Privacy Policy

Cendana Labs ("we", "us", or "our"), located at Jalan Ara SD7/3, 52200 Kuala Lumpur, Malaysia, takes the handling of personal data seriously. This Privacy Policy explains what information we collect, why we collect it, how it is used, and what rights you have in relation to it.

This policy applies to information collected through our website at cendanal.live, through our contact and enrolment forms, and through our programme delivery communications. By submitting your information to us, you acknowledge that you have read this policy.

For questions relating to this policy, contact us at [email protected].

Information you provide directly: When you complete a contact or enquiry form on our website, we collect your name, email address, and optionally your phone number and any message content you include. When you enrol in a programme, we collect the information necessary to process your enrolment and communicate with you about it.

Automatically collected information: When you visit our website, standard web server logs may record your IP address, browser type, and pages visited. We may also use analytics tools to understand how the site is used in aggregate terms.

Cookies: We use cookies for essential site functions (session management) and, with your consent, for analytics. See our Cookie Policy for details.

Legal basis for processing (Malaysia PDPA): We process personal data on the basis of your consent (enquiry forms), contract (enrolment and programme delivery), and legitimate interest (improving how our programmes are structured).

Retention: Enquiry data is retained for twelve months. Enrolment and payment records are retained for seven years as required for accounting purposes. You may request deletion of enquiry data at any time.

We use the information we collect to respond to your enquiries, process enrolments, deliver programme communications (schedules, recordings, materials), and send administrative messages related to programmes you are enrolled in.

We do not use your personal data for unsolicited marketing, and we do not sell or share your data with third parties for their marketing purposes. If you become an enrolled participant, we may send you information about upcoming cohorts or related programmes — you can opt out of these communications at any time by contacting us.

We may use aggregated, non-identifiable analytics data to understand which pages are most visited and where visitors typically leave the site, for the purpose of improving the website and programme materials.

Our website is served over HTTPS. Access to personal data held in our systems is restricted to staff members who require it to carry out their responsibilities. We review our data handling practices periodically and update them as needed.

In the event of a data breach that is likely to result in risk to your rights or freedoms, we will notify affected individuals and the relevant authority in accordance with applicable requirements.

We cannot guarantee absolute security of data transmitted over the internet, but we take reasonable technical and organisational measures to protect your information.

Our website may embed content from or link to third-party services such as Google Maps (for location display) and Google Fonts (for typography). These services may collect standard usage data. We are not responsible for the privacy practices of third-party services.

Programme delivery may involve the use of video conferencing platforms. Participants will be informed of which platforms are used before their track begins, and applicable platform privacy policies will be linked.

Under Malaysia's Personal Data Protection Act 2010, you have the right to access personal data we hold about you and to request correction of inaccurate data. You may also withdraw consent for data processing where consent is the basis, and request that we stop processing your data for marketing purposes.

To exercise any of these rights, contact us at [email protected] or call +60 16-485 7293. We will respond within 21 calendar days.

If you are unsatisfied with our response, you may contact the Personal Data Protection Commissioner of Malaysia for further guidance.