Privacy Policy

1. Introduction

Prism Ledger is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information when you participate in our financial education programs or interact with our website.

We operate under the Personal Data Protection Act 2010 (PDPA) of Malaysia and are committed to maintaining the confidentiality of all participant information.

For questions about this policy, contact us at: [email protected]

2. Information We Collect

2.1 Information You Provide

When you inquire about or enroll in our programs, we collect:

• Full name and contact details (email address, phone number)
• Mailing address for program materials
• Program selection and enrollment information
• Payment information processed through secure third-party payment processors
• Communications with our team

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

• IP address and browser type
• Pages visited and time spent on our site
• Referring website or source
• Device information and operating system

2.3 Program Session Information

During program participation, we may collect:

• Attendance records
• Questions and discussions (with your consent)
• Feedback and evaluation responses
• Progress through program materials

3. How We Use Your Information

3.1 Program Delivery

We use your information to:

• Communicate program details, schedules, and materials
• Provide educational content and support
• Deliver program deliverables (matrices, frameworks, templates)
• Facilitate program sessions and participant discussions

3.2 Administrative Purposes

• Process enrollment and payments
• Maintain attendance records
• Respond to inquiries and support requests
• Send important notifications about program changes

3.3 Service Improvement

• Analyze program effectiveness and participant satisfaction
• Improve curriculum and delivery methods
• Develop new educational offerings
• Maintain quality standards

4. Legal Basis for Processing

Under the PDPA, we process your personal data based on:

• Consent: You provide explicit consent when enrolling in programs or submitting inquiries
• Contract Performance: Processing is necessary to deliver the educational services you've requested
• Legitimate Interest: We have legitimate business interests in improving our programs and maintaining participant records
• Legal Obligation: We maintain records as required by Malaysian law

5. Data Sharing and Disclosure

5.1 Service Providers

We share information with trusted third parties who assist in:

• Payment processing (subject to PCI-DSS compliance)
• Email communications and program scheduling
• Website hosting and analytics
• Document storage and delivery

All service providers are contractually obligated to maintain confidentiality and use data only for specified purposes.

5.2 Legal Requirements

We may disclose information when required by:

• Malaysian law or legal process
• Court orders or government requests
• Protection of our rights or safety of participants
• Investigation of fraud or security issues

5.3 No Third-Party Marketing

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

6. Data Security

We implement comprehensive security measures including:

• Encrypted data transmission (SSL/TLS)
• Secure servers with access controls
• Regular security audits and updates
• Staff training on data protection
• Password protection and authentication
• Regular backups and disaster recovery procedures

While we take reasonable precautions, no internet transmission is completely secure. We cannot guarantee absolute security but continuously work to protect your information.

7. Data Retention

We retain your personal information for:

• Program materials and communications: Duration of program plus 12 months
• Enrollment and payment records: 7 years (Malaysian tax and business record requirements)
• Website analytics data: 24 months
• Marketing communications: Until you unsubscribe or request deletion

After retention periods expire, we securely delete or anonymize personal information.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and settings
• Understand how you use our website
• Improve website functionality and user experience
• Analyze traffic and usage patterns

You can manage cookie preferences through your browser settings or our cookie consent tool.

For detailed information, see our Cookie Policy.

9. Your Rights Under PDPA

Under Malaysian personal data protection law, you have the right to:

9.1 Access

Request access to the personal data we hold about you.

9.2 Correction

Request correction of inaccurate or incomplete personal data.

9.3 Withdrawal of Consent

Withdraw consent for processing where consent is the legal basis. Note this may affect our ability to provide services.

9.4 Limit Processing

Request limitation of how we process your data in certain circumstances.

9.5 Complaint

Lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your rights have been violated.

To exercise these rights, contact us at [email protected]. We will respond within 21 days as required by PDPA.

10. Children's Privacy

Our programs are designed for adults aged 18 and over. We do not knowingly collect information from individuals under 18. If you believe we have inadvertently collected such information, please contact us immediately for deletion.

11. International Data Transfers

Your data is primarily stored and processed in Malaysia. If we transfer data outside Malaysia, we ensure adequate protection through:

• Data protection agreements with recipients
• Compliance with PDPA transfer requirements
• Use of secure, encrypted transmission methods

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated through:

• Email notification to enrolled participants
• Prominent notice on our website
• Updated "Last Updated" date at the top of this policy

Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Information

For privacy-related inquiries or to exercise your rights: