Privacy Policy

1. Introduction

Quietus Desk ("we", "our", "the practice") is committed to protecting the personal data of individuals who engage with our services or communicate with us. This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and your rights under Malaysian law.

This policy applies to all personal data collected through our website, enquiry forms, and one-to-one programme sessions. It has been prepared in accordance with the Personal Data Protection Act 2010 (Malaysia) (PDPA).

If you have questions about this policy, please contact us at privacy@quietusd.

2. Data We Collect

We collect only the personal data reasonably necessary to provide our educational programmes and respond to enquiries. This may include:

• Full name
• Email address
• Telephone number
• General information about your household financial documents (shared voluntarily in sessions)
• Session notes prepared by our educator for programme continuity
• Technical data collected via cookies (see Section 7)

We do not collect sensitive financial data (account numbers, passwords, or identification numbers) through any form or digital channel.

3. How We Collect Data

Personal data is collected through the following means:

• Enquiry forms submitted via our website
• Email and telephone correspondence
• Information shared by participants during programme sessions
• Cookies and analytics tools on our website (with consent)

4. Legal Basis and Purpose

We process personal data for the following purposes:

• To respond to your enquiry and schedule an introductory call
• To deliver the educational programme you have enrolled in
• To prepare written summaries and materials relevant to your programme
• To maintain records of completed programmes for our own administrative purposes
• To improve the quality of our programmes over time

Under the PDPA, processing is carried out on the basis of consent (for enquiries and optional data) and contract performance (for enrolled participants).

5. Data Retention

We retain personal data for a period of three years following the completion of a programme, or from the date of an enquiry that did not proceed to enrolment. After this period, data is securely deleted. Session notes are retained only for programme continuity and are not used for any marketing or analytical purpose.

6. Third-Party Sharing

We do not sell, rent, or share personal data with third parties for commercial purposes. Personal data may be disclosed in the following limited circumstances:

• To service providers who assist with website hosting and email delivery, under data processing agreements that prohibit independent use
• Where required by Malaysian law or court order

Quietus Desk does not receive referral fees from financial institutions, insurers, or advisers and does not share participant data with any such organisations.

7. Cookies

Our website uses cookies to understand how visitors engage with our content. Essential cookies are required for basic website operation. Analytics and preference cookies are optional and only activated with your consent. Full details are set out in our Cookie Policy.

8. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Password-protected systems for session notes and participant records
• Encrypted email channels for sensitive correspondence
• Restricted access — participant data is accessible only to the educator and programme coordinator
• Regular review of data retention and access practices

9. Your Rights Under PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for optional processing at any time
• Request erasure of your data (subject to our legitimate administrative obligations)
• Object to processing for purposes beyond those stated here

To exercise any of these rights, contact us at privacy@quietusd. We will respond within 21 days.

10. Children's Privacy

Our programmes are designed for adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently done so, please contact us immediately at privacy@quietusd.

11. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of external sites and encourage you to review their privacy policies independently.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated "Last Updated" date. Continued use of our website or services after changes are published constitutes acceptance of the revised policy.

13. Contact

For questions, data requests, or concerns about this policy, please contact:

Quietus Desk
Suite 6-9 Heritage Tower, Jalan Cangkat Raja Chulan
50200 Kuala Lumpur, Federal Territory of Kuala Lumpur
Email: privacy@quietusd
Telephone: +60 3-2078 4631