LEGAL
Privacy Policy
Last Updated: 14 April 2025 | Effective: 14 April 2025
Introduction
Feldstone Education Sdn Bhd ("Feldstone", "we", "us", or "our") is committed to protecting the personal data of individuals who use our website and enrol in our courses. This Privacy Policy explains what data we collect, how we use it, and the rights available to you under the Personal Data Protection Act 2010 (PDPA) of Malaysia.
If you have questions about this policy, you may contact us at [email protected] or at our office at 27 Jalan Sultan Ismail, 50250 Kuala Lumpur, Malaysia.
What Data We Collect
We collect personal data in the following ways:
- Contact and enquiry forms on this website (name, email address, telephone number, message content)
- Course enrolment (name, email address, telephone number, payment records)
- Website usage data collected through cookies and analytics tools (see Section 07)
- Correspondence by email or telephone when you contact us directly
We do not collect sensitive personal data such as identity card numbers, health information, or financial account details beyond what is necessary to process a payment.
Retention period: Enrolment and payment records are retained for seven years as required by Malaysian accounting regulations. Contact enquiry data is retained for up to two years or until you request deletion. Website analytics data is retained in aggregate form.
How We Use Your Data
We use personal data for the following purposes:
- To respond to enquiries submitted through our contact form
- To process course enrolments and issue receipts
- To provide access to enrolled course materials and updates
- To send course-related communications (access links, module updates, addenda notifications)
- To improve our website and understand how it is used
- To comply with legal obligations, including financial record-keeping
Legal basis: Data is processed on the basis of your consent (enquiry forms), contractual necessity (enrolment), and legitimate interest (website analytics). You may withdraw consent at any time by contacting us.
We do not use your data for automated decision-making. We do not send unsolicited marketing communications. Any course-related communications you receive will be directly related to a course you have enrolled in.
Data Sharing with Third Parties
We do not sell personal data to any party. We share data only in the following limited circumstances:
- Payment processing: When you pay for a course, your payment details are processed by our payment gateway provider. We do not store card numbers on our systems.
- Hosting and platform services: Our website and course platform are hosted by third-party service providers operating under data processing agreements. These providers do not use your data for their own purposes.
- Legal requirements: We may disclose personal data to regulatory authorities if required by Malaysian law or a lawful order.
All third-party processors we engage are required to handle data in accordance with PDPA requirements.
Data Protection Measures
- This website uses HTTPS encryption for all data transmission
- Access to personal data is restricted to Feldstone staff with a legitimate need to process it
- Our hosting provider operates servers in facilities with physical and logical security controls
- In the event of a data breach affecting your rights and freedoms, we will notify the relevant authorities and affected individuals as required under PDPA
- We conduct periodic reviews of our data handling practices
Your Rights Under PDPA 2010
As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights:
- Right of access: You may request a copy of the personal data we hold about you.
- Right of correction: You may request that inaccurate or incomplete data be corrected.
- Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
- Right to object: You may object to processing carried out on the basis of legitimate interest.
- Right to erasure: You may request deletion of your personal data, subject to any legal retention obligations.
To exercise any of these rights, write to [email protected]. We will respond within thirty days.
If you believe your rights have not been respected, you may lodge a complaint with the Department of Personal Data Protection Malaysia (PDPD).
Cookies and Analytics
This website uses cookies to support basic functionality and to understand how the site is used. For a full explanation of the cookies we use and your options, please see our Cookie Policy.
We use an analytics tool to track aggregate website usage (pages visited, time on page, device type). This data is not linked to identifiable individuals.
Children's Privacy
Our courses and services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from a minor, we will delete it promptly.
External Links
Our website may contain links to external websites, including government portals and regulatory bodies. Feldstone is not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal data.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, the "Last Updated" date at the top of this page will be revised. If changes are material, we will notify enrolled participants by email. Your continued use of the website after a policy update constitutes acceptance of the revised terms.
Contact for Privacy Matters
All privacy-related enquiries should be directed to:
Feldstone Education Sdn Bhd
27 Jalan Sultan Ismail, 50250 Kuala Lumpur, Malaysia
Email: [email protected]
Telephone: +60 3-2148 6357