Privacy Policy

This Privacy Policy explains how myWIPhealing collects, uses, stores, and protects personal data in connection with SHIPS membership and related programmes. We are committed to ethical, trauma-informed, and non-extractive data practices — collecting only what is necessary, protecting your identity, and using insights only to strengthen community wellbeing.

Last updated: January 2026
Entity: myWIPHealing (WIP Healing Hub)
Governed by Malaysian Law

This Privacy Policy (“Policy”) sets out the basis upon which myWIPHealing (“we”, “us”, or “our”) may collect, use, disclose, or otherwise process Personal Data (as defined below) from individuals who engage with our programs, services, platforms, or communications, including participants, clients, partners, and collaborators (collectively referred to as “you” or “your”).

When the terms “you”, “your”, or similar expressions are used in this Policy, they refer to any individual whose Personal Data is collected, used, or processed by us in connection with our services.

We collect, use, disclose, and process Personal Data in accordance with the Personal Data Protection Act 2010 of Malaysia (“PDPA”) in connection with your interaction with our services, including but not limited to our website, workshops, programs, events, communications, and any digital platforms or materials we provide (collectively, the “Services”).

This Policy applies to Personal Data in our possession or under our control, including Personal Data held by third-party service providers engaged by us for the purposes described in this Policy.

By accessing our website, registering for programs, or engaging with our Services, you acknowledge that you have read and understood this Policy, and consent to the collection, use, and disclosure of your Personal Data as described herein, as may be updated from time to time.

If you do not agree with the terms of this Policy, you should refrain from using our Services or providing us with your Personal Data.

1. Information We Collect

We collect only minimal and necessary information to support participation and SHIPS programme improvement, including but not limited to:

• Full name
• Email address
• Contact number (optional)
• Session attendance and general engagement records
• Inquiry and communication records
• Information you voluntarily provide through feedback and survey responses
• Payment confirmation details (processed via third-party payment processor; we do not store card data)
• Reflections or feedback shared voluntarily within programmes (anonymised before any use)
• Username and activity data on our Discord community platform

Where possible, you may participate anonymously. We will always indicate when data collection is optional.

2. How We Use Your Information

We use personal data for the following purposes:

• To facilitate safe and meaningful SHIPS programme participation
• To deliver workshops, programs, and services
• To improve myWIPhealing and SHIPS programmes and community practices (using anonymised data only)
• To generate aggregated insights for organizational reporting
• To send you updates on products, news, event updates, rewards and promotions, special privileges
• To contact you for product or customer satisfaction surveys and market research
• To notify you about benefits and changes to the services offered
• To respond to duty of care situations involving serious risk of harm
• For any additional purposes that are mandated or allowed by applicable laws, regulations, guidelines, and/or pertinent regulatory bodies

We do not utilize, process, or store Personal Data for the purpose of developing, enhancing, or training generalized Artificial Intelligence (AI) or Machine Learning (ML) models. Any AI or ML models that we employ are solely intended to improve and enhance the services offered directly to you, and do not entail the use, processing, or retention of your Personal Data. We also do not use your information for commercial exploitation.

3. Anonymised Use for Learning & Sharing

• We may use anonymised, non-identifiable insights for:
• Internal evaluation and impact reporting
• Research-informed programme development
• Educational or conference presentations

These insights will never identify you personally. Your lived experiences are respected as shared knowledge, not resources for extraction.

4. PDPA Compliance

myWIPHealing adheres to the Personal Data Protection Act 2010 and applies internal governance controls aligned with all seven PDPA principles, including lawful processing, purpose limitation, disclosure control, security safeguards, retention governance, data accuracy assurance, and data subject access rights.

5. Data Sharing and Disclosure

SHIPS upholds a non-extractive approach to data. We do not sell or rent personal data. We may disclose information in the following circumstances:

• To authorize personnel and facilitators involved in program delivery
• To corporate clients in aggregated and anonymized formats for reporting purposes
• Any affiliated and associated entities, subsidiaries, and companies of myWIPhealing, including those that may be established in the future
• Third parties that offer related services such as payment processors, email platforms, and Discord to operate SHIPS. These providers process data only on our behalf and are bound by their own privacy obligations
• Any agent, contractor, or service provider that offers administrative, order processing, payment clearing, credit reference, debt collection, or other services essential for our business operations
• For duty of care, when there is a serious and immediate risk of harm to yourself or others
• Our auditors, consultants, accountants, lawyers, or other financial or professional advisors
• Any individual we are forced or required to disclose information to under the law or in response to a valid request from a competent or government agency.

All third parties engaged are required to maintain appropriate confidentiality and data protection standards.

6. Data Security

We take reasonable and appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access. However, no digital system is fully secure. We encourage mindful sharing within community spaces and ask members to uphold confidentiality as outlined in the SHIPS Terms & Conditions.

7. Data Retention Under PDPA 2010

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal and regulatory requirements. When data is no longer required, it is securely deleted or anonymized.

8. Your Rights

Subject to applicable laws, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate information
• Withdraw consent at any time, without affecting the lawfulness of prior processing
• Request deletion of your data (where applicable)
• Limit or object to specific uses of your data

To exercise your rights, please contact us at hello@mywiphealing.com

9. Cookies and Website Analytics

Our website may use cookies or similar technologies to enhance user experience and collect basic usage data. This information is typically anonymized and used for site performance and improvement purposes. You may adjust your browser settings to refuse cookies if you prefer.

10. Third-Party Links

Our website may contain links to third-party platforms. We are not responsible for the privacy practices of those external sites and encourage users to review their respective privacy policies.

11. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or regulatory requirements. Updates will be posted on this page with a revised effective date.

12. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Malaysia, including the Personal Data Protection Act 2010. Any disputes arising from or in connection with this policy shall be subject to the exclusive jurisdiction of the Malaysian courts.

13. Consent

By providing your personal information, you agree to the utilization of that information as described in this Privacy Policy. Should we modify our Privacy Policy, we will post the revised version on this page. Your continued use of the service will indicate your acceptance of any such modifications.

14. Contact Us

For any privacy-related questions, data requests, or concerns, please contact:

myWIPhealing team
Email: hello@mywiphealing.com
Website: www.mywiphealing.com