Privacy Policy

The data controller responsible for your personal data is:

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

• Full name
• Email address
• Phone number
• Message content submitted via contact or enquiry forms
• Program preferences or questions you share with us
• Payment information (processed securely via third-party payment providers; we do not store full card details)

3.2 Information Collected Automatically

• IP address and approximate geographic location
• Browser type and version
• Device type and operating system
• Pages visited, time spent on pages, and referral source
• Cookie identifiers (see Section 10 for details)

3.3 Information From Third Parties

We may receive limited information about you through analytics tools (such as Google Analytics), advertising platforms (such as Facebook and Bing), or referral partners. This information is aggregated and does not personally identify you unless combined with other data.

We use your personal data for the following purposes:

• Responding to enquiries and communicating with you about our programs
• Processing program registrations and confirming enrolment
• Sending program-related information, reminders, and materials
• Administering and improving our educational programs
• Sending follow-up resources to enrolled participants (for example, quarterly resources under the Retirement Readiness Assessment program)
• Conducting internal research and analysis to improve our offerings
• Complying with legal and regulatory obligations
• Marketing our programs to individuals who have expressed interest, where consent has been provided

We do not use your personal data for automated decision-making processes that produce legal or similarly significant effects without human review.

Under the Personal Data Protection Act 2010 (Malaysia), we process your personal data on the following grounds:

• Consent — where you have voluntarily submitted your information, for example via a contact form or marketing opt-in
• Contractual necessity — where processing is required to fulfil a program enrolment or service agreement
• Legitimate interests — where we have a genuine business purpose that does not override your fundamental rights, such as improving our website or preventing fraud
• Legal obligation — where we are required to retain or disclose information by applicable Malaysian law

We do not sell your personal data to third parties. We may share your data with the following categories of recipients, and only to the extent necessary:

• Service providers — including website hosting, email delivery, payment processing, and analytics platforms that assist us in operating our business
• Professional advisers — such as lawyers or accountants, where required in connection with our operations
• Regulatory bodies — where required by applicable Malaysian law or a valid legal process

Any third-party service providers who process personal data on our behalf are required to handle it securely and only for the purposes we have specified.

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. In general:

• Enquiry data from individuals who did not enrol in a program is retained for up to 12 months
• Participant records (enrolment, attendance, and program completion) are retained for up to 7 years following the conclusion of a program, in line with general record-keeping practices
• Financial and payment records are retained in accordance with Malaysian accounting and tax requirements

When data is no longer required, we securely delete or anonymise it.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include encrypted data transmission (SSL/TLS), access controls limiting who may view personal data, and regular reviews of our data handling practices.

No method of electronic transmission or storage is completely secure. While we take these matters seriously, we cannot provide an absolute assurance against all possible risks. If you have concerns about the security of your data, please contact us directly.

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete personal data
• Withdrawal of consent — withdraw any consent you have given at any time, where consent is the basis for processing; this does not affect the lawfulness of processing prior to withdrawal
• Limit processing — request that we restrict how we use your personal data in certain circumstances
• Enquire — ask questions about how your data is being used

To exercise any of these rights, please contact us using the details in Section 14. We will respond to all valid requests within a reasonable timeframe and in accordance with the PDPA. In some circumstances, we may be required by law to retain certain data notwithstanding your request.

Our website uses cookies and similar tracking technologies to improve your browsing experience and gather anonymous usage data. For full details about the types of cookies we use and how to manage your preferences, please refer to our Cookie Policy.

Our website may contain links to external websites, including Bursa Malaysia's official site, financial regulatory bodies, or reference resources. These third-party websites have their own privacy policies and are not covered by this document. We are not responsible for the content or data practices of any external website.

Our programs and website are intended for adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us so we can address the matter promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website following a material update constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy, wish to exercise your rights under the PDPA, or have a concern about how we have handled your personal data, please contact us:

We aim to respond to all privacy enquiries within 14 business days.