Privacy Policy

1. Introduction

Eldermark ("we", "us", "our") is committed to handling personal data with care and transparency. This Privacy Policy explains what personal data we collect, why we collect it, how it is used and protected, and what rights you have in relation to it. It applies to data collected through our website at eldermarkad.pro and during the delivery of our sessions and services.

Eldermark is registered and operates in Johor Bahru, Malaysia. We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia. For data protection enquiries, contact us at [email protected].

2. Data We Collect

We collect personal data through the following means:

• Contact forms on our website — name, email address, and optionally phone number and a message.
• Session bookings and communication — name, contact details, and session preferences provided via email, phone, or in person.
• Website analytics — anonymised usage data via cookies (see our Cookie Policy for details).

We do not collect sensitive personal data such as financial account details, identity document numbers, or health information during our sessions. Any records that participants bring to or discuss in a session are not retained by Eldermark.

3. Legal Basis for Processing

We process personal data on the following bases under the PDPA:

• Consent — where you have agreed to receive communications or submit an enquiry form.
• Contractual necessity — where processing is needed to deliver a booked session or respond to your request.
• Legitimate interest — to improve our services and manage our business operations, balanced against your privacy rights.

4. How We Use Your Data

• To respond to enquiries and booking requests
• To confirm and administer session appointments
• To communicate necessary information about your session
• To send service-related administrative notices
• To improve the content and usability of our website

We do not use your personal data for unsolicited marketing. We do not sell or rent personal data to any third party.

5. Data Sharing

We do not share your personal data with third parties except in the following limited circumstances:

• Service providers — trusted third parties who assist us with website hosting or email delivery, bound by data processing agreements.
• Legal obligations — where disclosure is required by Malaysian law or a competent authority.

6. Data Retention

We retain personal data for no longer than is necessary for the purpose for which it was collected. Enquiry and contact data is held for up to 24 months. Session booking records are retained for up to five years for administrative purposes. Analytics data is anonymised and retained in aggregate form only.

7. Data Protection Measures

We take reasonable technical and organisational steps to protect your personal data from unauthorised access, loss, or misuse. These include access controls, secure email practices, and regular review of our data handling procedures. In the event of a data breach that may affect your rights, we will notify you and the relevant authority as required under the PDPA.

8. Cookies

Our website uses cookies for basic site functionality and optional analytics. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies are necessary for the website to work and cannot be disabled.

9. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right of correction — to request that inaccurate or incomplete data be corrected.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
• Right to limit processing — to request that we cease or limit certain uses of your data.

To exercise any of these rights, write to us at [email protected] or by post to our address below. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external resources or third-party sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently.

11. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently done so, contact us and we will delete the data promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "last updated" date. Continued use of our website or services after changes are posted constitutes acceptance of the revised policy.

13. Contact

For any privacy-related enquiries:

• Email: [email protected]
• Post: Eldermark, 24 Jalan Tebrau, 80100 Johor Bahru, Johor, Malaysia
• Supervisory authority: Department of Personal Data Protection (JPDP), Malaysia