Privacy Policy
Last Updated: 5 August 2025 · Effective Date: 5 August 2025
Heirlune ("we", "us", "our") operates at 41 Persiaran Gurney, 10250 George Town, Pulau Pinang, Malaysia. This policy explains how we collect and handle personal data when you use our website at heirlune.pro or engage our services. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA).
1. Data We Collect
When you submit the contact form or communicate with us, we collect your name, email address and, if provided, your phone number and enquiry message. We also collect standard website usage data (pages visited, browser type, approximate location based on IP address) through analytics tools.
If you subscribe to the Terminology and Resource Library, we collect your name, email address and payment details (processed by a third-party payment provider — we do not store card numbers).
For sorting and archive engagements, you may share physical documents with us. The content of those documents is handled under a separate engagement agreement and confidentiality terms. We retain scans only for the duration of the engagement unless the Multi-Generation Archive Programme expressly provides for continued storage.
2. How We Use Your Data
- To respond to your enquiry and discuss our programmes with you
- To manage your subscription to the Terminology Library
- To carry out a sorting or archive engagement you have agreed to
- To improve the website using aggregated, anonymised analytics
- To meet our legal obligations under Malaysian law
We do not use your personal data for unsolicited marketing without your consent. If you opt in to update emails, you may unsubscribe at any time.
3. Legal Basis for Processing
We process personal data on the basis of: your consent (contact form submissions, optional email updates); the performance of a contract (active engagement or subscription); and legitimate interest (website analytics and service improvement, balanced against your privacy rights).
4. Data Retention
Enquiry correspondence is retained for up to twelve months after the last communication. Engagement records (registers, scope agreements, correspondence) are retained for seven years for legal and accounting purposes. Subscription data is retained for the duration of the subscription plus twelve months. Scans and digital records from sorting engagements are deleted within thirty days of the handover date, unless otherwise agreed in writing for the archive programme.
5. Data Sharing
We do not sell personal data. We share data only with:
- Hosting and email providers who process data on our behalf under data processing agreements
- Payment processors for subscription billing
- Analytics providers using anonymised or aggregated data only
- Authorities where required by law
6. Security Measures
We use encrypted connections (HTTPS) for the website and encrypted storage for digital records. Staff access to personal data is restricted to those who need it for their role. Physical documents in our care are held in a locked facility during the engagement period.
7. Cookies
We use essential cookies for site function and optional analytics cookies. See our Cookie Policy for details and to manage your preferences.
8. Your Rights Under Malaysian PDPA
You have the right to access personal data we hold about you, to correct inaccurate data, to withdraw consent to processing (where consent is the basis), and to raise a complaint with the Department of Personal Data Protection Malaysia. To exercise any of these rights, contact us at [email protected].
9. Children
Our services are for individuals aged 18 and above. We do not knowingly collect personal data from minors.
10. Third-Party Links
Our website may link to official Malaysian government information sources and professional directories. We are not responsible for the privacy practices of those sites.
11. Changes to This Policy
We may update this policy from time to time. The updated version will be published on this page with a revised date. Continued use of our website or services after a change constitutes acceptance of the revised policy.
12. Contact
Data queries and subject access requests: [email protected]
General enquiries: [email protected]
Phone: +60 4-291 6837
Address: 41 Persiaran Gurney, 10250 George Town, Pulau Pinang, Malaysia