Privacy Policy

1. Introduction

Cendekia Mekar ("we", "us", "our") is committed to handling personal data responsibly. This policy explains what data we collect, how we use it, how we protect it, and what rights you have in relation to it. It applies to all personal data collected through our website, programme enquiry forms, and enrolment processes.

We operate under the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs the collection, processing, and protection of personal data by commercial organisations. Our registered address is 81 Jalan Bangsar, 59100 Kuala Lumpur.

Questions about this policy may be directed to [email protected].

2. Data We Collect

We collect personal data in the following circumstances:

• Enquiry and contact forms: Name, email address, phone number (optional), and any information you include in your message.
• Programme enrolment: Name, email address, phone number, and relevant background information needed to place you in an appropriate cohort.
• Website analytics: If you have consented to analytics cookies, we may receive aggregated usage data including pages visited and session duration. This does not identify you individually.
• Correspondence: Records of emails or other communications you send us.

Legal basis: We process enquiry and enrolment data on the basis of your consent (when you submit a form) and to perform a contract (when enrolment is confirmed). Analytics data is processed on the basis of consent through the cookie preference mechanism on our website.

Retention: Enquiry data is held for up to 24 months. Enrolment and programme participation records are retained for up to 7 years for administrative and legal compliance purposes. Analytics data is retained in aggregated form only.

3. How We Use Your Data

• To respond to enquiries about programmes and availability
• To process and confirm programme enrolments
• To communicate session schedules, materials, and updates to enrolled participants
• To send post-programme feedback requests and optional follow-up information
• To maintain administrative records as required by Malaysian law
• To improve our website and programmes through anonymised usage analysis

We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties. We do not share personal data with financial product providers or any commercial partner.

If you have submitted an enquiry and have not enrolled, we may send you one follow-up email after 30 days to confirm whether you have further questions. You may opt out of this at any time by contacting us.

4. Data Protection

We maintain appropriate technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. These include:

• Encrypted data transmission (HTTPS) for all web-based data collection
• Access controls limiting data access to staff with a legitimate need
• Regular review of data handling procedures
• Prompt response to data breach incidents, including notification to affected individuals and the relevant authority under the PDPA where required

Financial information discussed in programme sessions is kept confidential and is not stored in digital systems. Programme notes and summaries are held securely and access is limited to the relevant facilitator.

5. Cookies

Our website uses cookies to support its operation and, where you consent, to understand how visitors use the site. Essential cookies are necessary for the website to function and cannot be disabled. Optional cookies (analytics, preferences) are only placed if you accept them through the cookie preference control on our homepage.

For full details of the cookies we use, see our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data held by us:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to correct: You may request correction of inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.
• Right to limit processing: In certain circumstances you may request that we restrict how we use your data.
• Right to object: You may object to processing for direct marketing purposes.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. In Malaysia, complaints about data handling practices may be referred to the Personal Data Protection Commissioner under the Ministry of Communications and Digital.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We recommend reading the privacy policy of any external site you visit.

8. Children

Our programmes and services are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that data from a minor has been submitted, it will be deleted promptly.

9. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last revised. Material changes will be communicated by a notice on our homepage for a period of 30 days.

10. Contact

For any questions or requests relating to this policy: