Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to Sumworth ("we", "us", "our"), operating from Lot 3.05, Riverbank Suites, No. 1 Jalan Tunku Abdul Rahman, 93100 Kuching, Sarawak, Malaysia. It covers how we handle personal data collected through our website and in connection with our property finance education programmes.

Personal data is processed in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. By using our website or registering for a programme, you acknowledge this policy.

2. Information We Collect

We collect personal data when you submit a contact or enquiry form on our website, register for a programme, or communicate with us by email or phone. The information we typically collect includes your full name, email address and phone number. We may also collect a message or enquiry you have submitted.

We also collect non-personal data automatically when you visit our website, including browser type, pages visited and general usage patterns, through cookies and similar tools. This is covered further in Section 5.

Legal Basis for Processing

• Consent — where you have provided your details voluntarily through a form or direct communication
• Legitimate interest — to respond to enquiries and manage programme registrations
• Contractual necessity — where personal data is needed to deliver a programme you have registered for

Retention Periods

Enquiry and contact data is retained for up to 12 months. Programme registration data is retained for up to 3 years for administrative purposes, then deleted unless legal requirements require longer retention.

3. How We Use Your Information

We use personal data collected through our website and programmes for the following purposes:

• Responding to enquiries about our programmes
• Processing registrations and sending programme-related communications
• Sending information about upcoming programmes or schedule changes, where you have expressed interest
• Improving our website and services through aggregated, anonymised analytics
• Complying with applicable legal obligations

We do not sell your personal data. We do not share your information with third parties for their own marketing purposes. Data may be shared with service providers who assist us in operating our website or delivering our programmes (such as email services), under appropriate data processing agreements.

4. How We Protect Your Data

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss or disclosure. These include:

• Encrypted data transmission via HTTPS on our website
• Access to personal data limited to staff who need it for programme operations
• Regular review of data handling practices
• Prompt notification to affected individuals in the event of a data breach, as required under applicable law

5. Cookies

Our website uses cookies to understand how visitors use the site and to store your cookie preferences. We use essential cookies (required for basic site function), analytics cookies (to understand visitor patterns) and preference cookies (to remember your settings).

You can manage your cookie preferences at any time. For full details, including how to adjust your settings, please see our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may ask us to correct inaccurate or incomplete data.
• Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Limit processing: You may ask us to stop using your data for direct communication purposes.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days. If you are unsatisfied with how we handle your request, you may refer the matter to the Department of Personal Data Protection Malaysia.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data to them.

8. Children's Privacy

Our programmes and website are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that data has been submitted by a minor, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website or services after changes take effect constitutes acceptance of the revised policy.

10. Contact for Privacy Matters

For any questions about this policy or how we handle personal data, please contact us: