Privacy Policy
1. Introduction
Quietude ("we", "us", "our") is committed to handling your personal information with care and transparency. This Privacy Policy describes what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.
This policy applies to all personal data collected through our website at quietude.blog, through enquiry forms, and through the delivery of our services including orientation sessions, records organisation programmes, and coordination engagements.
Quietude operates under and complies with Malaysia's Personal Data Protection Act 2010 (PDPA).
2. Data We Collect
2.1 Information You Provide Directly
- Full name
- Email address
- Phone number (optional on web form; sometimes provided during service engagement)
- Message content submitted through our contact form
- Documents and records you bring or send to us during a service engagement (these are used solely for the purpose of that engagement)
2.2 Information Collected Automatically
- Browser type and version
- Pages visited and time spent on each page (via analytics cookies, if consented)
- Referring website or search term
- IP address (used for security purposes, not stored long-term)
2.3 Legal Basis for Processing
We process your personal data on the following bases:
- Consent — where you have given us explicit permission (e.g., submitting the contact form, accepting analytics cookies)
- Contractual necessity — to deliver the service you have engaged us for
- Legitimate interests — for basic website security and operational communications
2.4 Retention Periods
- Contact enquiry records: up to 24 months from date of last communication
- Service engagement records: up to 36 months from completion of engagement
- Documents shared with us during an engagement: returned or deleted at engagement close unless you request otherwise
- Website analytics data: up to 14 months (aggregated)
3. How We Use Your Data
- Responding to your enquiries and scheduling appointments
- Delivering the services you have engaged — orientation sessions, records organisation, or coordination support
- Sending relevant administrative communications about your engagement
- Improving our website and session materials based on aggregated usage patterns
- Complying with applicable legal obligations under Malaysian law
We do not use your personal data for unsolicited marketing. We do not sell, rent, or trade your personal data to any third party.
4. Data Sharing
We share personal data only in the following limited circumstances:
- Service providers — such as email hosting and website analytics services, under data processing agreements requiring them to protect your data
- Legal requirement — where we are required by Malaysian law or a competent authority to disclose information
We do not share your personal data with financial institutions, advisers, or practitioners without your explicit instruction. Our referral directory is provided to you — we do not transmit your data to listed practitioners on your behalf.
5. Data Protection Measures
- Access to personal data held on our systems is restricted to staff directly involved in the relevant engagement
- Our website uses HTTPS encryption for all data in transit
- Physical documents brought to sessions are handled in a secure environment and not retained after the engagement
- Staff handling personal data receive guidance on PDPA obligations and confidentiality
- In the event of a data breach that may affect your rights, we will notify you within a reasonable time and take steps to minimise harm
6. Cookies
Our website uses cookies to remember your preferences and support basic analytics. You can read more about the specific cookies we use, their purpose, and how to manage them in our Cookie Policy.
Essential cookies are required for the website to function correctly. Analytics and preference cookies are used only with your consent.
7. Your Rights Under the PDPA
Under Malaysia's Personal Data Protection Act 2010, you have the following rights:
- Right of access — to request a copy of the personal data we hold about you
- Right to correct — to request that inaccurate or incomplete data be corrected
- Right to withdraw consent — at any time, where processing is based on consent
- Right to limit processing — to request that we stop using your data for certain purposes
- Right to be informed — of how your data is being processed
To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days. We may ask for proof of identity to protect your information.
If you have a concern about how we have handled your personal data, you may also raise it with Malaysia's Personal Data Protection Department (JPDP) at www.pdp.gov.my.
8. Third-Party Links
Our website may contain links to external websites, including those of practitioners in our referral directory or regulatory bodies. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy notices before providing any personal information.
9. Children's Privacy
Our services are directed at adults managing their own retirement records or those of an adult family member. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us so we can remove it.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any material changes will be noted at the top of this page with a revised "Last Updated" date. Continued use of our website or services after such changes constitutes acceptance of the updated policy.
11. Contact
For all data protection enquiries, please contact:
- Quietude
- 16-3 Jalan Kia Peng, 50450 Kuala Lumpur, Malaysia
- Email: [email protected]
- Telephone: +60 3-6142 8907
- Office hours: Monday – Friday, 9:00 am – 5:30 pm