On this page
This privacy notice explains how Wellspring handles the personal details you send through our contact form, under Malaysia's Personal Data Protection Act 2010 (PDPA). In short: we collect only your name, a contact detail and your message; we use them only to reply to you and arrange a wellness chat if you want one; we do not sell or share them; and you can ask us to delete them at any time.
- What we collect: your name, the contact detail you give us (such as a phone number or email), and whatever you write in your message.
- Why: only to reply to you and, if you ask, to arrange an informal wellness chat.
- Lawful basis: your consent, given when you submit the form.
- No selling, no sharing: we do not sell, rent or trade your details, and we do not pass them to advertisers or third parties for their own use.
- Your control: you can ask to see, correct or delete your details, and withdraw your consent, at any time.
Who is responsible for your data?
Wellspring is an independent, evidence-based wellness-education site run by two Malaysia-based wellness consultants. For the purposes of the PDPA, the people behind Wellspring are the “data user” responsible for the personal details you share through this site. You can reach us using the contact point at the bottom of this notice. (the operator's legal name and registered address will be added here at launch)
What personal data do we collect?
We collect only what you choose to type into our contact form. In practice this is three things: your name, one contact detail (the phone number or email you want us to reply to), and the message you write. We do not ask for sensitive personal data — please do not send us identity-card numbers, financial details, or detailed medical records through the form. If your message mentions how you have been feeling, treat that as you would any message to a stranger online and share only what you are comfortable sharing.
Wellspring is general wellness education and not medical advice; nothing you send through the form is a clinical record, and we are not a healthcare provider.
Why do we use your data, and on what basis?
We use your details for one purpose: to reply to you, and — if that is what you are asking for — to arrange an informal one-to-one wellness chat (usually a chat on Instagram). We do not use your details for automated marketing, profiling, or advertising.
Our lawful basis under the PDPA is your consent: when you tick the consent box and submit the form, you are agreeing to us using these details to get back to you. Giving consent is entirely your choice, and you can take it back later (see below).
Do you sell or share my data?
No. We do not sell, rent or trade your personal details to anyone, and we do not hand them to advertisers or other businesses for their own marketing. Your message is read only by the Wellspring guides so they can reply to you.
The only routine “sharing” is technical and necessary: the form and our messaging run on ordinary service providers (for example, the platform that receives the form and the messaging service we reply on), which process your details only to deliver your message to us and our reply to you. We choose providers that are bound to keep that data confidential. We may also disclose details if the law genuinely requires it.
How long do you keep my data?
We keep your contact-form details only for as long as we reasonably need them to deal with your enquiry and any follow-up conversation. When a conversation has clearly ended and there is no ongoing reason to keep your details, we delete them. If you ask us to delete your details sooner, we will do so unless a law requires us to keep them. We do not keep your information indefinitely “just in case.”
What are my rights, and how do I withdraw consent?
Under the PDPA you have clear rights over your own data, and you can use any of them by contacting us:
- Access: ask us what details we hold about you.
- Correction: ask us to fix anything that is wrong or out of date.
- Deletion: ask us to delete your details.
- Withdraw consent: tell us to stop using your details and to stop contacting you. You can do this at any time — just reply “stop” to our message, or send a short note to the contact point below. Once you withdraw consent, we will stop using your details for that purpose and delete them where we no longer need them. Withdrawing consent does not undo anything we did lawfully before you withdrew it.
There is no charge to make a reasonable request, and we will respond as promptly as we can.
Do you track me?
This privacy notice covers the personal details you actively send us through the contact form. We do not use this notice to make any claim about advertising trackers or profiling, because the contact form does not set out to do that. If the way the wider site uses cookies or analytics changes, this notice will be updated to say so honestly.
How do I contact you about privacy?
For anything about your data — access, correction, deletion, or withdrawing consent — message us on the same Instagram account you would use to reach a Wellspring guide, or write to us.
Wellspring provides general wellness education, not medical advice or a diagnosis. For any personal health concern, please see a qualified healthcare professional. This privacy notice describes our normal practice in plain language; it is not legal advice. We may update it from time to time, and the “updated” date above will always reflect the current version.
Frequently asked questions
What information does the contact form actually collect?
Only three things: your name, one contact detail (the phone number or email you want a reply on), and the message you write. We do not ask for sensitive details such as identity-card numbers, financial information or medical records, and we ask that you do not send those through the form.
What will you use my details for?
Only to reply to you and, if you want one, to arrange an informal one-to-one wellness chat — usually a chat on Instagram. We do not use your details for automated marketing, profiling or advertising.
Will you sell my data or pass it to advertisers?
No. We do not sell, rent or trade your details, and we do not give them to advertisers or other businesses for their own use. Your message is read only by the Wellspring guides so they can reply.
How long do you keep my information?
Only for as long as we reasonably need it to handle your enquiry and any follow-up. When a conversation has clearly ended, we delete your details. You can also ask us to delete them sooner.
How do I withdraw my consent or get my data deleted?
Just tell us. Reply “stop” to our message, or send a short note to our privacy contact, and we will stop using your details and delete them where we no longer need them. There is no charge for a reasonable request.
Is this medical advice?
No. Wellspring is general wellness education, not medical advice or a diagnosis, and we are not a healthcare provider. For any personal health concern, please see a qualified healthcare professional.
References
- Personal Data Protection Act 2010 (Department of Personal Data Protection, Malaysia) — the law this notice follows for collection, consent, retention and the right to withdraw.