Legal
Privacy Policy
Last Updated: 5 May 2025 ยท Effective: 5 May 2025
This Privacy Policy describes how Wangsa Pelangi ("we", "us", "our") collects, uses and protects personal data provided by visitors to this website and participants in our financial education programmes. It is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). If you have questions about this policy, please contact us at [email protected].
1. Data Controller
The data controller for personal data collected through this website and our programmes is:
Wangsa Pelangi
127 Jalan Skudai, 80300 Johor Bahru, Johor, Malaysia
Email: [email protected]
Telephone: +60 7-829 5147
2. Personal Data We Collect
We collect personal data in the following ways:
2.1 Data you provide directly
- Name, email address, and telephone number submitted through our contact or enquiry form
- Any additional information you choose to include in a message to us
- Personal financial information shared verbally during programme sessions (not recorded or stored digitally)
2.2 Data collected automatically
- Browser type, operating system, and IP address (collected via analytics tools, if enabled)
- Pages visited and time spent on the site
- Cookies and similar technologies (see Section 6 and our Cookie Policy)
2.3 Legal basis for processing (PDPA)
We process personal data on the basis of your consent (given when you submit the enquiry form or accept cookies), for the performance of a contract (when you enrol in a programme), and to comply with legal obligations. You may withdraw consent at any time โ see Section 7.
3. How We Use Your Personal Data
- To respond to enquiries and provide information about our programmes
- To manage programme enrolments, scheduling, and communications
- To send relevant updates about our programmes to those who have consented to receive them
- To improve the performance and content of this website using aggregated analytics data
- To comply with our legal obligations under Malaysian law
We do not sell, rent, or trade your personal data to third parties for commercial purposes.
3.1 Third parties who may receive your data
- Email service providers โ used to respond to your enquiries
- Analytics services โ aggregated data only, no personal identification
- Payment processors โ if you pay a programme fee electronically; governed by their own privacy policies
- Legal or regulatory authorities โ only where required by Malaysian law
4. Data Retention
We retain personal data for the following periods:
- Enquiry form submissions: up to 24 months from submission, unless you request earlier deletion
- Programme participant records: up to 5 years from programme completion, for administrative and legal purposes
- Payment records: 7 years as required under Malaysian financial regulations
- Analytics data: aggregated and anonymised; no personal retention period applies
After these periods, data is securely deleted or anonymised.
5. Data Security
We take reasonable steps to protect your personal data from unauthorised access, loss, or misuse. These include:
- HTTPS encryption for all data transmitted via this website
- Access controls limiting who can view participant data internally
- Secure storage of physical and digital records
- Staff awareness of confidentiality obligations
In the event of a data breach that may affect your rights, we will notify affected individuals and the relevant Malaysian authorities as required under the PDPA.
6. Cookies
We use cookies on this website. Essential cookies are required for the site to function. Optional cookies (analytics, preferences) are only placed with your consent. You can manage your cookie preferences at any time via our Cookie Policy page.
7. Your Rights Under the PDPA
As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights:
- Right of access โ to request a copy of the personal data we hold about you
- Right of correction โ to request correction of inaccurate or incomplete data
- Right to withdraw consent โ to withdraw consent to the processing of your data at any time
- Right to cease processing โ to request that we stop processing your data for direct marketing purposes
- Right to complain โ to lodge a complaint with the Personal Data Protection Commissioner, Malaysia
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.
8. Third-Party Links
This website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies independently.
9. Children's Privacy
Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that data from a minor has been submitted, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected by the "Last Updated" date at the top of this page. Where changes are material, we will take reasonable steps to notify registered participants.
11. Contact
For any questions, requests, or concerns about this Privacy Policy or the handling of your personal data, please contact:
Wangsa Pelangi
127 Jalan Skudai, 80300 Johor Bahru, Johor
[email protected]
+60 7-829 5147