Privacy Policy

Last updated: 25 April 2025

1. Introduction

Hikmah Saujana ("we", "us", "our") is committed to protecting the personal information of those who visit this website or enquire about our programmes. This policy describes how we collect, use, and hold personal data in connection with our financial education practice, based at 92 Jalan Pinang, 50450 Kuala Lumpur, Malaysia.

This policy applies to personal data collected through this website and through direct correspondence with the practice. If you have questions about anything in this policy, please write to us at [email protected].

Malaysian residents are protected under the Personal Data Protection Act 2010 (PDPA). We comply with its requirements in all aspects of data handling described here.

2. What Personal Data We Collect

Data you provide directly

• Your name and email address when you submit the enquiry form
• Your phone number, if you choose to provide it
• The content of any message you send through the website form
• Any additional information shared during subsequent correspondence regarding programme enrolment

Data collected automatically

• Basic website usage data (pages visited, time spent) if analytics cookies are accepted
• Technical data such as browser type and approximate geographic location at the country level

We do not collect sensitive financial data through this website. Any financial documents shared during programme sessions are treated with strict confidentiality and are not stored on this website's systems.

3. Legal Basis and How We Use Your Data

We process personal data on the following legal bases under PDPA 2010:

• Consent: When you submit the enquiry form, you consent to us using your contact details to respond to your enquiry and provide information about current programme intake schedules.
• Legitimate interest: We maintain records of past correspondence to provide continuity of service and to manage intake administration.
• Contract: When you enrol in a programme, we process the necessary data to administer your participation and deliver the sessions and written materials.

We do not use personal data for unsolicited marketing. We do not share or sell your data to any third party for their marketing purposes.

4. Data Retention

Enquiry data is held for up to 12 months from the date of initial contact. If you enrol in a programme, we hold administrative records for up to 5 years from the programme's close date, in line with standard business record-keeping requirements. Session summaries and written materials are prepared for you and are not retained beyond the programme period on our systems unless required for follow-up correspondence.

5. Data Sharing

We do not share personal data with third parties except in the following limited circumstances:

• Service providers who assist with website hosting or email delivery, bound by confidentiality obligations
• Where required by Malaysian law or a competent regulatory authority

We are not affiliated with any financial institution, fund manager, insurer, or investment platform. No enquiry data is passed to any such organisation at any point.

6. Cookies

This website uses a small number of cookies. Essential cookies are required for the site to function. Optional analytics cookies help us understand how the site is used — you can accept or decline these via the cookie banner shown on your first visit. For full information, see our Cookie Policy.

7. Your Rights Under PDPA 2010

As a data subject under Malaysian law, you have the following rights:

• Right of access: to request a copy of the personal data we hold about you
• Right of correction: to request that inaccurate data be corrected
• Right to withdraw consent: to withdraw consent to processing at any time, where consent is the legal basis
• Right to cease processing: to request that we stop using your data for direct communication purposes

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.

8. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

9. Children's Privacy

Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has submitted data through this website, please contact us promptly.

10. Security

We take reasonable technical and administrative measures to protect personal data from unauthorised access, disclosure, or loss. Correspondence is handled through standard email with standard encryption. Enrolment records are held in secured systems with restricted access.

11. Updates to This Policy

We may update this policy periodically. The revised policy will be published on this page with a new "Last updated" date. Continued use of the website after any update constitutes acceptance of the revised terms.

12. Contact Us

For any privacy-related enquiries or to exercise your data rights:

• Email: [email protected]
• Phone: +60 3-7826 4159
• Address: 92 Jalan Pinang, 50450 Kuala Lumpur, Malaysia