Privacy Policy

This Privacy Policy describes how Pennyark ("we", "us", or "our") collects, uses, stores, and protects personal data submitted through our website at pennyarka.info. We are committed to handling your personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010).

By using our website or submitting an enquiry, you acknowledge that you have read and understood this policy.

1. Data Controller

Pennyark operates from 48 Jalan Imbi, 55100 Kuala Lumpur, Wilayah Persekutuan. For any privacy-related questions, you may contact us at [email protected] or by calling +60 3-2142 7836.

2. Personal Data We Collect

We collect the following categories of personal data:

• Identity data: Full name as provided in enquiry forms or enrolment submissions.
• Contact data: Email address and phone number.
• Payment data: Bank reference numbers and transaction identifiers provided for course payment processing. We do not store full card details on our systems.
• Usage data: Standard server logs including IP address, browser type, pages visited, and visit duration. This data is collected automatically when you access our website.
• Cookie data: Preferences and consent choices stored locally. Please refer to our Cookie Policy for details.

3. How We Use Your Personal Data

We use collected personal data for the following purposes:

• To respond to course enquiries and communicate enrolment information.
• To process and confirm programme registrations and payments.
• To send administrative communications relating to your enrolment, such as schedule reminders and materials access.
• To maintain records required for our internal administration and accounting.
• To improve the content and functionality of our website based on aggregated usage data.
• To comply with applicable legal and regulatory obligations.

We do not use your personal data to sell to third parties or for purposes unrelated to financial education services.

4. Legal Basis for Processing

Under the PDPA 2010, we process your personal data based on the following grounds:

• Consent: Where you have voluntarily submitted your details through our contact or enrolment forms.
• Contractual necessity: Where processing is required to deliver the programme you have enrolled in.
• Legal obligation: Where we are required by law to retain or disclose certain records.
• Legitimate interests: For general website operation, security monitoring, and service improvement, where these interests do not override your rights.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your data with:

• Service providers: Third-party platforms that help us operate our website and process payments, bound by confidentiality and data protection agreements.
• Analytics providers: Aggregated, anonymised data may be shared with analytics tools to help us understand website usage patterns.
• Regulatory authorities: Where we are legally required to disclose information to government agencies or regulatory bodies.

Any third party who receives your data is contractually required to handle it in a manner consistent with applicable Malaysian data protection law.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Enrolment and payment records are retained for a minimum of seven years for accounting and compliance purposes. Enquiry data from individuals who did not proceed with enrolment is deleted within twelve months of the last interaction.

7. Cookies and Tracking

Our website uses cookies and similar technologies. Some are necessary for the site to function; others help us understand how visitors use the site. You may manage your cookie preferences at any time. Please see our Cookie Policy for a full breakdown of the cookies we use.

8. Your Rights Under the PDPA 2010

As a data subject under Malaysian law, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Withdraw consent for processing where consent was the basis for collection.
• Request that we limit or cease using your data for direct marketing purposes.
• Lodge a complaint with the relevant authority if you believe your rights have been infringed.

To exercise any of these rights, please contact us in writing at [email protected]. We will respond within a reasonable timeframe and no later than as required under applicable law.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include secure server configurations, access controls, and data handling policies for our staff. While we take care to protect your information, no method of transmission over the internet is entirely without risk.

10. Third-Party Links

Our website may contain links to external resources for reference purposes. We are not responsible for the privacy practices of external websites. We encourage you to review the privacy policies of any third-party site you visit.

11. Children's Privacy

Our programmes and website are directed at adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal data through our website, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "last updated" date at the top of this page. Continued use of our website after changes are posted constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please reach out to us:

• Email: [email protected]
• Phone: +60 3-2142 7836
• Post: Pennyark, 48 Jalan Imbi, 55100 Kuala Lumpur, Wilayah Persekutuan

Office hours: Monday to Friday, 9:00 AM – 6:00 PM; Saturday 10:00 AM – 2:00 PM.