Overview
Autism Pathways Consulting, operating under CJ Special and Inclusive Consultancy (SSM Reg. 003030209-T / 201903282307), is committed to protecting your privacy. This policy is made under Malaysia's Personal Data Protection Act 2010 (PDPA). Last updated: September 2026.
Information We Collect
- Name, email address, and phone number when you enquire, book, or join a mailing list
- Information about your child and family situation shared voluntarily during consultations or through intake forms, used solely to deliver the session you have booked
- Payment reference details when you complete a transaction
We do not collect personal data from children directly. Information about a child shared by a parent or caregiver is treated with the same confidentiality as all client data.
How Information Is Used
- To respond to your enquiry or deliver the service you have booked
- To send session reminders and follow-up communications related to your engagement with APC
- To send the APC newsletter or course updates if you have opted in. You can unsubscribe at any time.
We do not sell, share, or disclose your personal information to third parties except as required to deliver the services above.
Confidentiality
Everything shared in a session or intake form is treated as confidential. We will not share it with third parties except where required by law, or in the rare circumstance where we have a serious concern for the safety of a child, in which case we are obligated to take appropriate action under Malaysian law.
Third-Party Services
We use trusted third-party platforms to operate our services. These may process your information under their own privacy policies:
- Cal.com: appointment scheduling
- Brevo: email communications and waitlist management
- Maybank and Wise: local and international payment processing
- Gumroad: course payment processing
- Google Workspace and Zoho Mail: internal communication
- Cloudflare: website and app hosting, Turnstile security checks, and storage of optional Calm Companion feedback
Website Activity Counts
To understand whether the website helps visitors take a next step, APC counts views of Home, parent and school service pages, About, and resource pages including the blog index, booking-link clicks, requests to open the embedded calendar, and successful new booking submissions reported by that calendar. These counters store only a daily total, a broad page category, and an action name in Cloudflare D1.
They do not store names, contact details, form answers, booking references, IP addresses, browser details, cookies, device identifiers, full URLs, search parameters, or referring URLs. The counters respect browser Do Not Track and Global Privacy Control signals. Cloudflare processes network information to deliver and secure requests, as it does for website hosting. Daily totals older than 90 days are removed when the next counted event arrives.
The site also uses Cloudflare Web Analytics to count visits and measure page performance. It does not use cookies and does not collect names or form answers.
APC Calm App
Calm Companion can be used without an account. You may optionally save one name or nickname, limited to 24 characters, in that browser on that device to personalise the prompt. It is not sent to APC, is not included with feedback, and can be removed in the app. Anyone using the same browser on a shared device may see it until it is removed, so leave it blank or remove it after use when that matters for privacy.
Text entered into First-Then, Choices, Timer, and Communication stays on the current page and is not saved or sent to APC. The app may cache its own files on your device so its main tools can reopen after an online visit, but it does not use that cache to keep your tool entries.
Feedback is optional and is sent only when you press Submit. APC receives the usefulness answer, optional improvement category, optional comment, app version, submission date, and a random submission reference. The form does not ask for a name, email address, diagnosis, school, or information about a child. Please do not place personal, child, contact, or urgent-support information in the optional comment.
The feedback form uses Cloudflare Turnstile to reduce automated submissions and Cloudflare D1 to store accepted feedback. Cloudflare may process technical network and browser information for hosting and security, including through infrastructure outside Malaysia. Turnstile does not receive the feedback answers or other form entries. APC's feedback database does not include fields for IP addresses, user agents, cookies, device identifiers, selected app actions, or tool entries.
Feedback is not published, automatically emailed, or monitored for urgent help. An authorised APC reviewer accesses it for product improvement. Optional comment text is scheduled for removal after 90 days during APC's monthly review. Structured answers, app version, submission date, and the reference may be retained for product analysis and audit. If you kept your submission reference, you may contact APC to request early removal of the optional comment.
Upcoming Programme Interest
The optional programme interest list collected adult contact details and broad planning preferences. It is closed to new sign-ups. To ask about, change or remove your details, email cjlim@autismpathwaysconsulting.com.
Your Rights
Under Malaysia's PDPA, you have the right to:
- Request access to the personal data we hold about you
- Request correction of inaccurate data
- Withdraw consent for marketing communications at any time
- Request deletion of your data where appropriate
To exercise any of these rights, contact us using the details below.