Privacy

Toolkitspring is the data controller for personal information collected through toolkitspring.click and through commissioned readings. Our office is Office 7, 58 Test Avenue, Malacca 00000, Malaysia. Email info@toolkitspring.click. Telephone +60 6 000 2180.

This notice is written with the Personal Data Protection Act 2010 (Malaysia) in mind. If you are in another country, additional rules may apply to international transfers, which we address below.

What we collect

From the contact form: name, email address, optional reading of interest, optional app and cohort description, and the message. We do not ask for identity-card numbers, medical details, or student names on that form, and you should not send them.

From email or telephone: the same kinds of professional contact details, plus whatever you choose to write.

From a commissioned reading: hashed usage records, teaching calendars, and organisational contacts. We instruct clients to strip student names, emails, and matrix numbers before a file leaves their office. If a named file arrives, we return it and ask for a hashed replacement. We do not keep the named copy.

From the site technically: the essential cookie that remembers your cookie choice (see the cookies page), and, if you accept optional cookies, a modest analytics cookie used only to count page visits.

Why we hold it

We reply to enquiries, perform a reading you have commissioned, invoice, and keep professional records of what was agreed. We do not sell contact lists. We do not use enquiry messages to advertise unrelated trades.

Retention

Unsuccessful enquiries are kept for twelve months, then deleted, unless a longer period is required to handle a complaint. Commissioned files (hashed exports, drafts, final notes, invoices) are kept for seven years after the final note, which matches how long Malaysian professional records are commonly expected to remain available for accounting and dispute purposes. Cookie choice is stored in your browser until you clear it.

Who else sees it

Practice members who need the file to write or brief. An accountant who sees invoices, not exports. A hosting provider who stores the mailbox and this website. We do not pass hashed cohort files to marketing firms.

International transfers

Our office is in Malaysia. Email and hosting may involve servers outside Malaysia. Where that happens, we rely on contractual clauses with the provider and on the fact that the content of a reading is professional, hashed where it concerns students, and not a public broadcast.

Your rights

Subject to the Personal Data Protection Act 2010, you may ask whether we hold your personal data, request a copy, ask for a correction, and, in some cases, ask us to stop using it for marketing (we do not run a marketing list in any event). Send the request to info@toolkitspring.click. We may need to confirm it is you. We will answer within a reasonable time, and not later than the period the Act allows.

You may complain to the Malaysian Personal Data Protection Commissioner if you believe we have mishandled your information.

Students in an export

Students are not our clients. We should never receive their names. If we discover a name in a file, we stop the reading until a hashed export arrives, and we do not use the named file for any other purpose.

Last updated: 20 August 2026.