Privacy Policy

1. Introduction

Tendara ("we", "us", "our") is committed to handling personal data responsibly. This Privacy Policy explains what personal data we collect from visitors to this website and from participants in our workshops and sessions, how we use it, and the rights you have regarding your data.

This policy applies to data collected through the Tendara website at https://tendarabac.biz and through our workshop registration and enquiry processes. It does not apply to third-party websites linked from this site.

For questions about this policy, contact us at [email protected].

2. Data We Collect

We collect only the personal data needed to respond to enquiries and administer workshop bookings.

2.1 Information you provide directly

• Full name (required for bookings)
• Email address (required for communication)
• Phone number (optional, provided via contact form)
• Message content submitted through the contact form

2.2 Information collected automatically

• Browser type and operating system
• IP address (anonymised where possible)
• Pages visited and time spent (via analytics cookies, only if consented)

2.3 Legal basis for processing

We process your data under the following bases as permitted by Malaysian law (Personal Data Protection Act 2010) and consistent with international best practice:

• Consent — for marketing communications and analytics cookies
• Contractual necessity — to confirm and administer workshop bookings
• Legitimate interest — for responding to direct enquiries

3. How We Use Your Data

• To respond to enquiries submitted through the contact form
• To confirm workshop bookings and send session details
• To send post-session feedback requests (where consented)
• To improve website content using anonymised analytics data
• To meet any legal or regulatory obligations

We do not sell, rent, or share personal data with third parties for marketing purposes. We do not use personal data collected during workshops for any purpose other than administering those workshops.

4. Data Protection Measures

• Website transmissions are encrypted using HTTPS/TLS
• Personal data is stored on access-controlled systems with restricted staff access
• Contact form submissions are retained for a maximum of 24 months, then deleted
• Physical session notes, if any, are stored securely and disposed of responsibly
• In the event of a data breach affecting your personal data, we will notify affected individuals within 72 hours of becoming aware

5. Cookies

This website uses cookies to support basic functionality and, where consented, to collect anonymised analytics data. Essential cookies are required for the site to function and cannot be disabled. Analytics and preference cookies require your consent.

For full details on the cookies we use and how to manage your preferences, see our Cookie Policy.

6. Your Rights

Under the Malaysian Personal Data Protection Act 2010 and consistent with GDPR principles, you have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to correction — request that inaccurate or incomplete data be corrected
• Right to erasure — request that your data be deleted, subject to legal retention requirements
• Right to withdraw consent — withdraw consent for marketing or analytics processing at any time
• Right to object — object to processing based on legitimate interest
• Right to data portability — receive your data in a structured, machine-readable format

To exercise any of these rights, email [email protected]. We will respond within 30 days. You may also raise a complaint with the Department of Personal Data Protection Malaysia (PDPD) at www.pdp.gov.my if you believe your rights have not been respected.

7. Third-Party Links

This website may contain links to third-party websites, including mapping services and payment platforms. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately. Clicking an external link means you are leaving the Tendara website and its privacy protections.

8. Children's Privacy

Tendara's services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data through this site, contact us at [email protected] and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Significant changes will be noted with an updated "Last Updated" date at the top of this page. Continued use of this website after a policy update constitutes acceptance of the revised terms.

10. Contact

Data controller: Tendara
22 Jalan Padungan, 93100 Kuching, Sarawak, Malaysia

Privacy enquiries: [email protected]