Privacy Policy | Ravelknot

1. Introduction

Ravelknot ("we", "us", "our") is committed to protecting the personal information of individuals who contact us, use our website, or participate in our sessions. This policy describes how we collect, use, store, and protect personal data in connection with our family matters information and communication support services, based at 5 Jalan Raja Musa Aziz, 30300 Ipoh, Perak, Malaysia.

This policy applies to data processed through our website at ravelkno.blog and through our session and communications activities. By using our website or contacting us, you agree to the terms of this policy.

For questions about this policy or your personal data, contact us at: [email protected]

2. Data We Collect

2.1 Information You Provide Directly

Name and contact details (email address, phone number) submitted through enquiry forms
Messages and queries sent to us via the contact form or by email
Information discussed or produced during facilitated sessions (held in strict confidence)

2.2 Information Collected Automatically

Technical data: browser type, device type, IP address (anonymised where possible), pages visited, and time on site
Cookie data as described in our Cookie Policy
Analytics data through third-party analytics tools (aggregated, non-identifying)

2.3 Legal Basis for Processing (under Malaysian PDPA 2010)

Consent: When you submit a contact form or agree to cookies
Contractual necessity: When we process data to deliver a booked session
Legitimate interests: To operate and improve our website and communication

3. How We Use Your Data

To respond to your enquiry and schedule sessions
To deliver the session format you have booked and communicate between appointments
To maintain continuity records for multi-session formats (held privately)
To send service-related updates (not marketing) by email where you have provided your address
To analyse aggregate website usage and improve our service (non-identifying data)
To comply with legal obligations under Malaysian law

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not share session content with any authority or third party without your written consent.

4. Data Retention

Enquiry form data: retained for 12 months from last contact, then deleted
Session continuity notes (multi-session formats): retained for the duration of the engagement plus 12 months, then deleted
Documents you provide during the retainer format: returned or deleted at the close of the retainer as agreed
Website analytics data: retained for 26 months in aggregate form
Cookie consent records: retained for 12 months

5. Data Protection Measures

Our website uses HTTPS encryption for all data in transit
Session notes and continuity records are stored on access-controlled systems
Physical session documents are held in a locked office and not accessible to unauthorised staff
In the event of a data breach affecting your personal information, we will notify you within a reasonable period and take steps to limit harm

6. Cookies

We use cookies to operate our website and understand general usage patterns. Full details of the cookies we use and how to manage them are in our Cookie Policy.

7. Your Rights Under Malaysian Law (PDPA 2010)

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to the personal data we hold about you:

Right to access: You may request a copy of the personal data we hold about you
Right to correction: You may request that inaccurate or incomplete data be corrected
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time
Right to limit processing: You may request that we limit how we use your data in certain circumstances
Right to object: You may object to processing based on legitimate interests

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. We may need to verify your identity before processing a request.

8. Third-Party Links

Our website may contain links to external websites, including the practitioner directory referenced in our sessions. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

9. Children's Privacy

Our services and website are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, the "Last Updated" date at the top will change. If changes are material, we will notify users who have provided contact details. Continued use of our website or services after changes take effect constitutes acceptance of the updated policy.

11. Contact and Data Controller

Data Controller: Ravelknot
Address: 5 Jalan Raja Musa Aziz, 30300 Ipoh, Perak, Malaysia
Phone: +60 5-806 3417
Privacy enquiries: [email protected]

Complaints relating to the handling of personal data may be directed to the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.