Privacy Policy

Who We Are

Cascadia Loom is a credit literacy education centre registered and operating in Malaysia. Our registered place of business is Jalan Ampang 226, 50450 Kuala Lumpur. We can be reached by telephone at +60 3 4253 7196 or by electronic mail at [email protected].

We operate the website at cascadi.biz (the "Site") and the educational programmes described on that Site. For the purposes of this policy, Cascadia Loom is the data controller in respect of personal information that visitors and programme enquirers submit to us.

Our programmes are structured as literacy education and do not involve financial advisory services, investment recommendations, or regulated financial activity of any kind.

Information We Collect

We collect personal information in two general ways: information you give to us directly, and information collected automatically when you visit our Site.

Information you provide

When you submit an enquiry through our contact form, you may provide:

• Your full name
• Your email address
• Your telephone number (optional)
• The programme you are interested in
• Any message or question you choose to include

We do not ask for, and ask that you do not submit, sensitive personal data such as identification numbers, financial account details, or health-related information through the contact form.

Information collected automatically

When you visit our Site, certain technical information is collected automatically by our hosting infrastructure and analytics tools. This may include:

• Your IP address (in truncated or hashed form where technically feasible)
• The browser type and version you are using
• The pages you visit and the duration of your visit
• The referring website, if any
• The date and time of your visit

This technical information does not, by itself, identify you as an individual. Please see Section 6 (Cookies) for further details on how these technical signals are recorded.

How We Use Information

We use the personal information we collect for the following purposes:

• To respond to your enquiry about our programmes
• To send you programme schedule information, session reminders, or materials you have requested
• To administer enrolment and attendance records for participants
• To improve the content and structure of our Site and educational materials
• To comply with our legal and regulatory obligations as a Malaysian business

We do not use your personal information for automated decision-making or profiling. We do not use it to build advertising profiles or to sell access to marketing networks.

If we intend to use your information for a purpose not listed above, we will contact you separately and seek your agreement before doing so.

Sharing of Information

Cascadia Loom does not sell, rent, or otherwise trade personal information to third parties for their own commercial purposes.

We may share information with trusted service providers who assist us in operating our Site and administering our programmes — for example, web hosting providers and email delivery platforms. These providers are engaged under contractual terms that restrict their use of your data to the purposes for which we shared it.

We may disclose personal information if required to do so by Malaysian law, a court order, or a lawful request from a regulatory authority, and only to the extent required by that obligation.

In the event that Cascadia Loom transfers its operations or assets to another entity, personal data held by us may form part of the assets transferred. We would notify affected individuals before such a transfer takes effect.

Retention

We retain personal information only for as long as it is needed for the purposes set out in this policy, and in any event for no longer than required by applicable Malaysian law.

Enquiry records from individuals who do not subsequently enrol in a programme are retained for a period of up to twelve months from the date of the enquiry, after which they are securely deleted.

Records relating to programme participants are retained for the duration of the programme and for a period of up to three years thereafter, to allow for any follow-up or administrative review. After that period, records are either deleted or anonymised.

You may request earlier deletion of your personal information by contacting us as described in Section 11 below.

Cookies

Our Site uses cookies and similar technologies to support basic functionality and to understand how visitors interact with our pages. A full description of the cookies we use, their purposes, and how to manage your preferences is set out in our Cookie Policy.

When you first visit our Site, a notice is displayed that allows you to accept or decline non-essential cookies. If you decline, only strictly necessary cookies required for the Site to function will be stored on your device.

Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) and general principles of data fairness, you have the right to:

• Request a copy of the personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Ask us to delete your personal information, subject to our legitimate record-keeping obligations
• Withdraw consent for any processing that is based on your consent, at any time
• Ask us to stop using your information for direct communication purposes

To exercise any of these rights, please contact us using the details in Section 11. We will acknowledge your request within five working days and respond fully within thirty calendar days, unless a longer period is permitted by law.

We will not charge a fee for responding to a routine rights request, but we reserve the right to charge a reasonable administrative fee if a request is manifestly unfounded, repetitive, or excessive in scope.

Security

We take reasonable and appropriate technical and organisational steps to protect personal information from unauthorised access, disclosure, alteration, or destruction. These measures include the use of encrypted connections (HTTPS) for data transmission, access controls limiting who within our organisation can view personal data, and regular review of our data handling practices.

No method of electronic storage or transmission over the internet is entirely without risk. While we work diligently to protect your information, we cannot offer an absolute assurance against every possible incident. If you become aware of any security concern relating to your interaction with our Site, please contact us promptly so that we may investigate.

Minors

Our programmes and this Site are directed at adults. We do not knowingly collect personal information from individuals under the age of eighteen. If you believe that a person under eighteen has submitted personal information through our Site without appropriate parental or guardian consent, please contact us and we will take appropriate steps to review and, where necessary, remove that information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. The date at the top of this page indicates when the policy was most recently revised.

For changes that are material to your rights or how we handle your information, we will make a reasonable effort to notify existing participants or enquirers by email before the change takes effect. Continued use of our Site after a revised policy has been posted constitutes your acknowledgement of the updated terms.

We encourage you to review this policy periodically so that you are aware of how your information is handled.

Contact

If you have questions, requests, or concerns regarding this Privacy Policy or the way we handle personal information, please reach out to us through any of the following channels:

We aim to respond to all data-related enquiries within five working days.