Legal documents
Privacy Policy
Last updated: 1 January 2025 · Effective date: 1 January 2025
This Privacy Policy explains how Lestari Money (referred to as "we," "us," or "our") collects, uses, discloses, and protects your personal data when you use our website at lestarim or enrol in any of our educational programmes. It is prepared in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
1. Who We Are
Lestari Money is a Malaysian financial education provider offering courses, webinars, and consultations focused on property investment for individuals aged 40 and above. Our principal place of business is:
Lestari Money
Lebuh Chulia 76
10200 George Town, Penang
Malaysia
For any privacy-related enquiries, you may contact us at [email protected] or call +60 19-470 6283.
2. Personal Data We Collect
We may collect the following categories of personal data:
- Contact details: Name, email address, telephone number, and postal address.
- Enquiry and correspondence data: Messages you send via our contact form, emails, or telephone calls.
- Programme enrolment data: Course preferences, preferred session times, and responses to pre-enrolment questions.
- Payment data: Transaction references and payment confirmation records. We do not store full card or bank account numbers.
- Usage and technical data: IP address, browser type, pages visited, session duration, and referring URLs, collected via cookies and analytics tools.
- Marketing preferences: Whether you wish to receive updates, newsletters, or information about new programmes.
We do not ask for or store sensitive personal data such as national identification numbers, health records, or financial account credentials beyond what is necessary to process a programme enquiry.
3. How We Collect Your Data
We collect personal data through the following means:
- Contact and enquiry forms on our website.
- Telephone calls and email correspondence initiated by you.
- Programme enrolment and registration processes.
- Attendance at our webinars, seminars, or consultation sessions.
- Cookies and similar tracking technologies on our website (see section 10).
- Referrals from third parties, such as professional associations, where you have consented to be referred.
4. How We Use Your Data
We use the personal data we collect for the following purposes:
- To respond to your enquiries and provide information about our programmes.
- To process your enrolment and administer course delivery, including scheduling and materials.
- To arrange and confirm consultations with licensed advisors.
- To send you programme-related communications, reminders, and updates.
- To send you marketing communications about our courses and educational resources, where you have consented or where we have a legitimate interest in doing so.
- To comply with legal obligations under Malaysian law.
- To improve our website and course offerings through aggregated, anonymised analytics.
We will not use your personal data for purposes incompatible with those listed above without first obtaining your consent.
5. Legal Basis for Processing
Under the PDPA 2010, we process your personal data on the following bases:
- Consent: Where you have given us clear consent to process your data for a specific purpose, such as receiving marketing communications.
- Contractual necessity: Where processing is necessary to fulfil our obligations under a programme enrolment agreement.
- Legitimate interests: Where we have a legitimate business reason to process your data that does not override your rights, such as improving our services or managing our business operations.
- Legal obligation: Where we are required to process data to comply with Malaysian law.
6. Disclosure to Third Parties
We do not sell, rent, or trade your personal data to any third party. We may share your data with:
- Licensed advisors and educators: Registered estate agents, licensed financial planners, and registered valuers engaged to deliver programme consultations, to the extent necessary to arrange and conduct your sessions.
- Service providers: Third-party platforms that support our operations, including website hosting, email delivery, video conferencing, and payment processing. These providers are required to process your data only on our instructions and in accordance with applicable law.
- Analytics providers: Google Analytics and similar tools, which receive anonymised usage data about how visitors interact with our website. Please see our Cookie Policy for more detail.
- Regulatory or legal authorities: Where we are required to do so by law, court order, or regulatory direction.
Where we engage third-party service providers, we take reasonable steps to ensure they maintain appropriate data protection standards.
7. International Data Transfers
Some of our third-party service providers, including analytics and communication platforms, may process your data outside of Malaysia. Where such transfers occur, we take steps to ensure appropriate safeguards are in place, including relying on providers that maintain internationally recognised data protection standards.
8. How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by Malaysian law. Our general retention periods are:
- Enquiry and contact records: Up to 24 months from last contact, unless you enrol in a programme.
- Programme enrolment and participation records: Up to 7 years following completion of the programme, in accordance with standard business record-keeping requirements.
- Payment and transaction records: Up to 7 years, in line with financial record obligations.
- Marketing preferences: Until you withdraw consent or request removal.
When your data is no longer required, we securely delete or anonymise it.
9. Your Rights Under the PDPA
Under the Personal Data Protection Act 2010, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that we correct inaccurate or incomplete personal data.
- Withdrawal of consent: Withdraw consent for marketing communications at any time, without affecting the lawfulness of processing based on consent before withdrawal.
- Restriction of processing: Request that we limit how we use your data in certain circumstances.
- Enquire about use: Request information about the purposes for which your data is used and who it has been shared with.
To exercise any of these rights, please contact us in writing at [email protected]. We will respond within a reasonable period, and no later than 21 days where required by law. Some requests may be subject to statutory fees under the PDPA.
11. Children's Privacy
Our programmes and website are directed at adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us promptly and we will take steps to delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or programmes following any update constitutes acceptance of the revised policy.
13. How to Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please reach us through any of the following:
- Email: [email protected]
- Telephone: +60 19-470 6283
- Post: Lestari Money, Lebuh Chulia 76, 10200 George Town, Penang, Malaysia
We will handle all enquiries with care and respond within a reasonable timeframe.