1. Information We Collect

Personal Information You Share With Us

When you sign up for our learning programs or use our services, we collect basic details like your name, email address, phone number, and company information if applicable. For our Malaysian operations, we also collect your IC or passport number when necessary for compliance with local financial education regulations.

Financial Learning Data

Since we focus on financial data interpretation, we may collect information about your learning progress, course completions, and assessment results. This helps us personalize your experience and improve our educational content.

Technical Information

Our systems automatically collect technical data including your IP address, browser type, device information, and how you interact with our platform. We use this to keep things running smoothly and spot potential security issues.

2. How We Use Your Information

Here's what we actually do with the data we collect:

• Deliver Our Services: Process your enrollment, provide access to learning materials, track your progress, and respond to your questions.
• Improve Your Experience: Personalize course recommendations based on your learning patterns and adjust content difficulty to match your skill level.
• Communication: Send you course updates, schedule changes, and important announcements about our programs. We'll also occasionally share relevant educational resources.
• Compliance: Meet our obligations under Malaysian law, including the Personal Data Protection Act 2010 and financial education regulations.
• Platform Enhancement: Analyze usage patterns to identify which teaching methods work best and where students typically struggle.

We won't sell your personal information to third parties. That's not our business model, and frankly, it's not how we want to operate.

3. Legal Basis for Processing (Malaysian Context)

Under Malaysian law, specifically the Personal Data Protection Act 2010, we process your data based on:

• Consent: When you sign up, you're giving us permission to process your data for educational services.
• Contract Performance: We need your information to deliver the learning programs you've enrolled in.
• Legal Obligations: Some data processing is required by Malaysian financial education regulations and tax laws.
• Legitimate Interests: We process certain data to improve our services and maintain platform security, provided this doesn't override your privacy rights.

4. Data Sharing and Third Parties

Service Providers We Work With

We partner with trusted service providers who help us run our platform. This includes cloud hosting services, email communication tools, payment processors, and learning management system providers. These companies only access data necessary for their specific functions and are contractually obligated to protect your information.

Educational Partners

When you enroll in programs co-developed with partner institutions, we may share relevant academic information with those partners. You'll always know in advance when this applies to a specific program.

Legal Requirements

We'll disclose information if required by Malaysian law, court orders, or government authorities. This includes compliance with Securities Commission Malaysia regulations when applicable to our educational content.

5. Your Rights Under Malaysian Law

The Personal Data Protection Act 2010 gives you specific rights:

Access Your Data

You can request a copy of the personal information we hold about you. We'll provide this within 21 days, as required by Malaysian law. There's typically no charge for this, though we may charge a reasonable fee for excessive or repeated requests.

Correct Your Information

Found something incorrect in your profile? You can update most information directly through your account settings. For changes that require verification, contact our support team.

Withdraw Consent

You can withdraw your consent for us to process your data at any time. Keep in mind this might mean we can't continue providing certain services to you.

Limit Processing

You can ask us to restrict how we use your data in specific circumstances, such as when you're disputing the accuracy of information.

Data Portability

You have the right to receive your personal data in a structured, commonly used format. This makes it easier to transfer your information to another service provider if you choose.

6. Data Security Measures

We take security seriously because we're dealing with educational records and personal information. Here's what we do to protect your data:

• Encryption: All data transmitted between your device and our servers uses TLS encryption. Sensitive data stored on our systems is encrypted at rest.
• Access Controls: Only authorized team members can access personal data, and only when necessary for their specific roles.
• Regular Audits: We conduct security assessments quarterly and maintain logs of data access for accountability.
• Secure Infrastructure: Our hosting providers meet international security standards and maintain facilities in compliance with ISO 27001.
• Incident Response: We have procedures in place to detect, respond to, and notify you of any data breaches within the timeframes required by Malaysian law.

That said, no system is 100% secure. While we do everything reasonable to protect your information, we can't guarantee absolute security. If you notice anything suspicious with your account, let us know immediately.

7. Data Retention Periods

Active Account Data

While your account is active, we keep your personal information and learning records to provide ongoing service and track your educational progress.

After Account Closure

When you close your account, we retain certain information for 7 years to comply with Malaysian financial record-keeping requirements. This includes enrollment records, payment history, and course completion certificates.

Marketing Communications

If you've opted into marketing emails but aren't an active student, we'll keep your email address until you unsubscribe or for 3 years of inactivity, whichever comes first.

Technical Logs

Server logs and technical data are typically retained for 90 days unless needed for security investigations or legal compliance.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. Here's the breakdown:

Essential Cookies

These are necessary for the platform to function. They handle things like keeping you logged in and remembering your session. You can't opt out of these without losing basic functionality.

Performance Cookies

We use analytics cookies to understand how people use our platform. This helps us identify confusing navigation, slow-loading pages, and features that aren't working as intended.

Preference Cookies

These remember your settings like language preference, display options, and content filters.

You can manage cookie preferences through your browser settings. Most browsers let you block or delete cookies, though this might affect how well the platform works for you.

9. Children's Privacy

Our services are designed for adults and professionals. We don't knowingly collect information from anyone under 18 years old without parental consent.

If you're under 18 and interested in our programs, we'll need written consent from a parent or legal guardian before you can enroll. Malaysian law requires this for educational services involving minors.

If we discover we've collected information from a minor without proper consent, we'll delete it promptly.

10. Changes to This Policy

We'll update this policy occasionally as our services evolve or legal requirements change. When we make significant changes, we'll notify you via email and post a notice on our platform at least 30 days before the changes take effect.

The date at the top of this document shows when it was last updated. We recommend checking back periodically, especially if you haven't logged in for a while.

If you continue using our services after changes take effect, we'll consider that acceptance of the updated policy. If you disagree with changes, you can close your account before they come into force.

11. Complaints and Disputes

Contact Us First

If you have concerns about how we handle your data, please reach out to us directly. Most issues can be resolved through conversation.

Regulatory Authority

If you're not satisfied with our response, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia. You can reach them through their official website or office in Putrajaya.

Dispute Resolution

For disputes related to data processing, we follow the procedures outlined in the Personal Data Protection Act 2010. This typically involves mediation before formal proceedings.