includes:
- Contact information: name, email address, and telephone number (provided via our contact form or by email)
- Programme registration data: household size, programme of interest, scheduling preferences
- Communication records: emails and notes from telephone conversations related to enquiries and programme participation
- Website analytics: anonymised data on page visits and interaction, collected via analytics cookies where you have consented
We collect this data via:
- The contact form on our website
- Email correspondence
- Telephone enquiries
- Programme registration forms (paper and digital)
- Website cookies (where consented)
Legal basis for processing (Malaysia PDPA 2010): We process your personal data on the basis of your consent (when you submit the contact form or register for a programme) and our legitimate interest in responding to enquiries and administering our services. All data is held within Malaysia or in jurisdictions with equivalent data protection measures.
Retention: Enquiry data is retained for 12 months from last contact. Programme participant data is retained for 3 years following programme completion, in accordance with standard organisational record-keeping practice. After these periods, data is securely deleted.
2. How We Use Your Personal Data
- To respond to enquiries about our education programmes
- To confirm registrations and communicate programme logistics
- To send programme materials and follow-up information
- To maintain organisational records of programme participation
- To improve our website and programme offerings using anonymised analytics
- To comply with applicable Malaysian law
We do not sell, rent, or trade your personal data to third parties. We do not send marketing communications without your prior consent. If you have consented to receive updates about future programmes, you may withdraw that consent at any time by contacting us at [email protected].
We may share your data with service providers who assist us in delivering programmes (such as printed materials suppliers or venue managers) strictly on a need-to-know basis and under confidentiality obligations. We do not share personal data with advertisers or data brokers.
3. How We Protect Your Data
- Personal data is stored on password-protected, access-controlled systems
- Our website uses HTTPS encryption for data transmission
- Access to personal data is limited to staff members who require it to fulfil their role
- We review our data handling practices periodically
- In the event of a data breach affecting your personal data, we will notify you and the relevant authority as required under the Personal Data Protection Act 2010 (Malaysia)
4. Cookies
Our website uses cookies to function and, where you have consented, to collect anonymised analytics data. Essential cookies are necessary for the website to work and cannot be disabled. Analytics and other optional cookies are only placed with your consent. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.
5. Your Rights
Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or incomplete data we hold
- Withdraw consent to processing at any time (this does not affect the lawfulness of processing before withdrawal)
- Request deletion of your personal data, subject to our legal record-keeping obligations
- Object to processing for marketing purposes
- Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your data rights have been infringed
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. We may need to verify your identity before processing a request.
6. Third-Party Links
Our website may contain links to external websites — for example, links to licensed practitioners or regulatory authorities we refer participants to. We are not responsible for the privacy practices of those websites. We recommend reading the privacy policy of any external site you visit.
7. Children's Privacy
Our programmes and website are directed at adults aged 18 and above. We do not knowingly collect personal data from persons under 18. Where a programme involves participation by younger household members (for example, in the Family Legacy programme), any personal data relating to those individuals is provided with the explicit consent of a parent or guardian and is handled with particular care.
8. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Where changes are material, we will notify current programme participants by email. Continued use of our website or services after an update constitutes acceptance of the revised policy.
9. Contact Us
For any questions about this Privacy Policy or your personal data: