Legal
Privacy Policy
Numisma ("we", "us", "our") is committed to protecting the personal data of individuals who enquire about, enrol in, or attend our financial education programs. This policy explains what data we collect, how it is used, and the rights you hold under Malaysia's Personal Data Protection Act 2010 (PDPA).
1. Who We Are
Data Controller: Numisma
Address: 9 Persiaran Gurney, 10250 George Town, Penang, Malaysia
Contact: privacy@numisma
2. Data We Collect
2.1 Information you provide
- Full name
- Email address
- Phone number (optional, if provided)
- Programme enquiry details or message content
2.2 Automatically collected information
- IP address and browser type (via server logs)
- Pages visited and session duration (via analytics cookies, if consented)
- Device type and operating system
2.3 Data retention periods
Enquiry data is retained for up to 24 months from the date of collection, after which it is deleted or anonymised. Enrolment records are retained for seven years for administrative and legal compliance purposes.
3. How We Use Your Data
- Responding to programme enquiries
- Processing enrolment and managing your participation
- Sending programme-related communications (schedule reminders, materials)
- Improving our programmes through anonymised feedback analysis
- Complying with applicable Malaysian law
We do not use your data for unsolicited marketing without your explicit consent. You may withdraw consent to marketing communications at any time by contacting us at the address above.
4. Legal Basis for Processing
- Contract performance: Processing necessary to respond to your enquiry or to administer your enrolment
- Consent: Where you have agreed to receive communications or where non-essential cookies are used
- Legitimate interest: Improving programmes and maintaining appropriate security measures
- Legal obligation: Where required to comply with Malaysian law
5. Data Sharing
We do not sell your personal data. We may share data with the following in limited circumstances:
- Service providers: Email platforms and website hosting providers, operating under data processing agreements
- Analytics providers: Only where analytics cookies are consented to — data is aggregated and anonymised
- Legal authorities: Only where required by applicable Malaysian law or valid legal process
6. Data Protection Measures
- Website served over HTTPS with valid SSL/TLS encryption
- Access to personal data restricted to staff with a direct operational need
- Internal records and documents are password-protected
- Breach notification procedures in place in accordance with PDPA obligations
7. Cookies
We use cookies to operate the website and, with your consent, to analyse usage. For full details, please refer to our Cookie Policy.
8. Your Rights Under PDPA 2010
- Right of access: Request a copy of the personal data we hold about you
- Right to correction: Request correction of inaccurate or incomplete data
- Right to withdraw consent: Withdraw consent to processing at any time (where consent is the legal basis)
- Right to limit processing: Request that we restrict the processing of your data in certain circumstances
- Right to object: Object to processing based on legitimate interest
To exercise any of these rights, contact us at privacy@numisma. We will respond within 21 calendar days.
If you believe we have handled your data incorrectly, you may refer the matter to the Personal Data Protection Commissioner of Malaysia.
9. Third-Party Links
Our website may contain links to third-party sites such as Bursa Malaysia or government resources. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
10. Children's Privacy
Our programmes are designed for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us promptly.
11. Changes to This Policy
We may update this policy from time to time. Material changes will be notified on this page with an updated "Last Updated" date. Continued use of our website after changes constitutes acceptance of the revised policy.
12. Contact
For any privacy-related enquiries, please write to us at:
privacy@numisma
Numisma, 9 Persiaran Gurney, 10250 George Town, Penang, Malaysia