Privacy Policy

1. Introduction

Fintua ("we", "us", "our") is a training provider based in Melaka, Malaysia, offering spreadsheet and financial tools education. This Privacy Policy explains how we collect, use, store and protect your personal data when you interact with our website or enquire about our services.

We are committed to handling your information with care. We do not sell personal data to third parties, and we collect only what is necessary for the purposes described below. If you have any questions about this policy, please contact us at [email protected].

This policy applies to data collected through the Fintua website located at fintuagr.cyou and through direct communications (phone, email, in-person enquiries).

2. What Personal Data We Collect

We may collect the following categories of personal data:

• Identity data: your name (first name and/or surname)
• Contact data: email address and telephone number
• Enquiry data: the message content you submit through our contact form
• Technical data: IP address, browser type, pages visited, and time spent — collected via analytics tools
• Cookie data: preferences stored locally in your browser (see Section 6)

We collect this data when you submit our contact form, send us an email directly, call our office, or visit our website. We do not collect sensitive personal data such as financial account details, identification documents, or health information.

We retain contact enquiry data for up to 24 months from the date of last contact. Website analytics data is retained for up to 14 months. You may request earlier deletion at any time (see Section 7).

3. How We Use Your Personal Data

We use your personal data for the following purposes:

• Responding to enquiries about our courses and workshop sessions
• Administering course registrations and communicating session details
• Sending information you have requested about upcoming sessions (not unsolicited marketing)
• Improving our website and course materials based on usage patterns
• Complying with applicable legal obligations in Malaysia

We process your data on the following legal bases: consent (for optional communications and cookies), legitimate interest (for responding to your direct enquiry and improving our services), and contractual necessity (for administering a course you have enrolled in).

We do not use your data for profiling, automated decision-making, or targeted advertising.

4. Data Sharing and Third Parties

We do not sell your personal data. We may share limited data with the following categories of third parties only where necessary:

• Website hosting and infrastructure providers — for operating the website
• Analytics services — for understanding website usage in aggregate (data is anonymised where possible)
• Communication tools — for sending email responses to your enquiries

Any third parties we engage are required to handle data securely and in accordance with applicable data protection requirements. We do not share your data with training partners, advertisers or unrelated organisations.

If we are required by law to disclose your data (for example, in response to a court order or lawful authority request in Malaysia), we will do so and will notify you where permitted.

5. Data Protection Measures

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These measures include:

• Encrypted connections (HTTPS) for data transmitted through our website
• Access controls limiting who within Fintua can access personal data
• Secure storage of contact and registration records
• Regular review of our data handling practices

In the event of a data breach that may affect your rights, we will notify affected individuals as soon as reasonably practicable in line with applicable requirements under the Personal Data Protection Act 2010 (PDPA) of Malaysia.

6. Cookies

Our website uses cookies to maintain basic functionality and, where you have consented, to understand how the site is used. We use the following types of cookies:

• Essential cookies: necessary for the website to function — cannot be disabled
• Analytics cookies: used to understand page visits and usage patterns — optional, requires consent
• Preference cookies: used to remember your cookie consent choice — optional

You can manage your cookie preferences at any time via our Cookie Policy page, which includes functional toggle controls. You can also manage cookies through your browser settings.

7. Your Rights Under Malaysian Data Protection Law

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights in relation to your personal data:

• Right of access: you may request a copy of the personal data we hold about you
• Right of correction: you may request that inaccurate data be corrected
• Right to withdraw consent: where we process data based on your consent, you may withdraw it at any time
• Right to limit processing: you may request that we stop using your data for certain purposes
• Right to raise a complaint: if you believe we have mishandled your data, you may contact the Department of Personal Data Protection Malaysia (JPDP)

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days. We may need to verify your identity before processing the request.

8. External Links

Our website may contain links to external websites (such as Google Maps). This Privacy Policy does not apply to those external sites. We are not responsible for the privacy practices of third-party websites and encourage you to read their privacy policies separately.

9. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently received data from a minor, please contact us and we will arrange for that data to be deleted promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the revised version will be published on this page with an updated date at the top. Continued use of our website or services after changes are posted constitutes your acknowledgement of the revised policy. We recommend checking this page periodically.