Legal

Privacy Policy

Last updated: 10 April 2025  ·  Effective: 10 April 2025

Aurelian ("we", "us", "our") is a financial education practice registered in Malaysia. This Privacy Policy explains what personal information we collect, how we use it, and the rights you have in relation to it. The policy applies to information collected through this website and through our programme enquiry and enrolment process.

If you have questions about this policy, please contact us at [email protected].

1. Data we collect

We collect personal data only when it is provided directly to us. This includes:

• Your name and email address, submitted via the enquiry form on our website
• Your phone number, if provided voluntarily in the enquiry form
• Message content you write in the enquiry form
• Technical data collected automatically by the website (see Cookie section below)

We do not collect sensitive financial data through this website. Any financial information you share during programme sessions is handled under a separate confidentiality arrangement described in our Terms and Conditions.

2. How we use your information

Information submitted through the enquiry form is used solely to respond to your enquiry and, if appropriate, to schedule or administer a programme. We do not use your information to send marketing materials unless you have specifically asked us to. We do not share your information with third parties for marketing purposes.

Legal bases for processing under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent — where you have submitted a form and agreed to this policy
• Contractual necessity — where processing is required to deliver a programme you have enrolled in
• Legitimate interest — for basic website operation and security

3. Data retention

Enquiry data is retained for up to 24 months from the date of first contact. Data relating to completed programme engagements is retained for up to seven years in accordance with standard Malaysian accounting and record-keeping requirements. You may request deletion at any time (subject to legal retention obligations) by writing to us.

4. Data sharing

We do not sell your personal data. We may share limited data with the following categories of service provider, where necessary to operate the website:

• Website hosting provider (server infrastructure, Malaysia or Singapore region)
• Email delivery service (for responding to enquiries)
• Analytics service (for understanding aggregate website usage — see Cookies)

All third-party providers are required to process data only on our instructions and in accordance with applicable data protection law.

5. Cookies

This website uses cookies. Essential cookies are required for the site to function. Analytics and preference cookies are optional and require your consent. Full details of the cookies we use are provided in our Cookie Policy.

6. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include encrypted connections (HTTPS) and restricted staff access to personal data systems. In the event of a data breach that poses a significant risk to individuals, we will notify affected parties and the relevant authority as required by the PDPA.

7. Your rights under Malaysian law

Under Malaysia's Personal Data Protection Act 2010, you have the following rights:

• The right to access the personal data we hold about you
• The right to correct inaccurate or incomplete personal data
• The right to withdraw consent for processing based on consent
• The right to request that we cease processing your data for direct marketing
• The right to be informed of the categories of data we hold and the purposes for which we use it

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

8. Third-party links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

9. Children's privacy

Our programmes are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If we become aware that a person under 18 has submitted data through our website, we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the website after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests:

• Email: [email protected]
• Address: Suite 21-B Star Place, Jalan Bukit Bintang, 55100 Kuala Lumpur