Effective Date: January 2026
Entity: myWIPHealing (WIP Healing Hub)

This Privacy Policy (“Policy”) sets out the basis upon which myWIPHealing (“we”, “us”, or “our”) may collect, use, disclose, or otherwise process Personal Data (as defined below) from individuals who engage with our programs, services, platforms, or communications, including participants, clients, partners, and collaborators (collectively referred to as “you” or “your”).

When the terms “you”, “your”, or similar expressions are used in this Policy, they refer to any individual whose Personal Data is collected, used, or processed by us in connection with our services.

We collect, use, disclose, and process Personal Data in accordance with the Personal Data Protection Act 2010 of Malaysia (“PDPA”) in connection with your interaction with our services, including but not limited to our website, workshops, programs, events, communications, and any digital platforms or materials we provide (collectively, the “Services”).

This Policy applies to Personal Data in our possession or under our control, including Personal Data held by third-party service providers engaged by us for the purposes described in this Policy.

By accessing our website, registering for programs, or engaging with our Services, you acknowledge that you have read and understood this Policy, and consent to the collection, use, and disclosure of your Personal Data as described herein, as may be updated from time to time.

If you do not agree with the terms of this Policy, you should refrain from using our Services or providing us with your Personal Data.

1. Information We Collect

We may collect personal data that you voluntarily provide to us, including but not limited to:

• Full name
• Contact information (email address, phone number)
• Organization and job title
• Event or program participation details
• Inquiry and communication records
• Information you voluntarily provide through feedback and survey responses
• Payment details: bank account details, credit card details, banking information
• National Registration Identity Card number

Where applicable, we may also collect limited wellness-related information strictly for program facilitation and improvement purposes.

2. How We Use Your Information

We use personal data for the following purposes:

• To respond to your inquiries and requests
• To deliver workshops, programs, and services
• To facilitate onboarding and participant engagement
• To develop, market and communicate to you in relation to products and services offered
• To improve our services and participant experience
• To generate aggregated insights for organizational reporting
• To send you updates on products, news, event updates, rewards and promotions, special privileges
• To contact you for product or customer satisfaction surveys and market research
• To notify you about benefits and changes to the services offered
• To conduct ethical research and evidence-based practice contributing to the advancement of mental health wellbeing initiatives
• To perform an analysis and establish a data repository to enhance our understanding of our customer profile
• For any additional purposes that are mandated or allowed by applicable laws, regulations, guidelines, and/or pertinent regulatory bodies

We do not utilize, process, or store Personal Data for the purpose of developing, enhancing, or training generalized Artificial Intelligence (AI) or Machine Learning (ML) models. Any AI or ML models that we employ are solely intended to improve and enhance the services offered directly to you, and do not entail the use, processing, or retention of your Personal Data.

3. PDPA Compliance

myWIPHealing adheres to the Personal Data Protection Act 2010 and applies internal governance controls aligned with all seven PDPA principles, including lawful processing, purpose limitation, disclosure control, security safeguards, retention governance, data accuracy assurance, and data subject access rights.

4. Data Sharing and Disclosure

We do not sell or rent personal data. We may disclose information in the following circumstances:

• To authorized personnel and facilitators involved in program delivery
• To corporate clients in aggregated and anonymized formats for reporting purposes
• Any affiliated and associated entities, subsidiaries, and companies of myWIPhealing, including those that may be established in the future
• Third parties that offer related services or products linked to our business, including our vendors, business partners, and any entity helping us achieve the objectives mentioned above
• Any agent, contractor, or service provider that offers administrative, order processing, payment clearing, credit reference, debt collection, or other services essential for our business operations
• Any individual we believe, in good faith, is obligated to disclose information as mandated by relevant laws; government bodies, statutory authorities, and industry regulators
• Our auditors, consultants, accountants, lawyers, or other financial or professional advisors
• Any individual we are forced or required to disclose information to under the law or in response to a valid request from a competent or government agency.

All third parties engaged are required to maintain appropriate confidentiality and data protection standards.

5. Data Security

We implement reasonable administrative, technical, and organizational safeguards to protect personal data against unauthorized access, disclosure, alteration, or destruction.
This includes access controls, secure storage practices, and confidentiality protocols for facilitators and partners.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal and regulatory requirements. When data is no longer required, it is securely deleted or anonymized.

8. Your Rights

Subject to applicable laws, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate information
• Withdraw consent for certain data uses
• Request deletion of your data (where applicable)

Please note that depending on the information requested and where permitted by law, we may refuse to comply with data access requests. myWIPhealing reserves the right to refuse access to personal information and data:

• If granting access to this information could seriously threaten the life, health, or safety of the individual concerned or anyone else
• If the request for information is deemed frivolous or vexatious; in such cases, the individual will be required to provide a reason for needing access to this information.

To exercise your rights, please contact us at hello@mywiphealing.com.

8. Cookies and Website Analytics

Our website may use cookies or similar technologies to enhance user experience and collect basic usage data. This information is typically anonymized and used for site performance and improvement purposes. You may adjust your browser settings to refuse cookies if you prefer.

9. Third-Party Links

Our website may contain links to third-party platforms. We are not responsible for the privacy practices of those external sites and encourage users to review their respective privacy policies.

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or regulatory requirements. Updates will be posted on this page with a revised effective date.

11. Consent

By providing your personal information, you agree to the utilization of that information as described in this Privacy Policy. Should we modify our Privacy Policy, we will post the revised version on this page. Your continued use of the service will indicate your acceptance of any such modifications.