Privacy Policy

1. Introduction

Ledgerwell ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our programmes, website, and services. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This policy applies to personal data collected through our website at {{DOMAIN}}, through our enquiry forms, and during the course of delivering our financial education programmes. If you have questions, please contact us at privacy@{{DOMAIN}}.

2. Data We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, and phone number when you submit an enquiry form.
• Programme registration data: Information provided when registering for a Ledgerwell programme, including your preferred session and any notes about your background.
• Payment data: Payment details processed securely through our payment provider. We do not store full card details ourselves.
• Website usage data: Anonymised analytics data collected via cookies, including pages visited, session duration, and referral source.
• Correspondence: Emails and messages sent to us that we retain for the purpose of responding and maintaining a record of interactions.

3. How We Use Your Data

We use your personal data for the following purposes:

• Responding to enquiries and providing information about our programmes
• Processing programme registrations and managing participant records
• Sending session confirmations, reminders, and post-session materials
• Improving our website and programme content based on aggregated usage data
• Complying with applicable legal obligations

We process your data on the legal bases of: your consent (where provided), performance of a contract (where you have registered for a programme), and our legitimate interests in operating an education business.

4. Data Retention

We retain personal data for as long as necessary for the purposes described in this policy. Enquiry records are retained for up to 24 months. Programme participation records may be retained for up to 7 years for administrative and legal purposes. You may request deletion of your data at any time by contacting us.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data may be shared in the following limited circumstances:

• Service providers: Trusted service providers who assist in operating our website or delivering services (such as email or payment processing), bound by confidentiality agreements.
• Legal requirements: Where required to comply with applicable law, regulatory authority request, or court order.
• Business transfers: In the event of a business sale or restructuring, participant data may be transferred as part of that process.

We do not share your data with financial product providers, advertisers, or any institution that might use it for commercial solicitation.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include secure data storage, access controls, and regular review of our data handling practices. In the event of a data breach that affects your rights, we will notify you in accordance with PDPA requirements.

7. Cookies

Our website uses cookies to improve your browsing experience and to collect aggregated analytics data. You can manage your cookie preferences at any time through our Cookie Policy page. Disabling non-essential cookies will not affect your ability to use the main features of our website.

8. Your Rights

Under the PDPA Malaysia, you have the following rights in relation to your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right of correction: Request correction of inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting lawfulness of prior processing.
• Right to limit processing: Request that we restrict use of your data in certain circumstances.
• Right to complain: Lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your data rights have been violated.

To exercise any of these rights, please write to us at privacy@{{DOMAIN}}. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external sites you visit.

10. Children's Privacy

Our programmes are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us and we will remove it promptly.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with a revised date. Continued use of our website or services after any update constitutes acceptance of the revised policy.

12. Contact

For any questions regarding this Privacy Policy or your personal data, please contact: