Privacy Policy

1. Data We Collect

When you use our website or enquire about our programmes, we may collect the following personal data:

• Full name and preferred contact name
• Email address
• Phone number (if provided)
• Enquiry details submitted via our contact form
• Technical data: IP address, browser type, pages visited (via analytics cookies if consented)

2. How We Collect Data

We collect personal data through:

• The contact/enquiry form on our website
• Email correspondence initiated by you
• Enrolment processes for our programmes
• Cookies and website analytics (where consent has been given)

3. Legal Basis for Processing

Under the PDPA 2010, we process personal data on the following grounds:

• Consent — when you submit an enquiry form or opt in to communications
• Contract performance — when you enrol in a programme and we need your data to administer it
• Legitimate interests — for general website security and improving our services

4. How We Use Your Data

• To respond to your enquiries
• To administer programme enrolment and delivery
• To send programme-related communications (schedules, materials, support)
• To improve our website and services through anonymised analytics
• To comply with applicable legal requirements

We do not use your data for automated decision-making or profiling.

5. Data Retention

Enquiry data is retained for 12 months unless an enrolment follows, in which case data is retained for the duration of the programme plus 36 months thereafter for support and legal purposes. Analytics data is retained in anonymised form only. You may request deletion at any time (see Section 9).

6. Data Sharing

We do not sell personal data. We may share data with:

• Service providers who support our website operations (hosting, email delivery) — under data processing agreements
• Analytics platforms (Google Analytics) if cookie consent has been provided
• Legal or regulatory authorities where required by law

No participant data is shared with financial product providers, advertisers, or third-party marketers.

7. Data Protection Measures

• HTTPS encryption across the website
• Access to participant data restricted to relevant staff only
• Regular internal review of data handling practices
• Secure email systems for programme communications

8. Cookies

Our website uses cookies for essential functionality and, with your consent, for analytics purposes. See our Cookie Policy for full details on what cookies we use and how to manage your preferences.

9. Your Rights Under PDPA 2010

As a data subject under Malaysia's PDPA, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent for processing (where consent was the basis)
• Request deletion of your personal data (subject to legal obligations)
• Object to processing for direct marketing purposes

To exercise any of these rights, email privacy@morathsx. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their own policies.

11. Children's Privacy

Our programmes and website are intended for adults aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has submitted data to us, contact privacy@morathsx and we will remove it promptly.

12. Policy Updates

We may update this policy periodically. Material changes will be communicated via a notice on our website. Continued use of the site after an update constitutes acceptance of the revised policy.

13. Contact

For any privacy-related enquiries: