Privacy Policy

1. Who We Are

Ledgra is a financial education provider based in Kuala Lumpur, Malaysia. We deliver workshops and structured courses on borrowing awareness and money management. We are not a financial advisory service, debt counselling service, or any other regulated financial business.

Data controller: Ledgra, Suite 6-09, Wisma Mont Kiara, No. 1 Jalan Kiara, Mont Kiara, 50480 Kuala Lumpur. Contact for data matters: [email protected].

2. What Personal Data We Collect

We collect personal data in the following circumstances:

• Enquiry and contact forms: Name, email address, phone number (optional), and any message content you provide.
• Programme enrolment: Name, email address, phone number, and payment information processed through our payment provider.
• Website usage: Technical data such as IP address, browser type, pages visited and session duration — collected via cookies and analytics tools.
• Communications: Records of emails or messages you send us, including any personal information you include.

3. How We Use Your Data

We use your personal data for the following purposes:

• Responding to your enquiries about our programmes.
• Processing enrolment and managing your participation in courses or workshops.
• Sending confirmation emails and relevant programme communications.
• Sending occasional updates about new programmes, where you have opted in or where we have a legitimate interest (with a clear opt-out in every message).
• Improving our website and course materials using anonymised analytics data.
• Complying with legal obligations under Malaysian law.

We do not use your data for automated decision-making or profiling, and we do not sell your data to any third party.

4. Legal Basis for Processing

Under the PDPA 2010, we process your data on the following bases:

• Consent: Where you have submitted a contact form or opted into communications.
• Contractual necessity: Where processing is needed to deliver the programme you've enrolled in.
• Legitimate interests: For internal analytics, improving our programmes, and sending relevant information to past participants where opt-out options are provided.

5. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected:

• Enquiry and contact data: up to 12 months from the date of contact if no enrolment follows.
• Participant records: up to 3 years from programme completion for administrative and compliance purposes.
• Financial/payment records: as required by Malaysian accounting regulations, typically 7 years.
• Website analytics data: aggregated and anonymised after 26 months.

6. Third-Party Services

We use a limited number of third-party services that may process your data on our behalf:

• Google Analytics: Website usage statistics (anonymised).
• Payment processors: For programme fee transactions (we do not store card details ourselves).
• Email delivery services: For sending confirmations and programme communications.

All third-party services are selected for their data protection standards. We do not share your data with advertisers or unrelated third parties.

7. Cookies

Our website uses cookies to function properly and to understand how visitors use the site. You can manage your cookie preferences using the controls on our Cookie Policy page. Essential cookies are required for the site to work; all others are optional.

8. Your Rights Under the PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right of correction: Request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Withdraw consent for processing at any time where consent is the legal basis.
• Right to limit processing: Request that we stop using your data for direct marketing purposes.
• Right to inquire: Ask us about the types of personal data we hold and how they are used.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days. For complaints about data handling, you may contact the Department of Personal Data Protection Malaysia (JPDP).

9. Data Security

We take reasonable measures to protect personal data from unauthorised access, disclosure or loss. These include access controls for staff handling data, secure connections (HTTPS) for our website, and data minimisation practices. In the event of a data breach that affects your rights, we will notify affected individuals in accordance with our obligations.

10. Third-Party Links

Our website may include links to third-party websites such as AKPK or Bank Negara Malaysia. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies when visiting them.

11. Children

Our programmes are directed at adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have collected data from a minor, please contact us immediately at [email protected].

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The revised date at the top of this page will indicate when the policy was last updated. Continued use of our website or services after any update constitutes acceptance of the updated policy.

13. Contact for Data Enquiries

For any questions about this policy or how we handle your data:

• [email protected]
• +60 3-2716 4938
• Suite 6-09, Wisma Mont Kiara, No. 1 Jalan Kiara, Mont Kiara, 50480 Kuala Lumpur