Privacy Policy

1. Information we collect

We collect personal information in the following ways:

• Enquiry and enrolment forms: Name, email address, phone number, and programme interest when you submit an enquiry or enrol in a programme.
• Programme participation: Submitted practice tasks, assessments, and written exchanges with faculty during your programme.
• Website cookies: Technical information about your visit, including page views and browser type. See our Cookie Policy for details.
• Communications: Emails and messages you send us in connection with an enquiry or your programme.

2. How we use your information

We use the personal information we collect to:

• Respond to programme enquiries and provide information about programmes
• Administer your programme enrolment and deliver teaching, feedback, and support
• Issue completion records at the end of your programme
• Communicate with you about cohort schedules, deferrals, and programme-related matters
• Send information about other Fathomwork programmes if you have not opted out (you may opt out at any time)
• Improve our website and understand how it is used
• Comply with legal obligations under Malaysian law

The legal basis for processing your data is: performance of a contract (programme delivery), our legitimate interests (responding to enquiries, improving services), consent (marketing communications), and legal obligations.

3. How long we keep your information

• Enquiry data: 12 months from the date of enquiry if no enrolment follows
• Programme and enrolment records: 7 years from the programme end date (for record and legal compliance purposes)
• Completion records: Retained indefinitely as a programme record
• Marketing preferences: Until you opt out or request deletion
• Website analytics data: 26 months in aggregate, anonymised form

4. Data sharing

We share personal data only in the following circumstances:

• Faculty and programme staff: To deliver teaching, assessment feedback, and support.
• Hosting and technology providers: Who process data on our behalf under data processing agreements. All providers used by Fathomwork are subject to confidentiality obligations.
• Employer sponsors: Only if you or your employer have provided consent and are funding your programme participation.
• Legal authorities: Where required by Malaysian law or a valid court order.

We do not sell personal data to third parties. We do not transfer data outside Malaysia without appropriate safeguards.

5. Data protection measures

• Data is stored on servers located in Malaysia
• Access to personal data is restricted to staff who need it to perform their role
• Transmissions to and from our website are encrypted via HTTPS
• In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authority without undue delay
• We review our data handling practices periodically and update them as needed

6. Cookies

Our website uses cookies to function and to understand how visitors use it. Essential cookies are necessary for the website to operate. Analytics and preference cookies are optional and require your consent. For full details, see our Cookie Policy.

7. Your rights

Under Malaysian law (Personal Data Protection Act 2010) and applicable data protection principles, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Request that we stop processing your data for direct marketing purposes
• Withdraw consent where processing is based on consent
• Request deletion of your data, subject to legal retention requirements
• Lodge a complaint with the relevant authority: the Department of Personal Data Protection Malaysia (JPDP)

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-party links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policies of any external sites you visit.

9. Children

Our programmes are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have done so, please contact us immediately at [email protected].

10. Policy updates

We may update this policy from time to time. When we make material changes, we will post the updated policy on this page with a new "last updated" date. If you are an enrolled participant, we will notify you by email of significant changes.

11. Contact