Privacy policy

Effective date: 1 August 2026
Data controller: Content Grovepoint, Office 9, 42 Example Street, Petaling Jaya 00000, Malaysia.
Contact: info@content-grovepoint.click · +60 3 0000 4180

What we collect

• Enquiry forms: name, email, optional engagement interest, and message content.
• Email and phone correspondence: whatever you choose to send us.
• Engagement materials: event samples, documents, and contacts you provide under a statement of work.
• Technical logs: basic server logs (IP address, timestamp, requested URL) needed to operate the site.
• Cookies: see our cookies policy for essential and optional analytics cookies.

We do not intentionally collect sensitive personal data through the public website. Please do not submit learner records containing children’s full identities via the public form; use agreed secure channels after engagement kickoff.

Purposes

We use personal data to respond to enquiries, deliver commissioned work, invoice, improve site reliability, and meet legal obligations. Optional analytics cookies help us understand aggregate traffic if you accept them.

Legal bases (practical)

We process enquiry and engagement data because you request a response or contract, and because we have a legitimate interest in operating a professional practice securely. Cookie analytics run only with consent where required.

Retention

• Enquiry messages: up to 24 months after last contact if no engagement follows.
• Client engagement files: typically 7 years after project close for accounting and dispute context, unless a longer legal requirement applies.
• Server logs: commonly 90 days.
• Cookie consent choice: stored in your browser until you clear storage.

Sharing

We use hosting and email providers who process data on our instructions. We do not sell personal data. We may disclose information if required by Malaysian law or to protect rights and safety.

International transfers

Our primary operations are in Malaysia. Some subprocessors (for example email or DNS) may process data in other countries. Where transfers occur, we seek providers with appropriate safeguards such as contractual clauses and security controls.

Your rights

Subject to applicable Malaysian law (including the Personal Data Protection Act 2010 where it applies), you may request access, correction, or limitation of processing, and you may withdraw cookie consent. Contact us using the details above. You may also lodge a complaint with the relevant Malaysian authority.

Children

The public website is aimed at adult professionals. We do not knowingly collect children’s data via marketing forms.

Updates

We may revise this policy and will update the effective date above. Material changes affecting clients will be communicated through our usual contact channels.