Privacy Policy

1. Introduction

Lentera is committed to protecting the privacy and confidentiality of your personal information. This Privacy Policy explains how we collect, use, and protect your data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

2. Information We Collect

We collect the following information:

• Personal Information: Name, phone number, email address, date of birth
• Health Information: Mental health history, therapy notes, treatment objectives
• Booking Information: Appointment dates and times, type of service
• Payment Information: Transaction records (card details are not stored)
• Technical Information: IP address, browser type, website analytics data
• Google Information (if signing in with Google): Name, email address, and profile picture as shared by Google during authentication

3. Sign In with Google

We offer authentication via Google Sign-In as a convenience for users. When you choose to sign in with Google:

• We receive your name, email address, and profile picture from Google via OAuth 2.0
• We do not store or access your Google password
• Data received from Google is used solely to create and manage your account on Lentera
• We do not share this information with third parties beyond what is stated in this policy
• You can revoke permission at any time through your Google account settings

4. How We Use Your Information

Your information is used to:

• Provide therapy and workshop services
• Manage bookings and communications
• Process payments
• Improve the quality of our services
• Comply with legal and professional requirements

We will NOT sell, rent, or share your personal information with third parties for marketing purposes without your consent.

5. Data Protection

We implement appropriate security measures to protect your data:

• SSL encryption for all data transmitted
• Strict access controls — authorised staff only
• Secure and protected data storage
• Regular security audits
• Staff training on data privacy and security

6. Limits of Confidentiality

Your confidentiality is our priority. However, there are limited situations where we may need to disclose information:

• If there is a risk of harm to yourself or others
• If required by law or court order
• In cases of suspected child or elder abuse
• With your written consent

In such situations, we will disclose only the minimum information necessary.

7. Your Rights

Under the PDPA, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Restrict the processing of your data
• Object to the use of your data
• Request deletion of data in certain circumstances
• Withdraw consent at any time

To exercise these rights, please contact us at contact@lentera.my

8. Data Retention

We retain your data for as long as necessary to provide services and comply with legal and professional requirements. Generally:

• Therapy records: 7 years after the last session (per professional standards)
• Booking information: 3 years
• Financial records: 7 years (tax requirements)

9. Cookies and Tracking Technologies

Our website uses cookies to enhance the user experience. Cookies help us understand how you use the website and enable certain features to work properly. You can disable cookies through your browser settings.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on our website. The "Last Updated" date at the top indicates when this policy was last revised.