Privacy Policy

1. Introduction

Cendara ("we", "us", "our") is committed to handling personal data responsibly. This policy explains what personal data we collect in connection with our workshops and courses, how we use it, and the rights you have under Malaysian personal data protection law.

This policy applies to data collected through our website at numerio.live, through our enrolment and enquiry process, and during the delivery of our programmes. It does not cover third-party websites linked from our site.

Questions about this policy should be directed to: [email protected]

2. Data We Collect

We collect personal data in the following ways:

• Enquiry and registration forms: name, email address, phone number (optional), and any information you include in a message.
• Programme administration: attendance records, payment records, and feedback provided after sessions.
• Website analytics: page views, session duration, device type, and geographic region — collected via analytics cookies (with your consent).
• Cookies: see our Cookie Policy for details.

We do not collect sensitive personal data (such as identification numbers, financial account information or health data) through our website or programme processes.

3. Legal Basis for Processing

We process personal data on the following grounds under the Personal Data Protection Act 2010 (Malaysia):

• Consent: for marketing communications and analytics cookies, where you have opted in.
• Contract performance: to administer your enrolment and deliver the programme you have enrolled in.
• Legitimate interests: for operational record-keeping and service improvement, where this does not override your rights.

4. How We Use Your Data

• To respond to enquiries and provide information about our programmes.
• To process enrolment and manage your participation in a workshop or course.
• To send administrative communications related to your programme (session reminders, schedule changes, receipts).
• To improve our programmes using anonymised feedback data.
• To comply with legal obligations (record-keeping, financial records).

We do not use personal data for profiling, automated decision-making, or targeted advertising.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data may be shared only in the following limited circumstances:

• With service providers who process data on our behalf (e.g. payment processing, email delivery) under data processing agreements.
• With regulatory or legal authorities when required by Malaysian law.

No personal data is transferred outside Malaysia without appropriate safeguards.

6. Data Retention

We retain personal data for the following periods:

• Enquiry data (no enrolment): deleted or anonymised within 12 months of last contact.
• Programme participation records: retained for 7 years to meet financial and legal record-keeping requirements.
• Marketing consent records: retained until consent is withdrawn.
• Analytics data: retained in aggregated, anonymised form; raw session data deleted within 14 months.

7. Data Security

We take reasonable steps to protect personal data from unauthorised access, disclosure, alteration or destruction. These include:

• Secure storage of digital records with access controls.
• HTTPS encryption on our website.
• Staff access to personal data limited to those who require it for their role.

In the event of a data breach that is likely to result in risk to affected individuals, we will notify the relevant authorities and affected individuals in accordance with Malaysian law.

8. Cookies

We use cookies for site functionality and, with your consent, for analytics. Please see our Cookie Policy for a full explanation of the cookies we use and how to manage your preferences.

9. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights:

• Access: to request a copy of the personal data we hold about you.
• Correction: to request correction of inaccurate or incomplete data.
• Withdrawal of consent: where processing is based on consent, you may withdraw it at any time.
• Objection: to object to processing for direct marketing purposes.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. In some cases, we may need to verify your identity before processing a request.

10. Third-Party Links

Our website may link to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies directly.

11. Children

Our programmes are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that we have done so, we will delete the data promptly.

12. Changes to This Policy

We may update this policy from time to time. The current version will always be available on this page with the date it was last revised. Continued use of our website or programmes after a change constitutes acceptance of the updated policy.

13. Contact

For any questions about this policy or how we handle your data:

• Email: [email protected]
• Address: Unit 12-07, Nusa Bestari, No. 4 Jalan Bestari 1, 81300 Skudai, Johor, Malaysia