Privacy Policy

1. About Us (Data Controller)

Business Name: Pursely
Address: Lot 12, Jalan Utara, 46200 Petaling Jaya, Selangor, Malaysia
Privacy Contact: [email protected]

If you have questions about how we handle your personal data, please contact us at [email protected] and we will respond within five working days.

2. Personal Data We Collect

We collect only the data needed to operate our programmes and respond to enquiries. This includes:

a. Information you provide directly

• Full name and email address (required for enrolment and contact forms)
• Phone number (optional — provided at your discretion)
• Enquiry content submitted via our contact form
• Programme preferences or questions you share with us

b. Information collected automatically

• Browser type and device information
• Pages visited and time spent on site (via analytics cookies, if accepted)
• IP address and approximate location (country/region level)

c. Legal basis for processing

We process your personal data under one or more of the following bases: (i) your consent, (ii) performance of a contract (enrolment in a programme), or (iii) our legitimate interest in operating and improving our educational services.

3. How We Use Your Information

• To process your enrolment and deliver programme materials
• To respond to enquiries submitted via our contact form
• To send programme-related communications (session reminders, updates to materials)
• To send optional marketing communications — only if you have opted in
• To improve our website and programmes using aggregated, non-identifiable analytics
• To comply with legal and regulatory obligations in Malaysia

We do not use your personal information to make automated decisions that significantly affect you.

Data Retention

We retain personal data for no longer than necessary: enrolment records are kept for three years after programme completion; contact form submissions are retained for 12 months; analytics data is retained as per the third-party analytics provider's terms.

4. Data Sharing

We do not sell or rent personal data to third parties. We may share data in the following limited circumstances:

• Service providers: Hosting, email delivery, and analytics platforms that process data on our behalf under data processing agreements.
• Legal requirements: Where disclosure is required by Malaysian law or a competent authority.
• Business continuity: In the event of a merger or acquisition, participant data may be transferred to a successor organisation, with notice provided to affected individuals.

Third-Party Services We Use

Our website may use analytics tools (such as Google Analytics) and email delivery services. These services have their own privacy policies, and we encourage you to review them. We configure these tools to minimise data collection where possible.

5. How We Protect Your Data

• Our website uses HTTPS encryption for all data transmitted between your browser and our servers.
• Access to personal data is restricted to Pursely team members who need it to perform their duties.
• We review our data handling practices periodically to identify and address potential risks.
• In the event of a data breach that affects your rights, we will notify you and the relevant authority as required under the PDPA within a reasonable timeframe.

6. Cookies

We use cookies to operate our website and, with your consent, to run analytics that help us understand how visitors use the site. Strictly necessary cookies (required for basic website functionality) are always active. All other cookies require your consent.

For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

7. Your Rights Under Malaysia's PDPA

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data held by Pursely:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that inaccurate or incomplete data be corrected.
• Withdrawal of consent: Withdraw consent for marketing communications at any time.
• Objection: Object to processing for direct marketing purposes.
• Erasure: Request deletion of your data where we no longer have a valid reason to retain it.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 calendar days. We may need to verify your identity before processing the request.

If you are not satisfied with how we have handled your request, you may contact the Department of Personal Data Protection Malaysia (JPDP) at pdp.gov.my.

8. Links to Other Websites

Our website may contain links to external sites — for example, to government resources like the EPF website or PTPTN. We are not responsible for the privacy practices of those websites. We encourage you to review their privacy policies before providing any personal information.

9. Minimum Age

Our programmes are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact [email protected] and we will promptly delete the information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If changes are material, we will notify enrolled participants by email. Continued use of our website or programmes after changes are posted constitutes acceptance of the revised policy.

11. Contact for Privacy Matters

For any questions, requests, or concerns about this policy or how we handle personal data: