Privacy Notice
Muara Arts Foundation (“Muara Arts”) deeply values the contribution of its donors, supporters, employees and the wider public, all of whom play an important role in supporting its vision and initiatives. Muara Arts is therefore committed to handling personal data responsibly and transparently. This Privacy Notice explains when and why we collect your personal data, how we use it, and the steps we take to keep it secure. It also sets out your rights in relation to your personal data and how you may contact us should you have any questions. This Privacy Notice applies to personal data collected by Muara Arts, including when you visit our gallery or performing arts centre, attend our events, sign up to our programmes, interact with us, or use our website. When using our website, please also read this Privacy Notice together with the Terms of Use so that you are fully aware of how and why we use your data.
1. The personal data we collect about you
Personal data means any information that relates directly or indirectly to you, from which you may be identified. The personal data we process include: (a) Personal data you provide We collect personal data you provide to us. This includes information you give when you communicate with us, apply for membership, purchase tickets, products or services, sign up to our events, programmes, or receive communications from us, make a donation, apply for employment, volunteer or enter into a contract with us. For example, we may request for: • personal details (name, gender, date of birth, email, address, telephone etc.) • family and spouse/partner or next of kin details • financial information (such as credit/debit card of direct debit details) • your response to our event invitations or your intention to meet a member of our staff • details of the ways in which you wish to be contacted by us (b) Personal data from your visits and involvement with us When you visit us or take part in our activities, personal data about you may be collected or generated. This could include: • details of your areas of interest in the gallery and the performing arts centre • your attendance at events • where you have asked us for information or written to us • your visits to our websites • images of you captured by our CCTV systems • your use of our public wifi • your purchasing history • how you have helped us by volunteering or by donating money or objects to us • where you have applied for a job with us • information generated when you visit our website or digital platforms, such as IP addresses and the date and time of your visit. (c) Personal data from third parties We sometimes receive personal data about you from third parties. For example, where someone (e.g. friend, family member etc.) registers you for a membership or an event on your behalf, or where we work with partner organisations or service providers to help us analyse and understand the success of our events and programmes and to improve our offerings.
2. How we use your personal data
We use your personal data to support our activities and to provide you with the best possible experience when engaging with us, including for the following purposes: (a) manage entry for the gallery and performing arts centre, event registrations, programmes and workshops; (b) administer membership sign-ups, patron programmes, and collaboration or partnership initiatives; (c) manage donations or fundraising campaigns; (d) respond to your enquiries, feedback, and requests; (e) send updates, newsletters, and information about exhibitions, programmes, events, and special offers where you have chosen to receive them; (f) process online shop or merchandise purchases and related transactions; (g) enhance your experience with us through tailored content, services, and visitor engagement initiatives; (h) carry out internal research, analytics, and service improvements to better develop our exhibitions, programmes, events and special offers; (i) manage career opportunities, including to process and assess job applications and carry out recruitment and talent management activities; (j) help keep our visitors, patrons, and employees safe, including to detect and prevent fraud or other unlawful activity and protect us against legal claims or liabilities; and (k) comply with legal obligations and our internal policies.
3. How we collect your personal data
We collect your personal data when you first interact with us, when you update your information, or when you communicate with us. This may occur through: (a) ticket purchases, gallery and performing arts centre entry bookings; (b) registration for exhibitions, programmes, events, including RSVPs and attendance; (c) submissions made through our website or online platforms; (d) creation or use of user accounts or online services; (e) submission of membership, patron programme, or funding/grant application forms; (f) donations, fundraising or campaign responses; (g) signing up for newsletters, mailing lists, or other communications; (h) competition entries or promotional activities; (i) email, telephone, or written correspondence with us; (j) use of our website or digital services; (k) publicly available sources, including social media platforms, company websites, public databases or media publications, where relevant to our activities; and (l) third parties, such as by partner organisations, service providers, or other individuals acting on your behalf.
4. Use of third-party providers
We sometimes work with trusted third parties to help us run our website and online services. For example, they may help us process payments for admissions, memberships, donations, or merchandise purchases, or provide secure cloud storage for our website and related services. We require these third-party providers to protect your personal data and will only use them to support our services.
5. Control of your personal data
Under data protection law, you have rights which allow you to have a say in how we use your personal data, these include: (a) the right to know whether we hold your personal data and request access to such data; (b) the right to have inaccurate personal data corrected; (c) the right to request that we limit the processing of your personal data; (d) the right to require us to stop processing personal data if you believe that such processing is causing, or is likely to cause, substantial and unwarranted damage or distress to you or another person; (e) the right to withdraw your consent to the processing of personal data previously provided to us; and (f) the right to request that we transmit your personal data directly to an individual or organisation that has control or is authorised to process your personal data, where technically feasible. You may make such requests by contacting us using the details set out below.
6. Personal data of children
We may collect personal data about children such as their name, age and other relevant information when they attend a workshop organised by us, participate in a learning activity or feature in photographs or video recordings taken during our events or programmes. We take children’s privacy seriously. We will not knowingly collect, use, or share a child’s personal data without the consent of their parent or guardian. We will also only use a child’s personal data for the purposes for which it was collected, unless we are required or authorised by law to do otherwise.
7. Security of your personal data
When processing your personal data, we take practical steps to protect it from loss, misuse, modification, unauthorised or accidental access or disclosure, alteration, or destruction. This includes implementing security measures such as storing electronic data and databases on secure computer systems, and controlling access to information through both physical and electronic safeguards.
8. Retention of your personal data
We will keep your personal data for the duration that is necessary to carry out the purpose for which your personal data was collected and also for the purposes set out in this Privacy Notice.
9. Cookies
We use cookies and similar technologies to help our website function properly, improve your experience, and understand how visitors use our website. Cookies are small data files that are automatically sent to your browser from a web server and stored on your computer’s hard drive. They help us secure payments made through our website, manage membership login functionality, remember items in your shopping cart, and collect information such as the date and time of your visit and how you navigate the site. This helps us improve our website, services and offerings.
10. Contact us
For any enquiries, feedback, or requests regarding your personal data, you may contact us at contact@muaraarts.org
11. Inconsistency or conflict
In the event of any inconsistency or conflict between the English language version and the Bahasa Malaysia version, the English language version will prevail.
12. Other rights
For avoidance of doubt, nothing in this Privacy Notice shall limit such other rights of yourself or Muara Arts under the Personal Data Protection Act 2010.