Privacy
How APC handles personal information shared through enquiries, bookings, forms, and communication.
Autism Pathways Consulting, operating under CJ Special and Inclusive Consultancy (SSM Reg. 003030209-T / 201903282307), is committed to protecting your privacy. This policy is made under Malaysia's Personal Data Protection Act 2010 (PDPA). Last updated: September 2026.
We do not collect personal data from children directly. Information about a child shared by a parent or caregiver is treated with the same confidentiality as all client data.
We do not sell, share, or disclose your personal information to third parties except as required to deliver the services above.
Everything shared in a session or intake form is treated as confidential. We will not share it with third parties except where required by law, or in the rare circumstance where we have a serious concern for the safety of a child, in which case we are obligated to take appropriate action under Malaysian law.
We use trusted third-party platforms to operate our services. These may process your information under their own privacy policies:
Calm Companion can be used without an account. You may optionally save one name or nickname, limited to 24 characters, in that browser on that device to personalise the prompt. It is not sent to APC, is not included with feedback, and can be removed in the app. Anyone using the same browser on a shared device may see it until it is removed, so leave it blank or remove it after use when that matters for privacy.
Text entered into First-Then, Choices, Timer, and Communication stays on the current page and is not saved or sent to APC. The app may cache its own files on your device so its main tools can reopen after an online visit, but it does not use that cache to keep your tool entries.
Feedback is optional and is sent only when you press Submit. APC receives the usefulness answer, optional improvement category, optional comment, app version, submission date, and a random submission reference. The form does not ask for a name, email address, diagnosis, school, or information about a child. Please do not place personal, child, contact, or urgent-support information in the optional comment.
The feedback form uses Cloudflare Turnstile to reduce automated submissions and Cloudflare D1 to store accepted feedback. Cloudflare may process technical network and browser information for hosting and security, including through infrastructure outside Malaysia. Turnstile does not receive the feedback answers or other form entries. APC's feedback database does not include fields for IP addresses, user agents, cookies, device identifiers, selected app actions, or tool entries.
Feedback is not published, automatically emailed, or monitored for urgent help. An authorised APC reviewer accesses it for product improvement. Optional comment text is scheduled for removal after 90 days during APC's monthly review. Structured answers, app version, submission date, and the reference may be retained for product analysis and audit. If you kept your submission reference, you may contact APC to request early removal of the optional comment.
Under Malaysia's PDPA, you have the right to:
To exercise any of these rights, contact us using the details below.
