Privacy Policy

1. Introduction

Quillkeeper ("the Studio", "we", "us", "our") is committed to protecting the personal information of every individual who interacts with our services. This Privacy Policy describes what data we collect, how we use it, and the rights you have in relation to your information. It applies to all visitors to our website and to all participants who attend our writing workshops and sessions.

The Studio operates from Lot 18, Jalan Sultan Idris Shah, 30000 Ipoh, Perak, Malaysia. For data-related enquiries, contact us at [email protected].

2. Data We Collect

We collect personal data only when you choose to provide it. The categories of data we may collect include:

• Contact information: name, email address, and telephone number submitted through our enquiry form.
• Session correspondence: messages and notes exchanged before or after a booking.
• Technical data: browser type, approximate location, and pages visited, collected through cookies and analytics tools if you have consented to their use.

Important: Content you write during a workshop session is not collected, stored, or retained by the Studio. All participant writing remains the property of the participant.

3. How We Use Your Data

We use personal data only for the purposes for which it was collected:

• To respond to enquiries and confirm session bookings.
• To send follow-up materials included in a session package (reading lists, follow-up notes, printed booklets).
• To understand how our website is used and improve its content (analytics only, and only with your consent).
• To fulfil obligations under Malaysian law, including the Personal Data Protection Act 2010 (PDPA).

4. Legal Basis for Processing

We process personal data on the basis of your consent (for analytics cookies), the performance of a service contract (for session correspondence and booking), and our legitimate interest in responding to enquiries from individuals who have contacted us directly. Under the Malaysian Personal Data Protection Act 2010, we are a data processor operating within Peninsular Malaysia.

5. Data Retention

Contact information submitted through the enquiry form is retained for up to twelve months after the last interaction. Session correspondence related to an active subscription is retained for the duration of the subscription period plus six months. Analytics data, if collected, is retained for a maximum of twenty-six months. Data is deleted securely once the retention period ends.

6. Third-Party Services

We do not sell, rent, or share your personal data with third parties for their own marketing purposes. We may use the following third-party services in operating this website:

• Google Analytics — for understanding website usage patterns (cookies only, with your consent).
• Google Maps — for displaying our studio location (embedded iframe; no personal data is passed to Google through the map embed).

7. Cookies

We use cookies to keep the site working and, with your consent, to understand how it is used. For full details, see our Cookie Policy.

8. Data Security

We take reasonable steps to protect personal data from unauthorised access, loss, or misuse. Contact information submitted through our website is transmitted over an encrypted connection. Access to stored data is limited to studio staff directly involved in session management. In the event of a data breach that may affect your rights, we will notify affected individuals within the period required under applicable law.

9. Your Rights

Under the Malaysian Personal Data Protection Act 2010, you have the right to:

• Access personal data we hold about you.
• Request correction of inaccurate data.
• Withdraw consent for processing at any time (where processing is based on consent).
• Request that we stop processing your data for direct marketing purposes.
• Lodge a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of these rights, write to us at [email protected]. We will respond within fourteen business days.

10. Children's Privacy

Quillkeeper's sessions are designed for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data through our website, please contact us so we can remove it promptly.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be noted at the top of this page with an updated date. Continued use of our website or services after changes are published constitutes acceptance of the revised policy.

13. Contact

For any data protection enquiry, contact us at: