Privacy Policy

1. Introduction

Synthara Lab ("we", "us", "our") is committed to handling personal data responsibly. This policy describes what data we collect from participants and organisational clients, how we use it, how we protect it, and what rights you have under Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy applies to data collected through our website at syntharadio.world, through our enrolment and enquiry forms, and through our enterprise retainer engagements.

For data-related questions, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact data: name, email address, phone number — submitted via our enquiry or enrolment forms
• Organisation data: company name, role, team size — relevant for enterprise retainer clients
• Payment data: billing details processed through our payment provider; we do not store card numbers
• Usage data: pages visited, time on site, browser type — collected via analytics cookies if you consent
• Communications: content of messages sent to us via email or our contact form

Legal bases for processing:

• Consent — analytics and marketing cookies, where you have accepted via our cookie banner
• Contract — processing necessary to deliver the programme you have enrolled in
• Legitimate interests — responding to enquiries, maintaining records for service delivery

3. How We Use Your Data

• To respond to enquiries and provide information about our programmes
• To process enrolments and deliver course access
• To manage enterprise retainer engagements, including scheduling and curriculum delivery
• To send administrative communications related to your enrolment (e.g. session reminders)
• To analyse website usage and improve our content — only where analytics cookies are accepted
• To comply with our legal obligations under Malaysian law

Marketing: We do not send unsolicited marketing. If you have enquired about a programme, we may follow up once. You may opt out at any time by emailing [email protected].

Data retention: Enquiry records are retained for 12 months. Enrolment and payment records are retained for 7 years in accordance with Malaysian financial record-keeping requirements. Enterprise retainer records are retained for the duration of the contract plus 3 years.

4. Data Sharing and Third Parties

We do not sell personal data. We share data only in the following circumstances:

• Payment processing: billing data is shared with our payment processor solely to complete transactions
• Analytics: anonymised usage data may be processed by analytics tools if you have consented to analytics cookies
• Legal requirements: we may disclose data if required by Malaysian law or a court order
• Service providers: we use a small number of third-party tools for email and scheduling; these are bound by data processing agreements

We do not transfer personal data outside Malaysia except where a service provider operates internationally and an appropriate data transfer mechanism is in place.

5. How We Protect Your Data

• Data in transit is encrypted via TLS (HTTPS)
• Access to personal data is restricted to staff who need it to perform their role
• Passwords and credentials are hashed and never stored in plain text
• We review our data handling practices periodically
• In the event of a data breach affecting your personal data, we will notify you and the relevant authority as required under PDPA within 72 hours of becoming aware

6. Cookies

We use the following cookie categories:

• Essential: required for the website to function; cannot be disabled
• Analytics: used to understand how visitors use the site; only placed with your consent
• Preferences: used to remember your settings; only placed with your consent
• Marketing: used for advertising; only placed with your consent

You can manage your cookie preferences at any time via our Cookie Policy page.

7. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right to access: request a copy of the personal data we hold about you
• Right to correction: request that inaccurate data be corrected
• Right to withdraw consent: withdraw consent for processing based on consent at any time
• Right to cease processing: request that we stop using your data for direct marketing
• Right to be informed: be told what data we hold and how it is used

To exercise any of these rights, email [email protected] with your name, contact details, and a description of your request. We will respond within 21 days.

If you are not satisfied with our response, you may contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

8. Third-Party Links

Our website may contain links to external sites — for example, to published papers or benchmark references cited in course material. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any site you visit via an external link.

9. Age Requirement

Our programmes are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact [email protected] and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For material changes, we will send a notice to enrolled participants by email at least 14 days before the change takes effect.

Continued use of our website or programmes after a policy update constitutes acceptance of the revised policy.

11. Contact for Data Enquiries

Synthara Lab
21 Jalan SS 15/4B, 47500 Subang Jaya, Selangor, Malaysia

Email: [email protected]
Phone: +60 3 6108 5742