Privacy Policy

withphylicia, operated by Phylicia Chin, is responsible for the personal data processed through this website (withphylicia.com) and through booking, intake, and session-related communications.

Contact: hello@withphylicia.com

This policy applies to everyone who visits this website, and in more detail to anyone who books a session or becomes a client. I handle personal data in line with Malaysia’s Personal Data Protection Act 2010 (PDPA) and general international best practice, since I work with visitors and clients both in Malaysia and abroad.

Information I collect

If you’re just browsing this site:

Basic usage data collected automatically through Google Analytics and my hosting provider (e.g. pages viewed, time on site, which buttons you click, approximate location, device and browser type, and IP address, which Google Analytics does not store in full)

If you book a session or contact me:

Name, email address, and phone number
Information you share through my booking platform (Acuity) or intake form, including relevant health background
Payment information, processed through my booking platform. I don’t store your card details myself
Messages you send me directly (email, contact form, Instagram)

Cookies & analytics

This site uses Google Analytics (GA4) to understand how visitors use it, for example which pages are read and whether the booking buttons are clicked. Google Analytics sets cookies and collects data such as your approximate location, device and browsing behaviour on this site. This data is processed by Google and may be stored outside Malaysia. I don’t use it for advertising and I don’t combine it with anything that identifies you personally. The booking calendar on the booking page (Acuity Scheduling) may also set its own cookies.

You can block or delete cookies at any time through your browser settings. Blocking cookies may affect how parts of the site work, but won’t prevent you from browsing or contacting me.

Why I collect it

To operate and improve this website, respond to enquiries, manage bookings, provide safe and informed sessions, meet my duty of care to clients, and keep accurate records of our work together.

How I store and protect it

Client and booking information is stored digitally through secure, access-restricted platforms (password-protected files, encrypted booking system). Only I have access to it. No storage method is 100% risk-free, but I take reasonable, industry-standard steps to protect your information from unauthorised access, loss, or misuse.

Who I share it with

I don’t sell or share your personal information with third parties for their own marketing purposes. Information may be processed by the service providers that run this site and my practice, including:

Vercel (website hosting)
Google Analytics (site analytics)
Acuity Scheduling (booking)
Zoom (video sessions)

Some of these providers may store or process data on servers outside Malaysia. By using this site or booking with me, you consent to this. Beyond these operational providers, I don’t disclose your personal information to anyone else without your written consent, except where required by law, for example a serious and imminent risk to someone’s safety, or a legal order.

How long I keep it

Client records are kept for a minimum of 7 years after your last session, then securely deleted, unless the law requires a longer period. General website analytics data is kept for up to 14 months in Google Analytics, and server logs are kept according to my hosting provider’s standard retention settings.

If you’re under 18

This website and my services are intended for adults. If you’re a minor, a parent or guardian should be involved in booking and consenting to sessions on your behalf.

Changes to this policy

I may update this policy from time to time as my practice or the tools I use change. The current version will always be posted here.

Questions

If you have any questions about how your information is handled, email hello@withphylicia.com anytime.