Privacy Policy

1. Introduction and Scope

Lantern Row is committed to handling personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010). This policy applies to all personal data collected through our website contact form, workshop and session bookings, home visit arrangements, and community advisory engagements.

If you have questions about this policy or how we handle your data, contact us at [email protected] before submitting any information.

2. What Personal Data We Collect

Through the Website Contact Form

• Full name
• Email address
• Phone number (optional)
• Message content you choose to include

Through Workshop and Session Bookings

• Name and contact details of the participant or organisation representative
• Language preference
• Household income structure (general, self-reported — workshops only)
• Payment information (processed via our payment provider; we do not store card details)

Through Home Filing Setup Visits

• Home address for visit scheduling
• Names and identity document references of household members (used during the visit only — we do not retain copies)

Through the Website (Automatically)

• Browser type and version
• Pages visited and time spent (via analytics cookies, if consented)
• IP address (anonymised where possible)

We collect data on the legal bases of contract performance (to deliver the service you've booked), legitimate interest (to respond to enquiries and improve our services), and consent (for optional analytics cookies).

Contact form data is retained for up to 24 months from the date of submission. Booking records are retained for 7 years for financial compliance purposes. Analytics data is retained for up to 14 months.

3. How We Use Your Data

• To respond to enquiries submitted through the website contact form
• To confirm, schedule, and deliver workshop, filing, or advisory bookings
• To send session reminders and follow-up calls included in the service
• To issue invoices and process payments
• To improve session content and materials based on aggregated feedback
• To comply with legal obligations under Malaysian law

We do not use personal data for unsolicited marketing. If you wish to receive service-related updates from Lantern Row, you can indicate this at the time of booking. You can withdraw that consent at any time by emailing [email protected].

We do not sell personal data to third parties. We do not share data with financial product providers, insurance companies, or advertising networks.

4. How We Protect Your Data

• Website data is transmitted over HTTPS (TLS encryption)
• Contact form submissions are stored on a password-protected server accessible only to Lantern Row staff
• Booking records are stored in a secured system with role-based access controls
• Physical documents handled during home filing visits are not photographed, retained, or copied without the household's explicit agreement at the start of the visit
• Staff access to personal data is restricted to what is necessary for their role
• In the event of a personal data breach, affected individuals will be notified as required under PDPA 2010

5. Cookies

Our website uses essential cookies to function (session management) and optional analytics cookies to understand how visitors use the site. Analytics cookies are only placed if you click "Accept All" on the cookie consent banner.

You can manage your cookie preferences at any time on our Cookie Policy page. Rejecting optional cookies does not affect your ability to use the website or book services.

6. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding personal data we hold about you:

• Right of access: Request a copy of the personal data we hold about you
• Right to correction: Request that inaccurate or incomplete data be corrected
• Right to withdraw consent: Withdraw consent for data processing where consent is the legal basis, at any time
• Right to limit processing: Request that we stop using your data for certain purposes
• Right to object: Object to processing based on legitimate interest

To exercise any of these rights, email [email protected] with your name, contact details, and a description of your request. We will respond within 21 days.

If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

7. Third-Party Links

Our website may contain links to external pages (for example, HRDC or government portals). We are not responsible for the privacy practices of those sites. We recommend reading their privacy policies before submitting any personal data to them.

8. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data through our website or bookings, please contact [email protected] and we will delete it promptly.

9. Changes to This Policy

We review this policy at least once a year and whenever our data practices change materially. The updated date at the top of this page shows when the current version was last changed. If changes are significant, we will post a notice on our website homepage for at least 30 days.

Continued use of our website or services after a policy update indicates acceptance of the revised terms.

10. Contact and Data Controller

Data Controller: Lantern Row

Address: Level 8, Maju Junction Mall, 1001 Jalan Sultan Ismail, 50250 Kuala Lumpur, Malaysia

Privacy enquiries: [email protected]

General enquiries: [email protected]

Phone: +60 3-2616 7766