Privacy Policy

1. Introduction

Lannatim ("we", "us", "our") is committed to protecting the personal data of those who enquire about our courses, enrol as students, or visit our website. This policy explains what data we collect, why we collect it, how long we hold it, and what rights you have over it.

This policy applies to all personal data collected through our website at lannatima.pro, through our enquiry form, and through correspondence with our Studies Office. It should be read alongside our Terms & Conditions and Cookie Policy.

For questions about this policy, please write to: [email protected]

2. Data We Collect

We collect the following categories of personal data:

Enquiry and enrolment data: name, email address, telephone number (if provided), and any information you include in your written enquiry. This data is collected when you submit our contact form or correspond with us directly.

Student records: for enrolled students, we hold the same contact information together with records of course attendance, written exercises submitted, and tutor commentary provided. These records are used solely for the purpose of delivering the course.

Website usage data: if you consent to analytics cookies, we collect anonymised data about how visitors use our website, including pages visited and time spent. We do not collect data that identifies individual visitors through analytics.

Payment records: we hold records of course fees received by bank transfer. We do not collect or store credit card or banking details.

3. Legal Basis for Processing

We process personal data on the following grounds under the Personal Data Protection Act 2010 (Malaysia):

Consent: you have given your consent by submitting our enquiry form or corresponding with us. You may withdraw consent at any time by writing to [email protected].

Contractual necessity: for enrolled students, processing is necessary to deliver the course you have enrolled in and to manage the student-tutor relationship.

Legitimate interests: we may process data to respond to enquiries, maintain accurate records of our educational activities, and comply with our legal obligations.

4. How We Use Your Data

We use personal data to respond to your enquiries and to advise you on which course would suit your situation.

For enrolled students, we use your data to manage your place in a cohort, deliver the course, return written commentary, and communicate about scheduling.

We do not use student or enquiry data for marketing purposes. We do not share your data with fund managers, financial institutions, or any commercial third party.

With your consent, we may contact you after a course to ask whether you would be interested in a subsequent course or the Tutored Reading Term. You may opt out of such contact at any time.

5. Data Retention

Enquiry data for prospective students who do not enrol is held for twelve months, after which it is deleted.

Student records — including written exercises and tutor commentary — are held for three years after the completion of the most recent course or arrangement, in accordance with our educational record-keeping obligations.

Payment records are held for seven years in accordance with Malaysian financial record-keeping requirements.

6. Data Protection Measures

Personal data is held on password-protected systems accessible only to Studies Office staff with a legitimate reason to access them. Written student work and tutor commentary are held in a secure system not accessible from the public internet.

We do not transmit personal data outside Malaysia except where necessary to operate third-party services such as website analytics. Where such transfers occur, we take steps to ensure the recipient applies a comparable standard of protection.

In the event of a data breach that poses a risk to the rights of individuals, we will notify the Personal Data Protection Commissioner of Malaysia and the affected individuals as required by applicable law.

7. Cookies

Our website uses cookies. Essential cookies are necessary for the website to function and cannot be declined. Analytics and preference cookies are optional and are only set with your consent. For full details, please see our Cookie Policy.

8. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights:

Right of access: you may request a copy of the personal data we hold about you.

Right to correction: you may request that we correct any inaccurate data we hold about you.

Right to withdraw consent: you may withdraw consent for the processing of your data at any time. This does not affect the lawfulness of processing carried out before withdrawal.

Right to prevent processing for direct marketing: you may ask us to stop contacting you about courses or services.

To exercise any of these rights, write to: [email protected]. We will respond within twenty-one days.

9. Third-Party Links

Our website may link to external resources such as publicly available fund documents or regulatory publications. We are not responsible for the privacy practices of those websites. We recommend you read their privacy policies before providing any personal data.

10. Children

Our courses are intended for adults aged 18 and above. We do not knowingly collect personal data from persons under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us so that we may delete it.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of our website or our courses after a change constitutes acceptance of the revised policy.

12. Contact

Data controller: Lannatim
Address: Lot 4-12, Plaza Damansara, Medan Setia 1, Bukit Damansara, 50490 Kuala Lumpur
Email: [email protected]
Telephone: +60 3-2092 5871

If you are not satisfied with our response to a complaint, you may refer the matter to the Personal Data Protection Commissioner of Malaysia.