Privacy Policy

Introduction

Plainspoken ("we", "us", "our") is committed to handling the personal information of those who use our website and attend our workshops with care and transparency. This policy describes what data we collect, how we use it, and what your rights are in relation to it.

This policy applies to the Plainspoken website at plainspokeniasd.world and to our in-person workshop and subscription services. It does not cover third-party sites we may link to.

Our operations are based in Johor Bahru, Malaysia. We process personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

For data-related questions, contact us at [email protected].

What Data We Collect

Information you provide

When you use our contact form or make a booking enquiry, we collect the name, email address, and phone number you provide. A message field is available but optional.

Information collected automatically

When you visit our website, we may collect standard technical data including your IP address, browser type, pages visited, and time of visit, through analytics tools.

Legal basis and retention

• Enquiry data is processed on the basis of your consent and our legitimate interest in responding. It is retained for up to 24 months from last contact, then deleted.
• Booking and attendance records are retained for up to three years for administrative purposes.
• Analytics data is retained in aggregated form for up to 26 months.

How We Use Your Data

• To respond to your enquiry or booking request
• To communicate session details, schedule changes, or follow-up notes relevant to the format you attended
• To improve the website based on aggregated usage data
• To meet any legal obligations we are subject to under Malaysian law

We do not use your personal data to send unsolicited marketing material. We do not sell, rent, or trade personal data with any third party for commercial purposes.

Data Protection Measures

We take reasonable steps to protect the personal data we hold from unauthorised access, loss, or disclosure. These measures include:

• Secure HTTPS connections on all web pages
• Access to personal data restricted to those who need it to perform their role
• Booking and attendance records stored on password-protected systems
• Third-party service providers selected on the basis of their own data protection standards

In the event of a data breach that affects your rights, we will notify you and the relevant authority in accordance with applicable law.

Cookies

Our website uses cookies for basic functionality and optional analytics. Essential cookies are necessary for the site to work. You can manage your preferences for optional cookies through the cookie consent panel or our Cookie Policy.

Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) and, where applicable, other relevant data protection frameworks, you have the following rights in relation to your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may ask us to correct inaccurate or incomplete data.
• Erasure: You may request deletion of your personal data where we have no continuing lawful basis for holding it.
• Restriction: You may ask us to limit how we process your data in certain circumstances.
• Objection: You may object to processing carried out on the basis of legitimate interest.
• Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 14 working days. If you are not satisfied with our response, you may contact the Department of Personal Data Protection Malaysia (JPDP).

Third-Party Links

Our website may include links to third-party websites or services. We are not responsible for the privacy practices of those sites and encourage you to read their own policies before providing them with personal information.

Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that we hold data relating to someone under 18, we will delete it promptly.

Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website or services after a change constitutes acceptance of the updated policy.