Legal

Privacy Policy

Last updated: 15 May 2025

Lapang ("we", "us", "our") is committed to handling personal information responsibly. This policy explains what we collect, how we use it, and what rights you have in relation to your data. It applies to everyone who enquires about, books, or attends our sessions at Jalan Gaya 14, Kota Kinabalu, Sabah, Malaysia, or who contacts us by phone, email, or through our website.

1. Who we are

Lapang is a small, independent breathwork and relaxation education space based in Kota Kinabalu, Sabah. We are the data controller for any personal information you share with us. For questions about this policy, contact us at privacy@{{DOMAIN}}.

2. What we collect

We collect only what we need to run our sessions and respond to enquiries. This typically includes:

• Contact details — name, email address, phone number (when provided)
• Booking information — which sessions you've attended or enquired about
• Messages — the content of emails or form submissions you send us
• Website usage data — through cookies, if you've consented (see our Cookie Policy)

We do not ask for sensitive personal information such as health status or financial details as part of our session booking process.

3. How we use your information

• To respond to enquiries and confirm session bookings
• To send information about upcoming sessions if you've asked to receive it
• To manage coaching block and membership schedules
• To improve how our sessions and communications are structured, using aggregated feedback
• To comply with our legal obligations under Malaysian law

We do not use your information for targeted advertising, and we do not sell or pass personal data to third parties for commercial purposes.

4. Legal basis for processing

We process your data on the basis of:

• Contract — when processing is necessary to carry out a booking or membership you've entered into
• Legitimate interests — for example, responding to enquiries and managing our session schedule
• Consent — where you've opted in to receive updates or where cookies require your agreement

5. How long we keep your data

• Enquiry messages: up to 12 months after the last contact, unless a booking follows
• Booking records: up to 3 years after the most recent session
• Membership records: up to 3 years after membership ends
• Financial records (if applicable): as required under Malaysian tax law (typically 7 years)

After these periods, data is deleted or securely anonymised.

6. Data security

We store personal data on password-protected systems. Email communications are handled through standard encrypted email services. Access to participant records is limited to the Lapang team members who need it to carry out their work.

In the event of a data breach that is likely to affect your rights or interests, we will notify you as soon as reasonably practicable and take steps to contain the breach.

7. Cookies

Our website uses cookies. For a full explanation of the types of cookies used and your options, please see our Cookie Policy. You can manage your preferences there at any time.

8. Third-party services

We use a small number of third-party tools to run our website and communications — for example, Google Analytics (if enabled) to understand how people navigate our site. These services have their own privacy policies. We do not share your identifiable personal data with them beyond what is necessary for the service to function.

9. Your rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate or incomplete data
• Request deletion of your data, subject to any legal retention requirements
• Withdraw consent where processing is based on consent
• Object to processing in certain circumstances

To exercise any of these rights, contact us at privacy@{{DOMAIN}}. We will respond within 21 days.

10. Children's privacy

Our sessions are intended for adults aged 18 and above. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data relating to someone under 18, please contact us and we will delete it promptly.

11. Links to other sites

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites, and this policy does not cover them.

12. Changes to this policy

We may update this policy from time to time. The most recent version will always be available on our website. For significant changes, we will notify participants who have provided an email address.

13. Contact

For any privacy-related questions or requests:

• Email: privacy@{{DOMAIN}}
• Address: Jalan Gaya 14, 88000 Kota Kinabalu, Sabah, Malaysia
• Phone: +60 88-264 173