Privacy Policy

1. Data Controller

Pinehurst is the data controller responsible for personal data collected through this website and through course registration. Our operating address is 76 Jalan SS 21/35, Damansara Utama, 47400 Petaling Jaya, Selangor, Malaysia. For data-related enquiries, please contact us at [email protected].

2. Personal Data We Collect

We collect personal data in the following circumstances:

• Enquiry form: Name, email address, phone number (optional), and message content submitted via the contact form on our website.
• Course registration: Name, email address, phone number, and payment-related information collected at the point of registration.
• Website usage: Technical data including IP address, browser type, and pages visited, collected automatically through analytics tools.
• Cookies: Cookie identifiers and preferences stored locally. See Section 5 and our Cookie Policy for details.

We do not collect sensitive personal data (such as financial account details or identification documents) through our website. Any documents used in our courses are anonymised sample materials provided by Pinehurst.

3. How We Use Personal Data

We process personal data on the following legal bases under Malaysian personal data protection law (PDPA 2010) and general data protection principles:

• Consent: Where you have submitted an enquiry form or opted in to communications.
• Contract: Where processing is necessary to administer your course registration and attendance.
• Legitimate interest: For website analytics and improving our course materials and delivery.

We use collected data to: respond to enquiries; process and confirm course registrations; send course-related communications; send optional updates about new course dates (you may opt out at any time); improve our website and services through aggregated analytics.

We do not sell personal data to third parties. We do not use personal data for targeted advertising.

4. Data Retention

Enquiry form data is retained for up to 12 months from the date of submission. Course registration data is retained for up to 3 years from the date of the last course attended, for administrative and compliance purposes. Analytics data is retained in aggregated, anonymised form. You may request deletion of your data at any time (see Section 6).

5. Cookies

Our website uses essential cookies required for basic functionality, and optional analytics and preference cookies. You can manage your cookie preferences through the banner displayed on your first visit, or at any time via our Cookie Policy page. Rejecting optional cookies does not affect your ability to use the website or enquire about courses.

6. How We Protect Personal Data

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted data transmission (HTTPS) on all website pages
• Access to registration data limited to staff who require it for course administration
• Secure storage of registration records
• Prompt notification to affected individuals in the event of a confirmed data breach affecting their personal data

7. Your Rights

Under the Malaysian Personal Data Protection Act 2010 (PDPA) and applicable data protection principles, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data (subject to legal retention requirements)
• Withdraw consent to optional processing (e.g. marketing emails) at any time
• Object to processing based on legitimate interest
• Lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your data has been handled improperly

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may include links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party site you visit.

9. Children's Privacy

Pinehurst courses are designed for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data through our website, please contact us at [email protected] and we will remove it promptly.

10. Policy Updates

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page. We recommend reviewing this policy periodically. Continued use of our website or services after an update constitutes acceptance of the revised policy.