Legal Document
Privacy Policy
Damai Pelita · Last updated: 25 April 2025
This policy explains how Damai Pelita collects, uses, and protects personal data provided to us through our website and programmes. We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010).
1. Who We Are
Damai Pelita is a financial education practice registered in Malaysia and located at 142 Jalan Tun Razak, 50450 Kuala Lumpur. We are the data controller for personal data collected through this website and through our programmes.
For privacy-related questions, write to us at [email protected] or call +60 3-7964 8132.
2. Personal Data We Collect
We collect personal data only when it is necessary for the purposes described in this policy. The categories of data we may collect are:
- Contact information: name, email address, telephone number — provided when you submit an enquiry form on this website.
- Correspondence content: the content of messages or enquiries you send to us.
- Programme participation data: information relevant to your enrolment and attendance in our educational programmes.
- Usage data: anonymised website analytics including pages visited, device type, and browser — collected via cookies, subject to your consent.
Legal basis for processing: We process your data on the basis of (a) your consent, given at the time of submission; (b) our legitimate interest in responding to enquiries and administering our programmes; or (c) contractual necessity where you have enrolled in a programme.
Retention: Contact and enquiry data is retained for up to 24 months. Programme participation records are retained for up to 7 years for administrative and compliance purposes. Anonymised analytics data is retained as configured by the analytics provider.
3. How We Use Your Data
Personal data collected through this website is used for the following purposes:
- Responding to enquiries about our programmes
- Administering programme enrolment and attendance
- Communicating relevant programme information to enrolled participants
- Improving the quality of our website and programmes through anonymised analytics
- Complying with applicable legal obligations
We do not sell, rent, or trade your personal data to third parties. We do not use your data for advertising purposes or share it with financial product providers.
Third-party services: We may use trusted third-party service providers for website hosting, analytics, and email delivery. These providers process data only under our instruction and in accordance with appropriate data processing agreements. If we use Google Analytics or similar services, this is done only with your cookie consent.
4. How We Protect Your Data
- Our website is served over HTTPS with TLS encryption.
- Access to personal data is restricted to staff who require it for their work.
- Programme-related personal information is stored securely and is not accessible to other programme participants.
- In the event of a data breach affecting your personal data, we will notify you and the relevant authority as required under Malaysian law.
5. Cookies
This website uses cookies. Essential cookies are necessary for the website to function and are always active. Analytics and preference cookies are only set with your explicit consent, which you may give or decline via the cookie notice when you first visit.
For full details of the cookies we use and how to manage them, please read our Cookie Policy.
6. Your Rights Under PDPA 2010
Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:
- Right of access: You may request a copy of the personal data we hold about you.
- Right of correction: You may request correction of inaccurate or incomplete personal data.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
- Right to limit processing: You may request that we cease or limit the processing of your personal data in certain circumstances.
- Right to lodge a complaint: You have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (PDPD) if you believe your rights under PDPA 2010 have been infringed.
To exercise any of these rights, write to [email protected]. We will respond within a reasonable period and in any event within 21 days.
7. External Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend you read their privacy policies before providing any personal data.
8. Children's Privacy
Our programmes and this website are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete it promptly.
9. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or in applicable law. The revised policy will be published on this page with an updated date. Continued use of our website after any update constitutes acceptance of the revised policy. For material changes, we will notify enrolled programme participants by email.
10. Contact Us
For any questions about this policy or about how we handle your personal data, please contact:
Damai Pelita — Data Controller