Privacy Policy

1. What Data We Collect

We collect personal data only when it is provided voluntarily through our website contact form or programme enrolment. The data we may collect includes:

• Full name — to address you correctly in correspondence.
• Email address — for programme communications and enquiry responses.
• Phone number — if provided voluntarily for scheduling purposes.
• Message content — the text of any enquiry submitted through our contact form.
• Website usage data — collected via cookies and analytics tools, such as pages visited and session duration. See Section 5 and our Cookie Policy.

We do not collect sensitive personal data (such as financial details or government identification numbers) through any website form.

Legal basis: Processing of contact and enrolment data is based on contractual necessity (to deliver programmes you have requested) and our legitimate interest in responding to enquiries. Analytics data is processed on the basis of your consent via our cookie banner.

Retention: Enquiry data is retained for up to 12 months from last contact. Enrolment data is retained for 3 years from programme completion for administrative and record-keeping purposes. Analytics data is retained per the terms of the analytics provider.

2. How We Use Your Data

• Responding to enquiries about our programmes
• Administering enrolments, scheduling and programme delivery
• Sending programme-related communications (session reminders, material distribution)
• Improving our website and programmes through anonymised analytics data
• Complying with applicable Malaysian law

We do not use your personal data for automated decision-making or profiling. We do not send marketing communications without your explicit consent. You may withdraw any consent at any time by contacting us at [email protected].

3. Sharing Your Data

We do not sell or rent personal data. We may share data only in the following limited circumstances:

• Service providers: We work with trusted third-party providers (such as email delivery and website analytics services) who process data only on our behalf and under binding agreements.
• Legal requirements: We may disclose data where required to do so by Malaysian law or a lawful authority.

4. How We Protect Your Data

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss or disclosure. These include:

• HTTPS encryption for all data transmitted through our website
• Access controls limiting who within Cashen can view personal data
• Storage on secure servers with access logging
• Periodic review of data handling practices

In the event of a data breach affecting your rights and freedoms, we will notify relevant parties in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

5. Cookies

We use cookies to understand how visitors use our website and to remember your preferences. Essential cookies cannot be disabled. Optional analytics and preference cookies require your consent. You can manage your cookie preferences at any time via our Cookie Policy page.

6. Your Rights Under PDPA (Malaysia)

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to personal data we hold about you:

• Right of access — to request a copy of the personal data we hold about you.
• Right of correction — to request correction of inaccurate or incomplete data.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
• Right to limit processing — to request that we limit how your data is used.
• Right to raise a complaint — you may lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external sites, including official LHDN resources. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing personal data. Our linking to external sites does not constitute an endorsement.

8. Children's Privacy

Our programmes are intended for adults (18 years and over). We do not knowingly collect personal data from individuals under 18. If we become aware that data has been collected from a minor, we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. The date at the top of the page reflects when it was last revised. Significant changes will be communicated to active participants by email where possible. Continued use of our website following any update constitutes acceptance of the revised policy.

10. Contact for Data Enquiries

For any questions relating to this privacy policy or to exercise your rights, please contact: