Who we are
Effective date: 23 September 2025 · Last updated: 5 October 2026
This Privacy Policy is our Personal Data Protection Notice under the Personal Data Protection Act 2010, as amended in 2024 (“PDPA”). It is issued by SBV Coaching (SSM No. 202503262449), also trading as SBV Wellness, of No 114, Jalan Merbuk 2, Taman Ketari, 28700 Bentong, Pahang (“SBV”, “we”, “us”), the data controller.
It applies when you book or use our services, visit sbvwellness.com, use the SBV Wellness app, fill in an SBV form (including Google Forms), sign up for updates, or contact us. We collect only what we need, we never sell your personal data, and we protect the sensitive information you share in sessions with extra care.
Personal data we collect
- Identity and contact: name, age or date of birth, gender, phone number, email, address.
- Booking and payment: services booked, session dates, receipts, transaction references and payment screenshots you send us. Card and bank details are handled by our payment gateways (such as senangPay or DOKU); we do not see or store them.
- Sensitive personal data: information about your physical or mental health, emotional wellbeing, relationships and life history that you share on intake forms, in sessions or in uploaded worksheets. We process this only with your explicit consent.
- App and website data: account details, content you upload, notification settings, device type, IP address, usage and crash data, and cookies.
- Marketing preferences: whether you have agreed to receive updates from us.
- Images and recordings: photos or video taken at events, and session recordings made only with your consent.
| Channel | What we collect | Why |
|---|---|---|
| Website (sbvwellness.com) | Name, email, phone and message from enquiry forms; device, browser and IP address; cookies | To reply to you, keep the site secure, and see which pages help people |
| SBV Wellness app | Account details (password stored in encrypted form), profile, bookings, payment references, uploaded worksheets, notification settings, usage and crash data | To run your account, deliver bookings and Pro content, and fix problems |
| Google Forms | Your answers, and your email if the form collects it. Intake forms may include health and emotional information | To register you, prepare your session, run events and collect feedback |
| Your number, messages and payment screenshots | To confirm bookings and answer questions | |
| Newsletter and broadcast sign-ups | Name, phone, email and a record of your consent | To send updates you asked for |
| Payment gateways | Transaction reference, amount and status | To confirm bookings and issue receipts |
Why we use your data
- To book, deliver and follow up on sessions, programmes, webinars, events and products.
- To tailor coaching and hypnotherapy to your needs and keep session notes.
- To process payments, issue receipts and handle refunds.
- To run your app account, including Pro content and worksheet uploads.
- To send appointment reminders and service messages.
- To send event news, offers, podcast updates and motivational content, only if you have opted in.
- To improve our services, keep records required by law, and protect our legal rights.
Who we share it with
We share personal data only as needed, with:
- Service providers acting for us: payment gateways (such as senangPay and DOKU), Google (Forms, Drive, Calendar, Meet and email), WhatsApp, our website and app hosting providers, and email tools.
- SBV coaches and facilitators involved in your service, who are bound by confidentiality.
- Professional advisers such as accountants and lawyers.
- Authorities, where required by law or where there is a serious risk of harm to you or others.
We do not sell, rent or trade your personal data.
Transfers outside Malaysia
Some of our providers, such as Google and Meta (WhatsApp), may store data on servers outside Malaysia. We use providers that apply safeguards to protect personal data to a standard comparable to the PDPA.
Google Forms
- Form responses are stored in SBV’s own password-protected Google account and processed by Google.
- Only SBV staff who need the information can see responses.
- We do not ask for card numbers, bank details or passwords on any form, and we ask for your IC number only where it is truly required.
- Forms that ask about health or emotional wellbeing include a separate consent box, and we cannot accept the form without it.
- Responses are kept and deleted on the same schedule as client records (section 10).
App permissions and cookies
- The app asks for notifications (reminders and updates), camera and photos (to upload worksheets) and storage (to save audios offline) only when you use those features. You can turn them off in your device settings.
- Our website uses essential cookies to work properly and may use analytics cookies to see which pages are used. Analytics cookies do not identify you by name.
- You can block or delete cookies in your browser, though some features may then stop working.
Marketing messages
- We send marketing only if you tick the marketing box. It is never required to use our services.
- Opt out any time: reply “STOP” on WhatsApp, click “unsubscribe” in any email, or turn off notifications in the app.
How long we keep your data
| Data | How long |
|---|---|
| Session notes and intake forms | Up to 7 years after your last session, then securely destroyed |
| Payment and accounting records | 7 years, as required for tax purposes |
| Marketing data | Until you opt out |
| App account data | Until you close your account, plus up to 12 months for backups |
Deleting your account
- Ask to delete your account in the app or by emailing sbvwellnessmy@gmail.com. We will delete it within 30 days.
- We keep only the records the law requires, as set out in section 10, and then delete them securely.
How we protect your data
- Our website and app use encrypted connections (HTTPS), and passwords are stored in encrypted form.
- SBV’s admin accounts use strong passwords and two-step verification.
- Access to client data is limited to the people who need it to serve you.
- We will never ask for your password by WhatsApp, phone or email.\
Data breaches
If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as required by law, and notify you without undue delay if the breach is likely to cause you significant harm.
Your rights
Under the PDPA you may:
- Ask for access to your personal data and a copy of it.
- Ask us to correct inaccurate, incomplete or outdated data.
- Withdraw consent or ask us to limit processing.
- Ask us to transfer your data to another organisation, where technically feasible.
- Ask us to stop sending marketing messages.
We will respond within 21 days. We may charge a fee permitted under the PDPA regulations for a copy of your data.
Children
People under 18 must not create an account or submit a form without a parent or guardian. If we learn that a child has done so, we will delete the data.
Changes to this policy
We may update this policy. The latest version is always on sbvwellness.com and in the app, with its effective date.
Contact us
For questions, requests or complaints about your personal data: SBV Coaching (SSM No. 202503262449), trading as SBV Wellness No 114, Jalan Merbuk 2, Taman Ketari, 28700 Bentong, Pahang Email: sbvwellnessmy@gmail.com · WhatsApp: +60 12-650 6177 · Website: sbvwellness.com This policy is available in English and Bahasa Malaysia. If there is any inconsistency, the English version prevails.