Legal
Privacy Policy
Last updated: 12 May 2025 | Effective: 12 May 2025
1. Introduction
Anjung ("we", "our", or "us") operates a family financial education service from our premises at No. 27, Jalan SS2/24, SS2, 47300 Petaling Jaya, Selangor, Malaysia. We are committed to handling your personal information with care, transparency, and respect.
This Privacy Policy explains what personal data we collect when you visit our website or enquire about our programmes, why we collect it, how long we keep it, and what rights you have in relation to it. This policy is prepared in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
If you have questions about this policy, please contact us at [email protected].
2. Data We Collect
We collect only the information needed to respond to your enquiries and deliver our services. This includes:
- Contact details — name, email address, and phone number provided when you submit our enquiry form.
- Enquiry content — the message text you submit through our contact form.
- Programme enrolment data — details collected at the point of booking a workshop, programme, or course (such as household size and preferred dates).
- Usage data — anonymised information about how visitors interact with our website, collected through analytics cookies where consent has been given.
- Cookie consent preferences — your choices regarding optional cookies, stored locally on your device.
We do not collect sensitive personal data such as national identification numbers, financial account information, or information about health.
Legal basis: We process contact data on the basis of your consent (when you submit the form) and our legitimate interest in responding to enquiries. Enrolment data is processed to fulfil the contract between you and Anjung. Analytics data is processed only with your explicit consent.
Retention: Enquiry records are kept for up to 24 months. Enrolment records are kept for seven years in line with accounting and legal obligations. Analytics data is aggregated and anonymised; no individual records are retained beyond 26 months.
3. How We Use Your Data
Your personal data is used solely for the following purposes:
- Responding to your enquiry or booking request.
- Processing enrolment and arranging session attendance.
- Sending programme-related communications (schedules, reminders, materials).
- Improving our website based on anonymous usage patterns.
- Complying with legal or regulatory obligations.
We do not use your data for unsolicited marketing, nor do we sell, rent, or trade your personal information to any third party. If you consent to receive updates about our programmes, you may withdraw that consent at any time by contacting us at [email protected].
4. Data Protection Measures
We take reasonable and appropriate steps to protect your personal information from unauthorised access, loss, misuse, or disclosure:
- Our website is served over HTTPS with TLS encryption.
- Access to stored personal data is restricted to authorised Anjung staff with a legitimate need.
- Electronic records containing personal data are stored on password-protected systems.
- We review our data handling practices periodically to identify and address risks.
- In the event of a data breach that is likely to affect your rights, we will notify the relevant authorities and affected individuals as required by applicable law.
No transmission over the internet or electronic storage method is completely secure. While we apply reasonable measures, we cannot offer absolute guarantees regarding the security of data transmitted to us.
6. Your Rights
Under the Personal Data Protection Act 2010 (PDPA) and applicable data protection principles, you have the following rights regarding the personal data we hold about you:
- Right of access — you may request a copy of the personal data we hold about you.
- Right of correction — you may ask us to correct inaccurate or incomplete information.
- Right to withdraw consent — where we process your data based on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.
- Right to limit processing — in certain circumstances, you may ask us to restrict how we use your data.
- Right to erasure — you may ask us to delete personal data we no longer need, subject to legal retention requirements.
- Right to object — you may object to processing carried out on the basis of our legitimate interests.
To exercise any of these rights, please write to us at [email protected]. We aim to respond within 21 days. If you are not satisfied with our response, you may contact the Department of Personal Data Protection Malaysia (JPDP).
7. Third-Party Links
Our website may contain links to external websites for reference purposes. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information. The presence of a link does not constitute an endorsement.
8. Children's Privacy
Our services and website are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data to us without appropriate consent, please contact us so we can delete it promptly.
9. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after an update constitutes acceptance of the revised policy.
10. Contact
For any questions or requests relating to this policy or your personal data, please contact: