Privacy Policy

1. Introduction

Restford ("we", "us", "our") is committed to handling personal data responsibly and transparently. This Privacy Policy explains what personal data we collect in connection with our retirement information services, how we use it, and the rights available to individuals whose data we hold.

Restford operates from 19, Jalan Burma, 10050 George Town, Penang, Malaysia. This policy applies to data collected through our website at restforasd.pro and through our session booking and enquiry processes.

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Enquiry data: Name, email address, and phone number (if provided) when you submit our contact form or reach us by phone.
• Booking data: Name, email address, phone number, and programme preference when you book a session.
• Usage data: Technical data collected via analytics cookies, including pages visited, browser type, and approximate location. This data is aggregated and not linked to identifiable individuals without consent.
• Communications: The content of emails or messages you send us.

We do not collect sensitive personal data such as financial account numbers, tax identification numbers, or health information. We actively discourage participants from including such details in enquiry messages.

3. Legal Basis for Processing

We process personal data on the following legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: Where you have provided consent, for example by submitting our contact form or accepting analytics cookies.
• Contract performance: Where processing is necessary to provide the session or programme you have booked.
• Legitimate interests: For administrative communications, website improvement, and maintaining records of correspondence. We balance these interests against your rights.

4. How We Use Your Data

• To respond to your enquiries and answer questions about our programmes.
• To confirm and manage session bookings.
• To send pre-session materials (document checklists, agendas) to confirmed participants.
• To provide follow-up support as included in the Companion Programme.
• To improve our website and session content using aggregated analytics data.

We do not use your data for automated decision-making. We do not sell your data to third parties. We do not share your data with financial service providers.

5. Data Retention

Enquiry data is retained for up to 12 months from the date of last contact. Booking and session records are retained for up to 3 years for administrative purposes, after which they are securely deleted. Analytics data is retained in aggregated, non-identifiable form only.

6. Data Protection Measures

We apply reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss. These include access controls on systems containing personal data, encrypted email communications where possible, and a clear internal policy on handling participant information.

In the event of a data breach that is likely to affect your rights or interests, we will notify the relevant authority and, where required, the affected individuals in accordance with Malaysian PDPA requirements.

7. Cookies

Our website uses cookies. Essential cookies are necessary for the site to function. Optional analytics and preference cookies are used only with your consent. For full details on the cookies we use and how to manage them, please see our Cookie Policy.

8. Third-Party Services

We may use third-party services including website analytics tools and email communication platforms. These providers are required to handle data only as instructed by us and in accordance with applicable law. Our website may contain links to external sites — we are not responsible for the privacy practices of those sites.

9. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Withdraw consent where processing is based on consent.
• Request that we limit or cease processing your data in certain circumstances.
• Lodge a complaint with the Department of Personal Data Protection (JPDP) if you believe your data has been handled improperly.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Children's Privacy

Our services are designed for adults. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that data from a minor has been submitted, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. Continued use of the website after changes are posted constitutes acceptance of the updated policy. For material changes, we will make reasonable efforts to notify known contacts by email.

12. Contact Us

For all data-related enquiries or requests:

• Email: [email protected]
• Address: Restford, 19, Jalan Burma, 10050 George Town, Penang, Malaysia