Hikmah Bayu is committed to handling your personal information with care and discretion. We collect only what is necessary, retain it only for as long as is needed, and do not share it with third parties for commercial purposes. This policy is written to be read, not merely displayed.
01
Introduction and Scope
This Privacy Policy applies to all personal data collected through the Hikmah Bayu website at hikmahbayu.pro, through our contact form, by telephone, and in the course of delivering our financial education programmes. It applies to enquiries, enrolled participants, and visitors to our site.
Hikmah Bayu operates from 32 Lebuh Cintra, 10100 George Town, Penang, Malaysia. We act as the data controller for all personal information described in this policy. For questions about this policy, contact us at [email protected].
02
Personal Data We Collect
We collect personal data in the following ways and categories:
Information you provide directly
- Full name, when you complete our enquiry or enrolment form
- Email address and telephone number, for correspondence and programme coordination
- Your message or enquiry content, to understand your circumstances and respond appropriately
- Programme preferences and any details you share in consultation
Information collected automatically
- Browser type, device type, and operating system
- Pages visited, time spent on pages, and referral source
- IP address (anonymised where possible)
- Cookie identifiers, where consent is given (see Section 6)
Legal basis for processing
- Consent — for optional analytics and marketing cookies
- Contractual necessity — to deliver programmes you have enrolled in
- Legitimate interest — to respond to enquiries, improve our website, and protect our services
- Legal obligation — where required under Malaysian law, including the Personal Data Protection Act 2010 (PDPA)
03
How We Use Your Information
- To respond to your enquiry and provide information about our programmes
- To process enrolment and manage your participation in a programme
- To send programme-related materials, written summaries, and session reminders
- To improve the design and content of our website using anonymised analytics data
- To comply with our obligations under Malaysian law
- To contact you about changes to our programmes or this policy, where relevant
We do not use your personal data for automated decision-making or profiling. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.
04
Data Retention
| Data Type | Retention Period |
|---|---|
| Enquiry form submissions (unenrolled) | 12 months from date of enquiry |
| Programme enrolment records | 7 years from programme completion |
| Financial transaction records | 7 years (statutory requirement) |
| Website analytics data | 26 months (anonymised after 14 months) |
05
Data Sharing and Third Parties
We share personal data only where necessary and always under appropriate safeguards. The following third-party services may process data on our behalf:
- Google Analytics — anonymised website usage statistics
- Meta (Facebook) Pixel — website visit tracking for advertising purposes, where consent is given
- Microsoft Bing Ads — conversion tracking, where consent is given
- Email service providers — for sending programme correspondence
We do not transfer personal data outside Malaysia except where a third-party service operates infrastructure abroad, in which case data is subject to that provider's own adequacy safeguards. We will notify you if this changes in a material way.
06
Cookies
Our website uses cookies to support basic functionality and, with your consent, to collect anonymised usage data. Cookies are small text files stored on your device.
- Essential cookies — required for the site to function; cannot be disabled
- Analytics cookies — help us understand how visitors use the site; optional
- Marketing cookies — used for advertising measurement; optional
- Preference cookies — remember your cookie choices; optional
You may adjust your cookie preferences at any time via our Cookie Policy page.
07
Data Protection and Security
- All data submitted through our website is transmitted over HTTPS (TLS encryption)
- Access to personal data is restricted to staff who need it to perform their role
- We conduct periodic reviews of the data we hold and remove records that are no longer required
- In the event of a data breach that poses a risk to your rights, we will notify you and, where required, the relevant authority within the timeframe prescribed by Malaysian law
08
Your Rights Under Malaysian Law
Under the Personal Data Protection Act 2010 (PDPA) and related regulations, you have the following rights with respect to your personal data:
Right of Access
Request a copy of the personal data we hold about you.
Right of Correction
Ask us to correct inaccurate or incomplete data.
Right to Withdraw Consent
Withdraw consent for optional processing at any time without penalty.
Right to Prevent Processing
Object to use of your data for marketing or other non-essential purposes.
To exercise any of these rights, write to us at [email protected]. We will respond within 21 days. If you are not satisfied with our response, you may raise a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.
09
Links to Other Websites
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you read their respective privacy policies. This policy applies only to hikmahbayu.pro.
10
Age Restriction
Our programmes and website are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data through our site, please contact us and we will remove it promptly.
11
Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or in applicable law. When we do, we will update the "Last Updated" date at the top of this page. For material changes that affect how we use your data, we will contact enrolled participants directly. Continued use of our website after a policy update constitutes acceptance of the revised terms.
12
Contact for Data Enquiries
Hikmah Bayu
32 Lebuh Cintra, 10100 George Town, Penang, Malaysia