Privacy Policy

Introduction

Arbor Capital is committed to protecting the privacy and personal information of individuals who participate in our financial education programs or inquire about our services. This privacy policy explains how we collect, use, store, and protect your personal data in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By submitting personal information through our website or program enrollment forms, you consent to the collection, use, and disclosure of that information as described in this policy. We encourage you to read this policy carefully and contact us at [email protected] with any questions.

Information We Collect

Personal Information

We collect personal information that you voluntarily provide when contacting us, enrolling in programs, or using our website. This includes:

• Name and contact details (email address, phone number)
• Mailing address for program materials delivery
• Financial situation information shared during consultations or program sessions (only with your explicit consent)
• Payment information processed through secure third-party payment processors
• Communication preferences and program enrollment history

Technical Information

When you visit our website, we automatically collect certain technical information, including:

• IP address and browser type
• Pages visited and time spent on our website
• Referring website addresses
• Device information and operating system

How We Use Your Information

We use collected information for the following purposes:

• Program Delivery: To provide financial education services you have enrolled in, including session scheduling, materials distribution, and individual consultations
• Communication: To respond to inquiries, send program updates, and provide quarterly follow-up sessions for alumni
• Service Improvement: To analyze program effectiveness, gather feedback, and enhance our educational content
• Legal Compliance: To maintain records as required by Malaysian financial education regulations and tax requirements
• Website Optimization: To understand how visitors use our website and improve functionality

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: You have explicitly agreed to our collection and use of your personal information
• Contract Performance: Processing is necessary to fulfill our obligations under program enrollment agreements
• Legitimate Interest: We have legitimate business interests in improving our services and maintaining records, balanced against your privacy rights
• Legal Obligation: We must retain certain information to comply with Malaysian tax and business regulations

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share limited information with:

• Service Providers: Payment processors, email service providers, and scheduling platforms that help us deliver our services. These providers are contractually bound to protect your information.
• Legal Requirements: Government authorities when required by Malaysian law or in response to valid legal processes
• Business Transfers: In the unlikely event of a merger or acquisition, personal data may be transferred to the acquiring entity with continued protection under this policy

We do not share participant information with financial institutions, investment platforms, insurance companies, or any entities that might use it for marketing purposes.

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encrypted storage for participant financial information
• Secure communication channels for email correspondence
• Access controls limiting staff exposure to personal data
• Regular security audits and software updates
• Physical security measures for paper records at our George Town office
• Staff training on data protection requirements

Data Retention

We retain personal information for different periods depending on the type of data and purpose:

• Inquiry Information: 12 months from last contact if no enrollment occurs
• Program Participant Records: 7 years from program completion to comply with Malaysian business record requirements
• Financial Records: 7 years as required by Malaysian tax regulations
• Marketing Communications: Until you unsubscribe or request deletion

After retention periods expire, we securely delete or anonymize personal information.

Cookies and Tracking

Our website uses cookies to enhance user experience and analyze site usage. We use:

• Essential Cookies: Required for basic website functionality
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
• Preference Cookies: Remember your choices for improved experience

You can manage cookie preferences through our Cookie Policy page or your browser settings.

Your Rights

Under Malaysia's Personal Data Protection Act, you have the following rights:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements
• Right to Data Portability: Receive your personal data in a structured, commonly used format
• Right to Withdraw Consent: Withdraw previously given consent for data processing
• Right to Object: Object to processing based on legitimate interests
• Right to Restrict Processing: Request limitation of how we process your data

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days as required by PDPA.

Children's Privacy

Our programs are designed for adults aged 18 and above. We do not knowingly collect personal information from individuals under 18. If we become aware that we have inadvertently collected information from a minor, we will promptly delete it.

International Data Transfers

Your personal information is primarily stored on servers located in Malaysia. Some service providers (such as email platforms) may store data on international servers. In such cases, we ensure appropriate safeguards are in place to protect your information in accordance with Malaysian data protection requirements.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated via email to enrolled participants and posted prominently on our website. The "Last Updated" date at the top of this policy indicates when it was most recently revised.

Contact Information

For questions about this privacy policy, to exercise your rights, or to raise concerns about how we handle your personal information:

Governing Law

This privacy policy is governed by the laws of Malaysia. Any disputes arising from this policy or our data practices will be subject to the exclusive jurisdiction of Malaysian courts.