Privacy Policy

1. Introduction

Belanjo ("we", "us", "our") is committed to protecting the personal data of every person who interacts with our website and programmes. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you hold under the Personal Data Protection Act 2010 (PDPA) of Malaysia.

If you have any questions about this Policy, please contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, and phone number when you submit an enquiry via our contact form.
• Enrolment data: contact and payment details when you register for a programme.
• Usage data: anonymised data about how pages on our website are used, collected via analytics cookies (only if you consent).
• Correspondence: emails or messages you send to us directly.

We collect data only when you actively provide it or when you browse our website and have consented to analytics cookies.

3. How We Use Your Data

• To respond to your enquiry and provide information about our programmes.
• To administer your enrolment, process payments, and communicate session details.
• To send occasional updates about new cohorts or programme changes (only if you have consented or enrolled with us).
• To improve our website and programme content using anonymised analytics data.
• To comply with legal obligations under Malaysian law.

4. Legal Basis for Processing

Under the PDPA 2010 and general data protection principles, we process your personal data on the following bases:

• Consent: for marketing communications and analytics cookies.
• Contract performance: to deliver the programme you have enrolled in.
• Legitimate interest: to respond to enquiries and manage our day-to-day operations.
• Legal obligation: for record-keeping required under Malaysian commercial law.

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this Policy. Enquiry data is kept for up to twelve months. Enrolment records are retained for seven years to comply with Malaysian financial and commercial record-keeping requirements. You may request deletion of your data at any time (see Section 9).

6. Data Sharing

We do not sell or rent your personal data to any third party. We may share data with:

• Payment processors for handling programme fees securely.
• Analytics providers (e.g. Google Analytics) on an anonymised basis, if you have consented to analytics cookies.
• Government authorities if required by Malaysian law.

7. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), access controls on internal systems, and regular review of our data handling practices. No transmission over the internet is completely secure; we take all reasonable steps but cannot warrant absolute security.

8. Cookies

Our website uses cookies. Essential cookies are required for basic site functionality and cannot be turned off. Optional analytics and preference cookies are only set with your consent. You can manage your cookie preferences at any time via our Cookie Policy page.

9. Your Rights

Under the PDPA 2010 and applicable data protection principles, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (where not subject to legal retention requirements).
• Withdraw consent to marketing communications or analytics cookies at any time.
• Lodge a complaint with Malaysia's Personal Data Protection Commissioner if you believe your rights have been breached.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Children's Privacy

Our programmes and website are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently received data from a minor, please contact us and we will delete it promptly.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

12. Changes to This Policy

We may update this Policy from time to time. The updated version will be posted on this page with a revised "last updated" date. Continued use of our website after a change is published constitutes acceptance of the updated Policy.