Legal

Privacy Policy

Last Updated: 10 April 2025  |  Effective: 10 April 2025

1. Introduction

Warisan Mekar ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our website and enrol in our financial education programmes. This Privacy Policy explains how we collect, use, store, and protect your personal data, and what rights you have in relation to that data.

This policy applies to all personal data collected through our website at warisanm.info, our contact forms, and in connection with the delivery of our programmes.

We process personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

2. Who We Are

Warisan Mekar is a financial education provider based at Jalan SS2/24, 47300 Petaling Jaya, Selangor, Malaysia. For privacy-related enquiries, contact us at: [email protected].

3. What Personal Data We Collect

3.1 Data you provide directly

• Name and contact details (email address, phone number)
• Enquiry content submitted through our contact form
• Programme enrolment details
• Payment information (processed through our payment provider — we do not store card data)

3.2 Data collected automatically

• Browser type, operating system, and device information
• IP address and approximate location
• Pages visited on our website and session duration
• Cookies and similar tracking technologies (see our Cookie Policy)

4. Legal Basis for Processing

We collect and process personal data on the following grounds under the PDPA:

• Consent — where you have explicitly agreed (e.g., submitting our contact form)
• Contract — where processing is necessary for programme enrolment and delivery
• Legitimate interest — for website analytics and improving our services, where our interest does not override your rights
• Legal obligation — where we are required to retain records under Malaysian law

5. How We Use Your Data

• To respond to enquiries submitted through our contact form
• To process enrolments and deliver our educational programmes
• To send programme-related communications (session reminders, materials, recordings)
• To maintain records in compliance with Malaysian financial education regulations
• To improve the content and delivery of our programmes through aggregated feedback
• To analyse website usage through anonymised analytics

We do not use your personal data for automated decision-making or profiling.

6. Data Sharing

We do not sell or rent your personal data to third parties. We may share data with:

• Payment processors — for secure handling of programme fees
• Video conferencing providers — for session delivery (these providers have their own privacy policies)
• Analytics providers — Google Analytics, in anonymised form
• Regulatory authorities — if required by Malaysian law

All third-party service providers are required to handle personal data in accordance with applicable data protection standards.

7. Data Retention

• Enquiry data not resulting in enrolment: retained for 12 months then deleted
• Programme enrolment records: retained for 7 years (Malaysian business record obligations)
• Payment records: retained as required by Malaysian financial regulations
• Website analytics data: retained in anonymised form for up to 26 months

8. Data Security

We take reasonable technical and organisational measures to protect your personal data, including:

• HTTPS encryption for all web communications
• Access controls limiting who within our team can view personal data
• Secure storage of digital records with access logging
• Regular review of our data handling practices

In the event of a data breach affecting your rights or freedoms, we will notify you and the relevant authorities as required under the PDPA within a reasonable timeframe.

9. Cookies

Our website uses cookies for essential functionality and analytics purposes. For a full explanation of the cookies we use and how to manage your preferences, please see our Cookie Policy.

10. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request that inaccurate or incomplete data be corrected
• Withdrawal of consent — withdraw consent for processing where consent is the legal basis
• Restriction — request that we limit how we use your data in certain circumstances
• Enquiry — ask questions about how your data is being processed

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

11. Third-Party Links

Our website may contain links to external resources or third-party sites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.

12. Children's Privacy

Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected].

13. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify enrolled learners by email and update the "Last Updated" date at the top of this page. Continued use of our website after changes have been posted constitutes acceptance of the updated policy.

14. Contact

For any questions or concerns about this Privacy Policy or how we handle your personal data:

• Email: [email protected]
• Address: Warisan Mekar, Jalan SS2/24, 47300 Petaling Jaya, Selangor, Malaysia
• Phone: +60 12-847 3926