legal

Privacy Policy

Last updated: 14 April 2025

Veldora ("we", "us", "our") is committed to handling your personal information with care. This policy explains what data we collect, how we use it, how long we keep it, and what rights you have over it. It applies to all personal data we process in connection with our programmes, website, and communications.

This policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Who we are

Veldora is a financial education practice based at Jalan Bangsar, Unit 14A, 59100 Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia. For data-related enquiries, contact us at privacy@veldoraa.

2. What data we collect

Information you provide directly

• Name, email address, and phone number submitted via our contact form or programme enrolment
• Household financial information shared during programme sessions (retained only for programme delivery)
• Correspondence with us by email or telephone

Information collected automatically

• Website usage data via analytics cookies (if consented) — pages visited, session duration, device type
• IP address and browser type for security and performance monitoring
• Cookie preferences stored in your browser via localStorage

3. Legal basis for processing

• Consent — for analytics cookies and marketing communications (you may withdraw at any time)
• Contract performance — to deliver the programme you have enrolled in
• Legitimate interest — to respond to enquiries, maintain records of completed programmes, and improve our content
• Legal obligation — to comply with applicable Malaysian law, including the PDPA 2010

4. How we use your data

• Responding to enquiries and scheduling programme sessions
• Delivering programme materials and written summaries
• Sending programme-related communications (session reminders, follow-up scheduling)
• Improving the quality of our content and session structure based on aggregate feedback
• Maintaining internal records of completed programmes for quality assurance
• Complying with applicable Malaysian law

We do not use your personal data for automated decision-making or profiling.

5. Data sharing

We do not sell or share your personal data with third parties for marketing purposes. We may share data with:

• Service providers who support our operations (email platform, cloud storage) — bound by confidentiality obligations
• Regulatory or enforcement bodies if required by Malaysian law

Household financial information discussed during sessions is held in confidence and is not shared outside the programme delivery context.

6. Data retention

• Enquiry correspondence: 12 months from last contact
• Enrolment and programme records: 5 years from programme completion, for quality assurance and legal compliance
• Session-specific household financial notes: retained only for the duration of the programme, then securely deleted
• Analytics data: 26 months (if consented)

7. Cookies

Our website uses cookies. For full details of the types of cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Your rights under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent to processing based on consent at any time
• Request that we stop using your data for direct marketing
• Make a complaint to Malaysia's Department of Personal Data Protection (JPDP) if you believe your rights have not been respected

To exercise any of these rights, contact us at privacy@veldoraa. We will respond within 21 days.

9. Data security

We take reasonable technical and organisational steps to protect personal data from unauthorised access, loss, or disclosure. These include restricted access controls, secure email communication, and regular review of our data handling practices. In the event of a data breach that is likely to result in a risk to you, we will notify you promptly.

10. Third-party links

Our website may include links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

11. Children's privacy

Our programmes and website are directed at adults (18 years and above). We do not knowingly collect personal data from individuals under 18. If you believe we hold data about a minor, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Significant changes will be communicated to active participants by email.

13. Contact

For questions about this policy or to exercise your data rights:

• Email: privacy@veldoraa
• Address: Jalan Bangsar, Unit 14A, 59100 Kuala Lumpur, Federal Territory of Kuala Lumpur