Legal
Privacy Policy
Last updated: 14 April 2025
Alder House takes the handling of personal information seriously. This policy explains what information we collect from people who enquire about or enrol in our programmes, how we use it, and the rights you have under Malaysian law. We have tried to write this in plain language.
1. Who we are
Alder House is a financial education practice based at Lorong Bayu, No. 22 Bayu Residences, 63000 Cyberjaya, Selangor, Malaysia. We are the data controller for personal information collected through our website and during our programmes.
For data-related enquiries, contact us at: [email protected]
2. What information we collect
Information you give us directly
- Name and email address (from our contact form or programme enrolment)
- Phone number, if you provide one
- Any message content you include in an enquiry
- Financial information shared during sessions — bank statements, pay slips, or other documents you choose to bring
Information collected automatically
- Website usage data through analytics cookies (if you consent)
- Approximate location (country/city) from IP address via analytics tools
- Browser type and device type for website optimisation
3. How we use your information
- To respond to your enquiry and provide information about our programmes
- To manage your enrolment and prepare for your sessions
- To send programme-related communications (session reminders, reading materials)
- To improve the quality of our website and programmes using aggregated analytics data
- To comply with applicable Malaysian law
We do not use your information for unsolicited marketing, and we do not share your information with financial product providers or other commercial third parties.
4. Legal basis for processing
We process your personal data under the Personal Data Protection Act 2010 (PDPA) of Malaysia. Our legal bases are:
- Consent — for analytics cookies and any optional communications you agree to
- Contract performance — for managing your enrolment and session participation
- Legitimate interests — for responding to enquiries and improving our services, where this does not override your privacy rights
5. How we protect your information
- Website data is transmitted over HTTPS
- Session notes and documents are stored in access-controlled systems
- Physical documents shared during sessions are handled only by the facilitator and not retained beyond the engagement unless you request otherwise
- Access to participant records is limited to Alder House staff involved in programme delivery
- We review our data handling practices periodically
In the event of a data breach that affects your rights, we will notify you as required under PDPA 2010.
6. How long we keep your information
- Enquiry form data: up to 12 months if no programme is booked
- Participant records (enrolment, session notes): up to 3 years from last engagement
- Financial documents shared during sessions: not retained after the engagement unless you request otherwise in writing
- Analytics data: as per the analytics provider's retention policy (typically 14–26 months)
7. Cookies
We use cookies on our website. Essential cookies keep the site functioning. Analytics cookies (optional) help us understand how the site is used. Marketing cookies (optional) are not currently active on our site. You can manage your cookie preferences through our Cookie Policy page.
8. Third-party services
We use the following third-party services, which may process some of your data:
- Google Analytics — for website usage analysis (optional, consent-based)
- Email service providers — for delivering session communications
- Video conferencing tools — for video sessions, if you choose this format
We do not sell or share your personal data with advertisers or financial product providers.
9. Your rights under PDPA 2010
Under Malaysia's Personal Data Protection Act 2010, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Withdraw consent for processing at any time (where consent is the legal basis)
- Request deletion of your personal data, subject to legal retention requirements
- Object to certain types of processing
To exercise any of these rights, write to us at [email protected]. We will respond within 21 days. If you are not satisfied with our response, you may raise the matter with Malaysia's Personal Data Protection Department (JPDP).
10. Third-party links
Our website may contain links to other websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.
11. Children's privacy
Our programmes are designed for adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted information to us, please contact us at [email protected] and we will delete it promptly.
12. Changes to this policy
We may update this policy from time to time. The current version will always be available on this page with the date it was last updated. We will notify active programme participants of material changes by email.
13. Contact
For questions about this policy or your personal data:
- Email: [email protected]
- Address: Lorong Bayu, No. 22 Bayu Residences, 63000 Cyberjaya, Selangor