Privacy Policy

1. Introduction

Teratai Jauhari ("we", "us", "our") is committed to protecting the personal data of all individuals who interact with our website and our educational programmes. This policy explains what personal data we collect, how we use it, how long we retain it, and what rights you have over your information.

We are the data controller for personal data processed in connection with our services. This policy applies to all visitors to our website at terataij.info and all participants in our financial education programmes.

If you have any questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, and phone number, provided when you submit an enquiry form, enrol in a programme, or contact us directly.
• Programme information: The course(s) you have enrolled in, your progress, and any notes taken during advisory sessions.
• Payment information: Payment records are processed through third-party payment services. We do not store full card details.
• Website usage data: Pages visited, time spent on pages, browser type, and device information, collected via cookies and analytics tools (subject to your cookie consent).
• Communications: Emails or messages you send us and our replies.

We collect only the personal data necessary for the stated purpose. We do not collect sensitive financial data beyond what you choose to share with us during advisory sessions.

3. Legal Basis for Processing

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, we process your personal data on the following grounds:

• Consent: For marketing communications and non-essential cookies, where you have explicitly agreed.
• Contract performance: To deliver the educational programme you have enrolled in and manage your enrolment.
• Legitimate interests: For improving our website and services, communicating about your enquiry, and managing our business operations, where these interests are not overridden by your rights.
• Legal obligation: To comply with applicable Malaysian law and regulations.

4. How We Use Your Data

We use your personal data to:

• Respond to enquiries and provide information about our courses
• Process enrolments and manage your programme participation
• Schedule and conduct advisory sessions
• Send programme-related communications (lesson updates, reminders)
• Issue certificates of completion
• Improve the quality of our content and services based on participant feedback
• Send occasional updates about new programmes (if you have opted in)
• Comply with our legal obligations

We do not use your data to make automated decisions that significantly affect you. We do not sell your personal data to any third party.

5. Data Retention

We retain your personal data for the following periods:

• Enquiry records: 12 months from the date of last contact, unless you enrol.
• Participant records: 7 years from the completion of your programme, as required for financial record-keeping obligations under Malaysian law.
• Payment records: 7 years, in line with Malaysian accounting standards.
• Website analytics data: Up to 26 months, consistent with standard analytics retention practices.
• Advisory session notes: For the duration of your programme plus 3 years, then securely deleted.

After the relevant retention period, personal data is securely deleted or anonymised.

6. Data Sharing

We share personal data only in the following limited circumstances:

• Service providers: Third parties who assist us in operating our website and delivering our programmes (e.g., email platform, website hosting, video conferencing software). These providers are bound by data processing agreements and may not use your data for their own purposes.
• Payment processors: Payment transactions are handled by third-party payment gateways who operate under their own privacy policies.
• Legal requirements: Where required by Malaysian law, court order, or to protect the rights and safety of Teratai Jauhari or others.

We do not share your personal data with financial product providers, banks, insurance companies, or any other commercial third parties. This is a firm policy.

7. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, use, or disclosure. These include:

• HTTPS encryption for all website communications
• Access controls limiting staff access to personal data on a need-to-know basis
• Secure storage for physical documents containing personal information
• Regular review of access logs and security practices

In the event of a data breach that is likely to result in risk to you, we will notify you and the relevant authorities as required under applicable Malaysian law.

8. Cookies

We use cookies and similar technologies on our website. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Your Rights

Under the PDPA (Malaysia) and applicable data protection principles, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may ask us to correct inaccurate or incomplete personal data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to limit processing: In certain circumstances, you may ask us to restrict how we use your data.
• Right to object: You may object to processing based on legitimate interests.
• Right to erasure: In certain circumstances, you may request that we delete your personal data.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

11. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Policy Updates

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If the changes are material, we will notify enrolled participants directly. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

13. Contact

For privacy-related enquiries, to exercise your rights, or to raise a concern:

• Email: [email protected]
• Address: Jalan Hang Tuah 19, 75300 Melaka, Malaysia
• Phone: +60 6-283 7619

If you are not satisfied with our response, you have the right to raise a complaint with the Department of Personal Data Protection Malaysia (JPDP).