Privacy Policy | Padi Academy

1. Introduction

Padi Academy ("we", "us", "our") is committed to protecting the privacy of every person who contacts us, enrols in our courses, or visits our website. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you hold under Malaysia's Personal Data Protection Act 2010 (PDPA).

By submitting an enquiry form, enrolling in a course, or continuing to use this website, you agree to the practices described in this policy. If you do not agree, please do not submit your personal information and contact us at privacy@padiacad to discuss alternatives.

2. Data We Collect

Information You Provide Directly

Full name
Email address
Phone number (if provided)
Household financial details shared during consultations (held in strict confidence)
Any message or query submitted via our contact form

Information Collected Automatically

Browser type and device information
Pages visited and time spent on site (via analytics cookies, where consent is given)
Referring URL
IP address (anonymised)

Legal Basis for Processing

We process personal data on the following bases: your explicit consent (for marketing communications and analytics cookies); the performance of a contract (to deliver the course you enrol in); our legitimate interests (to respond to enquiries and improve our services); and compliance with legal obligations under Malaysian law.

3. How We Use Your Data

To respond to your enquiry within one working day
To process course enrolment and deliver course materials
To schedule and conduct licensed counsellor consultations
To send course-related communications (session reminders, material delivery)
To improve our website and course content based on aggregated usage data
To comply with Malaysian financial education regulatory requirements

We do not use your data for automated decision-making or profiling. We do not sell your data to third parties. We do not share your household financial details with product providers.

4. Data Sharing

We share personal data only in the following limited circumstances:

Licensed counsellors and planners: Your name, contact details, and course context are shared with the licensed practitioner assigned to your consultation. All practitioners are bound by confidentiality agreements.
Service providers: We use third-party tools for webinar hosting and email delivery. These providers process data on our behalf and are bound by data processing agreements that prohibit them from using your data for their own purposes.
Legal requirements: We may disclose data if required by law or in response to a valid legal request from Malaysian authorities.

5. Data Protection Measures

All consultation notes are stored in encrypted files with access restricted to the assigned practitioner and the Padi Academy principal only
Website forms transmit data over HTTPS (TLS encryption)
Access to personal data is restricted to staff with a legitimate operational need
In the event of a data breach, affected individuals will be notified within 72 hours of discovery, in line with PDPA obligations

6. Cookies

We use cookies to understand how visitors use our website and to remember your preferences. Essential cookies are required for the site to function and cannot be disabled. Analytics and preference cookies are optional and only activated with your consent. For full details, see our Cookie Policy.

7. Data Retention

Enquiry form submissions: retained for 12 months from the date of last contact, then deleted
Course enrolment records: retained for 7 years to meet Malaysian financial education record-keeping requirements
Consultation notes: retained for 3 years from the date of the last session, then securely destroyed
Analytics data: anonymised and retained in aggregated form indefinitely; no individual-level retention

8. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Withdraw consent for marketing communications at any time
Request that we stop processing your data for direct marketing purposes
Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, contact us at privacy@padiacad. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external resources — for example, Bank Negara Malaysia's financial literacy pages or EPF official information. We are not responsible for the privacy practices of external websites and encourage you to read their privacy policies before submitting any personal information.

10. Children's Privacy

Our courses are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data through our website, please contact us immediately so we can remove it.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in Malaysian data protection law. The date at the top of this page will reflect when the policy was last revised. Significant changes will be communicated to enrolled learners by email.

12. Contact

For any privacy-related queries, correction requests, or complaints:

Email: privacy@padiacad
Phone: +60 13-794 2086
Address: Jalan Sultan Ismail 165, 50250 Kuala Lumpur, Malaysia