Privacy Policy

1. Data Controller

The data controller responsible for your personal information is:

2. Personal Data We Collect

We collect personal data through the following means:

• Contact forms: Name, email address, and telephone number provided when you submit an enquiry through our website.
• Programme enrolment: Name, email address, telephone number, and payment information collected when you register for a study programme.
• Cookies and analytics: Browsing behaviour, pages visited, and session data collected through cookies and analytics tools (see Section 5).
• Correspondence: Any information you provide when you contact us by email or telephone.

Legal Basis for Processing

• Consent: For marketing communications and non-essential cookies.
• Contractual necessity: For programme enrolment, scheduling, and administration.
• Legitimate interests: For website analytics and improving our programmes.
• Legal obligation: Where required by Malaysian law or regulation.

Data Retention

Enquiry data is retained for 12 months. Programme participant records are retained for 5 years for administrative and regulatory purposes. Payment records are retained as required by Malaysian tax law. You may request deletion at any time, subject to overriding legal obligations.

3. How We Use Your Data

• Programme administration: Scheduling, attendance records, materials distribution, and facilitator communication.
• Responding to enquiries: Addressing questions about programmes and helping prospective participants decide whether to enrol.
• Communications: Sending programme updates, schedule confirmations, and post-cohort materials.
• Programme improvement: Analysing post-cohort feedback forms (anonymised where possible) to develop future materials.
• Legal compliance: Meeting obligations under Malaysian law including the Personal Data Protection Act 2010 (PDPA).

We do not sell, rent, or share your personal data with financial product providers, fund managers, insurance companies, or any other commercial third parties for marketing purposes.

4. Data Protection Measures

• Website data is transmitted over encrypted HTTPS connections.
• Participant records are stored on access-controlled systems accessible only to authorised staff.
• Payment information is processed through PCI-DSS compliant payment providers and is not stored on our systems.
• In the event of a data breach that may affect your rights and freedoms, we will notify you and the relevant authorities as required by the PDPA within a reasonable timeframe.
• We review our data handling practices regularly and update them as needed.

5. Cookies

Our website uses cookies for essential functionality, analytics, and preference management. You can manage your cookie preferences at any time. For full details, please see our Cookie Policy.

We may use Google Analytics or similar tools to understand how visitors use our website. These tools may set cookies on your device. You may opt out of analytics cookies through the cookie preference controls on our site.

6. Your Rights Under Malaysian PDPA

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right of correction: Request that we correct any inaccurate or incomplete data.
• Right to withdraw consent: Withdraw consent for processing at any time (this does not affect processing carried out before withdrawal).
• Right to limit processing: Request that we limit processing of your data in certain circumstances.
• Right to lodge a complaint: You may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been violated.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external sites, including Bursa Malaysia and publicly available financial documents used as case study references. We are not responsible for the privacy practices of third-party websites. We encourage you to review their privacy policies when visiting those sites.

8. Age Restriction

Our programmes are designed for adults aged 40 and above, and our services are not directed at anyone under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised date. Continued use of our website or services after any update constitutes acceptance of the revised policy.

10. Contact for Privacy Matters

For any privacy-related questions, requests, or complaints: