Privacy Policy

1. Introduction

Olwen Bright ("we", "us", or "our") operates from Unit 6-2, Tower B, Plaza Sentral, Jalan Stesen Sentral 5, KL Sentral, 50470 Kuala Lumpur, Malaysia. We take the privacy of every person who visits our website or engages our services seriously.

This policy explains what personal information we collect, why we collect it, how we use it, and the choices available to you. It applies to all pages under olwenbr.pro and to any communications between you and our team.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). If you have questions about anything in this policy, you are welcome to reach us at [email protected].

2. Information We Collect

2.1 Information You Provide Directly

• Contact details — name, email address, phone number, and organisation name submitted via our enquiry form.
• Correspondence — emails, messages, or notes you send us when arranging or discussing a service.
• Service content — materials you share with us for review during the delivery of Accessibility Tools Review, Caption Helper Setup, or Accessibility Workflow Programme.

2.2 Information Collected Automatically

• Usage data — pages visited, time on page, referring URL, browser type, and device type collected via analytics tools.
• Cookies and local storage — small files placed on your device that help the site function and that help us understand usage patterns. See our Cookie Policy for details.
• Server logs — IP address, timestamp, and request path recorded by our hosting provider for security purposes.

2.3 Legal Basis for Processing

• Consent — where you have agreed to optional analytics or marketing cookies.
• Legitimate interest — maintaining website security, improving our services, and responding to enquiries.
• Contractual necessity — processing information required to deliver a service you have engaged us for.

2.4 How Long We Keep Your Data

• Enquiry and contact records: up to 2 years from last interaction.
• Service-related correspondence and files: up to 3 years from project completion.
• Analytics data: aggregated and retained for up to 14 months, then deleted.
• Server logs: rolled over after 90 days.

3. How We Use Your Information

• Responding to enquiries and scheduling consultations.
• Delivering the accessibility review, configuration, or programme you have requested.
• Sending service-related updates, including delivery summaries, checklists, and training materials.
• Improving our website content, page structure, and service descriptions based on aggregated usage data.
• Meeting our legal obligations under Malaysian law.

3.1 Marketing Communications

We may occasionally share relevant updates about our services with you. You can opt out at any time by replying to any of our emails with "unsubscribe" in the subject line, or by writing to us at [email protected].

3.2 Sharing with Third Parties

• Hosting provider — our web host processes server logs on our behalf under a data processing agreement.
• Analytics provider — anonymised usage statistics are processed by our analytics platform. No personally identifiable data is shared.
• Email service provider — used solely to deliver messages you initiate or that are part of a service engagement.

We do not sell, rent, or trade personal data with any third party for commercial purposes.

4. How We Protect Your Data

• All data transmitted between your browser and our site is protected using TLS encryption (HTTPS).
• Access to personal data is restricted to team members who need it to carry out their work.
• We conduct periodic internal reviews of data handling practices.
• In the event of a data incident that may affect your rights, we will inform you within a reasonable timeframe consistent with our obligations under the PDPA.

5. Cookies

Our website uses a small number of cookies. Essential cookies are required for the site to work and are always active. Optional analytics, marketing, and preference cookies are only placed with your consent.

You can review the full list of cookies and adjust your preferences at any time on our Cookie Policy page.

6. Your Rights

Under the Personal Data Protection Act 2010 and related data protection principles, you have the following rights:

To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days. If you feel we have not addressed your concern adequately, you may refer the matter to Malaysia's Department of Personal Data Protection (JPDP).

7. Links to Other Websites

Our website may include links to external resources for reference. Once you leave our site, this policy no longer applies. We are not responsible for the privacy practices of any third-party website, and we encourage you to read their policies before sharing any personal information.

8. Children's Privacy

Our services are intended for organisations and individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor's data has been submitted to us, please contact us at [email protected] and we will remove it promptly.

9. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. When we do, the "Last updated" date at the top of this page will change.

Continued use of our website after a policy change constitutes acceptance of the updated terms. For significant changes, we will make reasonable efforts to draw them to your attention.

10. Contact for Data Enquiries

For any questions, access requests, or concerns about how we handle your personal data, please reach us through any of the channels below: