Privacy Policy

1. Introduction

Bahtera Usaha (No. 31, Jalan Merdeka, Taman Melaka Raya, 75000 Melaka, Malaysia) is committed to handling personal data with care. This policy describes what information we collect, how we use it, how long we keep it, and what rights you have in relation to it.

This policy applies to data collected through our website at bahterau.sbs, through our enquiry and enrolment process, and in the course of running our programmes. It is written in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

Questions about this policy should be directed to: [email protected]

2. What Data We Collect

We collect personal data only when there is a clear reason to do so. The categories we collect are:

• Contact and enquiry data: Name, email address, and phone number submitted through our contact form or by direct email.
• Enrolment data: Name, contact details, business name and brief description of situation provided as part of the enrolment process.
• Programme participation data: Notes and written materials produced during programme sessions, to the extent that these are held by the school rather than the participant.
• Website usage data: Standard server logs and, where cookie consent is given, analytics data about how the website is used.

Legal basis: We process enquiry and enrolment data under legitimate interest (to respond to enquiries) and contract performance (to deliver programmes). Website analytics data is processed with your consent, as managed through our cookie consent mechanism.

3. How We Use Your Data

• Responding to programme enquiries
• Managing programme enrolment and communicating with participants
• Delivering programme sessions and associated written materials
• Sending information about future intakes to past enquirers and participants, where they have not opted out
• Improving the website and understanding how visitors use it (analytics only, with consent)

We do not use your data for automated decision-making or profiling. We do not share personal data with third parties for their own marketing purposes.

4. Data Retention

We keep data for as long as it is needed for the purpose it was collected. Specific retention periods:

• Enquiries not leading to enrolment: 12 months from the last communication, then deleted.
• Enrolment and participant records: 3 years from programme completion, to allow us to respond to follow-up questions and verify completion for participants who request it.
• Financial records: 7 years in accordance with Malaysian Companies Act requirements.
• Website analytics data: Aggregated data held for up to 24 months. Individual session data is not retained beyond 90 days.

5. Data Sharing

We do not sell personal data. We share data only in the following limited circumstances:

• Service providers: We use third-party services for email delivery and website analytics. These providers process data on our behalf and under contractual data processing terms.
• Legal requirements: If required to disclose data by Malaysian law or a valid legal process, we will do so and will notify you where we are legally permitted to.

6. Cookies

Our website uses cookies to function and, where you have consented, to collect analytics data. You can manage your cookie preferences at any time through our Cookie Policy page. Essential cookies cannot be disabled as they are required for the website to work.

7. Data Security

We take reasonable steps to protect personal data from unauthorised access, disclosure, alteration and loss. These include access controls on systems holding personal data, encrypted transmission via HTTPS, and limiting access to personal data to staff who need it to do their work. In the event of a data breach that is likely to harm individuals, we will notify affected persons and the relevant authorities in accordance with Malaysian PDPA requirements.

8. Your Rights

Under the Malaysian Personal Data Protection Act 2010, you have the following rights in relation to your personal data held by Bahtera Usaha:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Where processing is based on consent (e.g. analytics cookies, marketing emails), you may withdraw consent at any time without affecting prior processing.
• Right to object: You may object to processing based on legitimate interest. We will consider this and stop processing if we cannot demonstrate compelling grounds to continue.
• Right to complain: You may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe we have not handled your data appropriately.

To exercise any of these rights, write to: [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reading their privacy policies before submitting personal data to them.

10. Children

Our programmes are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently done so, please contact us and we will delete the data promptly.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Material changes will be communicated to enrolled participants by email. Continued use of the website or our services after a change constitutes acceptance of the updated policy.