Privacy Policy

When you contact us through the website enquiry form, by telephone, or by email, we may collect:

• Your name and the name of any household members relevant to a session
• Your email address and telephone number
• Your general location (district or town) for scheduling purposes
• The nature of your enquiry or the service you are asking about
• Any notes or background you choose to share about your record-keeping situation

We do not ask for identity document numbers, financial account details, or any sensitive information through our website form. If documents are shared during a session, they are handled in person according to the process described in your session briefing.

We also collect basic technical data when you visit our website — such as your browser type, the pages you visit, and your approximate location — through standard analytics tools. This data is not linked to your identity.

The personal information you provide is used to:

• Respond to your enquiry and confirm session details
• Schedule and coordinate your session with the appropriate facilitator
• Prepare printed materials relevant to your records organisation
• Follow up after a session to confirm delivery of materials or answer questions
• Maintain a record of completed sessions for our internal administrative purposes

We do not use your personal data for marketing purposes without your separate consent. We do not profile or score individuals based on the information collected.

We do not sell personal data. We do not share personal data with third parties for commercial purposes. In the ordinary course of running our service, we may share information with:

• Facilitators and coordinators within the Legacora team who need it to deliver your session
• Print service providers, where printed materials need to be prepared for your session (name and general details only)
• IT service providers who assist with website hosting, email, and administration

Any third-party service providers we engage are given only the data they need and are expected to handle it appropriately. We do not transfer personal data outside Malaysia except where a cloud service provider's infrastructure requires it, and in such cases we take reasonable steps to ensure appropriate handling.

Personal data is stored on secured systems accessible only to authorised members of the Legacora team. We do not store sensitive document contents on digital systems; any session notes are held on paper or encrypted digital formats.

We retain contact and session data for a period of three years following your last interaction with us. After that period, data is deleted or anonymised unless we have a continuing legal obligation to hold it. You may request deletion at any time — see Section 5 below.

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to the processing of your personal data at any time
• Request that your data be deleted, subject to any legal obligations we have to retain it

To exercise any of these rights, please contact us using the details in Section 8. We will respond to requests within 21 days. We do not charge a fee for reasonable access requests.

Our website uses a small number of cookies and similar technologies. These are described in our Cookie Policy. You can manage your cookie preferences at any time through that page or through your browser settings.

Essential cookies — those required for the website to function correctly — may be placed without separate consent. Other cookies, including those used for site analytics, are placed only with your agreement.

Our website may include a Google Maps embed to display our location. This is provided by Google LLC and is subject to Google's own privacy practices. By viewing the map, you may be sending data to Google's servers. You can disable this by adjusting your browser settings or by visiting our office address directly.

Our site may also use basic analytics to understand how visitors use our pages. We use this only in aggregate form to improve our website content and we do not use it to build individual profiles.

Links on our site to other websites are provided for convenience. We are not responsible for the privacy practices of other sites and encourage you to review their policies separately.