Privacy Policy

1. Introduction & Scope

This Privacy Policy applies to all personal information collected through the Bistari website at https://bistari.biz, through our contact form, and through direct communication with our coordination team. It covers residents and families based primarily in Sarawak, Malaysia. We operate in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By submitting an enquiry through our website or contacting us directly, you confirm that you have read and understood this policy.

2. Information We Collect

We may collect the following types of information:

• Contact details — your full name, phone number, and email address, provided when you complete our enquiry form or call us.
• Enquiry content — the message or notes you provide to describe your situation or questions.
• Technical data — anonymised browsing information such as pages visited and general browser type, collected via standard website analytics tools.
• Cookie preferences — your consent choices stored in your browser's local storage.

We do not collect sensitive personal information such as health records, financial account details, or identification document numbers through this website.

Retention: Enquiry records are kept for up to 24 months from the date of first contact, then securely deleted unless an ongoing service arrangement is in place.

3. How We Use Your Information

Your information is used only for the following purposes:

• Responding to your enquiry and discussing your family's needs.
• Coordinating the service or visit arrangement you have requested.
• Sending you relevant updates or follow-up correspondence related to your enquiry.
• Improving the usability and quality of our website through anonymised analytics.
• Meeting any legal or administrative obligations under Malaysian law.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

4. Legal Basis for Processing

Under Malaysia's Personal Data Protection Act 2010, we process your personal data on the following bases:

• Consent — when you submit our contact form and agree to our Privacy Policy and Terms.
• Legitimate interest — to respond to your enquiry and follow up in a reasonable timeframe.
• Contractual necessity — to carry out any service coordination arrangement you have agreed to.

5. How We Protect Your Information

We take reasonable steps to keep personal information safe:

• Our website uses HTTPS encryption for all data in transit.
• Access to enquiry records is limited to authorised Bistari coordination staff only.
• Internal records are stored on password-protected systems.
• In the unlikely event of a data breach, we will notify affected individuals within a reasonable timeframe as required by applicable law.

6. Cookies

We use cookies and similar local storage to improve your browsing experience. These include essential cookies needed for the site to function, and optional analytics cookies that help us understand how visitors use the site. Your cookie preferences are stored in your browser and can be updated at any time. For full details, please see our Cookie Policy.

7. Sharing With Third Parties

We do not share your personal information with third parties except in the following limited circumstances:

• Service partners — where a companion visitor or workshop facilitator needs basic scheduling information to carry out the arranged service. They are not permitted to use this information for any other purpose.
• Analytics providers — anonymised, aggregated data only, to understand website usage.
• Legal requirements — if we are required to disclose information under Malaysian law or by a competent authority.

8. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you.
• Correct any information that is inaccurate or out of date.
• Withdraw consent at any time, which will not affect any processing carried out before withdrawal.
• Request deletion of your personal data, subject to any legal retention obligations.
• Object to the processing of your data for marketing or non-essential purposes.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain a Google Maps embed and links to external resources. Bistari is not responsible for the privacy practices of any external website or service. We encourage you to read the privacy notices of any third-party site you visit.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a minor has submitted information through our website, please contact us so we can remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of our website after any changes indicates your acceptance of the updated policy. If the changes are significant, we will take reasonable steps to notify you.