Privacy Policy

1. Introduction

coraliira is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or participate in our batik art retreat experiences.

By using our services, you agree to the collection and use of information in accordance with this policy. If you have any questions, please contact us at [email protected].

2. Information We Collect

Personal Data

We collect the following types of personal information:

• Name and contact information (email address, phone number)
• Mailing address for retreat registration and materials
• Payment information processed through secure third-party payment processors
• Dietary requirements and accessibility needs for retreat planning
• Emergency contact information for multi-day retreat participants

Automatically Collected Information

When you visit our website, we automatically collect certain information:

• Browser type and version
• Operating system
• IP address and approximate geographic location
• Pages visited and time spent on our website
• Referring website addresses

3. How We Use Your Information

We use the information we collect for the following purposes:

• Processing retreat bookings and managing participant registrations
• Communicating with you about your retreat experience, including pre-arrival information and post-retreat follow-up
• Arranging accommodations, meals, and transportation for multi-day retreats
• Processing payments and maintaining financial records
• Improving our website and retreat experiences based on feedback and usage patterns
• Sending occasional updates about our programs (you can opt out at any time)
• Complying with legal requirements and protecting our rights

Legal Basis for Processing (Malaysia PDPA): We process your personal data based on your consent, contract performance (retreat booking), and our legitimate interests in providing and improving our services.

4. Data Sharing and Disclosure

We do not sell or rent your personal information. We may share your information with:

• Service Providers: Accommodation partners, meal providers, and transportation services for retreat logistics
• Payment Processors: Secure third-party payment gateways that process retreat fees
• Master Artisans and Guides: Partner instructors who need basic contact information to coordinate retreat activities
• Legal Requirements: When required by Malaysian law or to protect our rights and safety

All third parties are contractually required to maintain the confidentiality of your information.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Secure Socket Layer (SSL) encryption for all data transmission
• Restricted access to personal data on a need-to-know basis
• Regular security audits and updates to our systems
• Secure storage of physical documents containing personal information
• Staff training on data protection responsibilities

While we take reasonable precautions, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but maintain industry-standard protection measures.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your browsing experience. Our website uses:

• Essential Cookies: Required for basic website functionality and security
• Analytics Cookies: Help us understand how visitors use our website
• Marketing Cookies: Used to deliver relevant content and advertisements

You can manage cookie preferences through our Cookie Policy page or your browser settings. Disabling certain cookies may limit website functionality.

7. Data Retention

We retain your personal information for different periods depending on the purpose:

• Retreat Participants: Contact information retained for 3 years after retreat completion for follow-up and future program announcements
• Financial Records: 7 years in accordance with Malaysian tax and accounting requirements
• Website Analytics: Aggregated data retained indefinitely; individual data anonymized after 26 months
• Marketing Communications: Until you unsubscribe or request deletion

You may request deletion of your data at any time, subject to legal retention requirements.

8. Your Rights

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request corrections to inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Limit Processing: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, contact us at [email protected]. We will respond within 21 days as required by Malaysian law.

9. Children's Privacy

Our services are designed for adults aged 18 and over. We do not knowingly collect personal information from individuals under 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

10. International Data Transfers

Your personal information is primarily processed and stored in Malaysia. If you participate in our retreats from outside Malaysia, your data may be transferred internationally. We ensure appropriate safeguards are in place for any international transfers.

11. Third-Party Links

Our website may contain links to external websites operated by our partners or service providers. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or sending an email to registered participants. The "Last Updated" date at the top indicates when changes were last made.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your personal information, please contact us:

14. Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia: