Privacy Policy

Last updated: 23 September 2026

Bait Al Amanah ("BAA", "we", "us", or "our") is committed to protecting the privacy of individuals who visit our website or interact with us. This Privacy Policy explains how we collect, use, disclose, and protect personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By using this website, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree with this Policy, please do not provide your personal data to us or use this website.

1. What Personal Data We Collect

We may collect the following categories of personal data when you interact with our website:

Contact information you provide directly, such as your name, email address, phone number, and organisation, when you fill in a contact form, subscribe to our newsletter, or register for an event or programme.
Correspondence you send us, including the content of any messages, enquiries, or feedback.
Technical data collected automatically, such as your IP address, browser type, device information, and pages visited, through cookies and similar technologies (see Section 6).
Any other information you voluntarily provide, for example when applying for a fellowship, internship, or collaboration opportunity with BAA.

We do not knowingly collect sensitive personal data (such as health, religious, or political information) unless you provide it to us voluntarily and it is necessary for a specific purpose we have disclosed to you.

2. How We Use Your Personal Data

We use your personal data for the following purposes:

To respond to your enquiries, requests, and correspondence.
To send you newsletters, updates, and information about BAA's research, events, and programmes, where you have opted in to receive these.
To process registrations for events, workshops, roundtables, or fellowship programmes.
To improve our website, content, and services.
To comply with our legal and regulatory obligations.
For any other purpose disclosed to you at the point of collection, with your consent.

3. Legal Basis and Consent

We process your personal data on the basis of your consent, given when you voluntarily submit your data through our website, or where processing is necessary to respond to a request you have made. You may withdraw your consent at any time by contacting us using the details in Section 9, although this may affect our ability to respond to your enquiries or provide certain services.

4. Disclosure of Personal Data

We do not sell or rent your personal data to third parties. We may disclose your personal data to:

Service providers who assist us in operating our website and communications (for example, website hosting or email service providers), who are bound to protect your data and use it only for the purposes we specify.
Government authorities or regulators, where required by law.
Professional advisors, where necessary for legal or compliance purposes.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When personal data is no longer needed, we will securely delete or anonymise it.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to enhance your browsing experience, analyse website traffic, and understand how visitors use our site. You can control or disable cookies through your browser settings, though this may affect your experience of the website.

7. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Under the PDPA, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete personal data.
Withdraw your consent to the processing of your personal data.
Limit the processing of your personal data.
Request information on the type of personal data we hold and the purposes for which it is processed.

To exercise any of these rights, please contact us using the details in Section 9. We may require you to verify your identity before processing your request, and reasonable fees may apply as permitted under the PDPA.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at admin@baitalamanah.com

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this Policy periodically.