Privacy Policy

Section 01

Introduction

Latterway ("we", "us", "our") operates from 9 Jalan Bukit Bintang, 55100 Kuala Lumpur, Wilayah Persekutuan, Malaysia. We provide retirement records organisation and document reference services to individuals and families.

This Privacy Policy explains how we collect, use, and safeguard personal information submitted to us through our website or in the course of delivering our services. It applies to all visitors and service participants.

This policy is written to align with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). By using our website or enquiring about our services, you acknowledge that you have read and understood this policy.

Section 02

Personal Data We Collect

We collect only the data needed to respond to enquiries and deliver the services you have requested:

• Contact information: full name, telephone number, and email address submitted through our enquiry form.
• Correspondence: messages sent via the contact form, and any subsequent written communication.
• Website usage data: IP address, browser type, pages visited, and session duration collected automatically via standard server logs and analytics tools.
• Cookie preferences: consent status stored locally in your browser.

We do not collect sensitive personal data such as identity card numbers, financial account details, or medical information unless you voluntarily provide such details in your message.

Section 03

How We Use Your Data

Personal data collected through this website is used for the following purposes:

• Responding to your enquiry and scheduling service sessions.
• Confirming session details, timing, and any preparatory materials.
• Sending administrative communications relevant to a service you have booked.
• Analysing website usage patterns to improve the structure and content of our pages.
• Complying with legal obligations where required.

We do not use your contact data for unsolicited promotional communications. We do not sell, rent, or share your personal information with third parties for marketing purposes.

Section 04

Legal Basis for Processing

Under the PDPA 2010, we process personal data on the following lawful bases:

• Consent: when you submit the contact form, you consent to us processing your details to respond to your enquiry.
• Contractual necessity: when a service is agreed upon, certain data is required to deliver it.
• Legitimate interests: for website analytics that help us understand how our pages are used, where those interests do not override your rights.

Section 05

Data Retention

We keep personal data only for as long as is necessary for the purpose it was collected:

• Enquiry records: retained for up to 12 months after initial contact, or until the enquiry is closed.
• Service participant records: retained for up to 5 years after the service concludes for administrative reference.
• Website analytics data: aggregated data held for up to 24 months; individual session data may be retained for up to 6 months.

When data is no longer required, it is securely deleted or anonymised.

Section 06

Data Security

We take reasonable steps to protect personal data from unauthorised access, disclosure, or loss. Measures in place include:

• Encrypted data transmission via HTTPS on all pages of this website.
• Restricted access to personal data, limited to staff who require it for service delivery.
• Secure storage practices with regular internal review.

In the event of a data incident that poses a risk to individuals, we will take prompt action to contain the matter and notify affected parties as required under applicable law.

Section 07

Cookies

Our website uses cookies and similar browser storage to support basic site functionality and to understand how visitors use our pages. The cookies used fall into the following categories:

• Essential cookies: required for the site to function correctly, including preference storage such as your cookie consent choice.
• Analytics cookies: used to understand which pages are visited and how users navigate the site. Data is aggregated and does not identify individuals.

You can manage your cookie preferences at any time. For more detail, please see our Cookie Policy.

Section 08

Your Rights

Under the PDPA 2010, you have the following rights in relation to personal data we hold about you:

• Right to access: you may request a copy of personal data we hold about you.
• Right to correction: you may ask us to update any inaccurate or incomplete data.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to limit processing: in certain circumstances, you may request that we restrict how we use your data.
• Right to lodge a complaint: if you have concerns about how your data is handled, you may refer the matter to Malaysia's Department of Personal Data Protection (PDPD).

To exercise any of the above rights, please write to us at [email protected]. We will respond within 21 days of receiving a verified request.

Section 09

Third-Party Links

Our website may contain links to external sites for reference or informational purposes. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently before providing any personal information.

Section 10

Minors

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted information through this site, please contact us and we will remove it promptly.

Section 11

Policy Updates

We may revise this Privacy Policy from time to time to reflect changes in our services or legal requirements. The updated version will be published on this page with a revised "Last updated" date. We recommend checking this page periodically if you use our services regularly.

Section 12

Contact — Data Enquiries

For any questions, requests, or concerns about this Privacy Policy or the personal data we hold, please reach out: