Privacy Policy

1. Data We Collect

We collect personal data only when you provide it to us through the website contact form, telephone enquiries, or session registration. The information we may collect includes:

• Full name
• Email address
• Phone number (optional)
• Message or enquiry content
• Session attendance records (date, format attended)

We do not collect sensitive personal data such as financial account numbers, identity card numbers, or copies of the documents participants bring to sessions. Documents reviewed during sessions remain with the participant and are not retained by Sundial Lane.

We may also collect non-personally identifying information through website analytics, including page views, browser type, and approximate location derived from IP address.

2. How We Collect Data

• Contact form: Information submitted through the website enquiry form
• Telephone: Information provided during phone enquiries
• Email correspondence: Information contained in emails sent to us
• Session registration: Information provided when booking a session
• Cookies: Technical data collected automatically when you visit our website — see Section 6 and our Cookie Policy

Legal basis: We process personal data on the basis of your consent (when you submit a form or agree to cookie use), legitimate interest (responding to enquiries), and contract (delivering sessions you have booked and paid for). Data retention: enquiry records are kept for up to 24 months; session attendance records are kept for up to five years for programme continuity purposes.

3. How We Use Personal Data

Personal data collected by Sundial Lane is used for the following purposes:

• Responding to your enquiry or request for information
• Processing your session booking and confirming attendance
• Sending session reminders and follow-up communications relevant to the session you attended
• Sending the two-week follow-up email for Family Conversation Planning participants
• Coordinating Quarterly Document Review visits and sending written visit summaries
• Improving the content and format of our sessions based on feedback

We do not use your personal data for unsolicited marketing or share it with third parties for advertising purposes. We do not sell participant data. We do not contact you with session offerings or promotional material unless you have specifically requested this.

4. Data Sharing with Third Parties

We may share limited personal data with the following categories of third party only where necessary:

• Email service provider: To send session confirmation and follow-up emails
• Payment processing: When processing session fees via FPX or bank transfer; payment data is handled directly by your bank or FPX provider and is not stored by Sundial Lane
• Website analytics: Anonymised usage data may be processed by analytics tools to help us understand how the website is used
• Legal requirements: Where we are required to disclose information by applicable Malaysian law or regulatory authority

We hold no referral arrangements with financial institutions, legal firms, or other commercial providers. Personal data is never shared for commercial gain.

5. Data Protection Measures

We take reasonable steps to protect personal data from unauthorised access, disclosure, or loss:

• Website communications are transmitted over HTTPS encryption
• Digital records are stored on password-protected systems with access limited to Sundial Lane team members who require them to perform their role
• Paper records are stored securely and are not left unattended in accessible locations
• In the event of a data breach that is likely to affect your rights, we will notify affected individuals within a reasonable timeframe

6. Cookies

Our website uses cookies to function and to help us understand how it is used. Essential cookies are necessary for the site to operate. Optional analytics and preference cookies are only placed with your consent. You can manage your cookie preferences at any time through our Cookie Policy page.

7. Your Rights Under Malaysian PDPA

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to personal data we hold about you:

• Right of access: You may request a copy of the personal data we hold about you
• Right of correction: You may request that inaccurate or incomplete data be corrected
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time; this does not affect the lawfulness of processing before withdrawal
• Right to limit processing: You may request that we stop using your data for certain purposes
• Right to lodge a complaint: You may contact the Department of Personal Data Protection (JPDP) in Malaysia if you believe your personal data has been handled unlawfully

To exercise any of these rights, contact us at [email protected]. We will respond within 21 calendar days.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before submitting personal information.

9. Children's Privacy

Sundial Lane sessions are designed for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the revised version will be published on this page with an updated date. Continued use of our website or services after changes constitutes acceptance of the revised policy. We will notify session registrants of material changes by email where possible.

11. Contact for Data Enquiries

For any questions about this Privacy Policy or how we handle your personal data, please contact: