Privacy Policy

1. Introduction

Prospara ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our programs, website, and services. This Privacy Policy explains what information we collect, how we use it, how long we retain it, and what rights you have under Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy applies to all personal data processed by Prospara in connection with the operation of our financial education programs and website at prospara.info. If you have questions, contact us at [email protected].

2. Personal Data We Collect

We collect personal data you provide directly to us, including:

• Contact information: full name, email address, phone number
• Enquiry details: information shared through our contact form or by email or telephone
• Program registration data: name, contact details, program selected, payment information
• Session participation data: attendance records and completed worksheets retained with your consent
• Private check-in information: financial situation details shared voluntarily during Credit & Debt Navigation check-ins, retained only with explicit consent and held separately

We also collect limited technical data automatically when you visit our website, including browser type, device type, pages visited, and referring URL, via cookies and similar technologies. See Section 6 (Cookies) for details.

3. Legal Basis and Purpose of Processing

We process your personal data on the following legal bases under the PDPA 2010:

• Consent: for marketing communications and optional private check-in data
• Contractual necessity: to deliver programs you have enrolled in and process payments
• Legitimate interest: for website analytics and improving program content based on aggregate feedback
• Legal obligation: for records required under Malaysian tax and business regulations

Purposes include: processing enquiries and registrations; delivering and administering education programs; sending program reminders and administrative notices; improving content based on feedback; complying with legal obligations.

Data retention: Contact and registration data is retained for 3 years after your last interaction with Prospara. Private check-in notes are retained for the duration of the program only, unless you request otherwise in writing. Financial transaction records are retained for 7 years as required by Malaysian law.

4. How We Use Your Data

• Processing and responding to your enquiries
• Registering you for and delivering programs
• Sending program schedules, reminders, and materials
• Processing fee payments securely
• Sending post-program feedback surveys (with opt-out available)
• Notifying you of future programs and intake dates if you have consented
• Improving program quality using anonymised and aggregate feedback
• Meeting obligations under Malaysian tax and company law

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

5. Data Sharing

We may share your data with trusted third-party service providers who process data on our behalf under appropriate data processing agreements, including:

• Payment processing providers (for program fee transactions)
• Email delivery services (for administrative communications)
• Cloud storage providers (for secure document storage)
• Analytics providers (for anonymised website usage data)

We may also disclose personal data if required by Malaysian law or a competent authority. We do not transfer personal data outside Malaysia without appropriate safeguards.

6. Cookies

Our website uses cookies to operate correctly and understand how it is used. Cookie types include:

• Essential cookies: required for basic website functionality
• Analytics cookies: help us understand pages visited and session duration (anonymised)
• Preference cookies: remember your consent choices

You can manage cookie preferences at any time via our Cookie Policy page.

7. Data Protection Measures

• All data is stored on encrypted servers
• Access to personal data is restricted to staff with a legitimate need
• Private check-in notes are stored separately from general registration data
• Passwords and access credentials are managed using secure protocols
• In the event of a data breach affecting your rights, we will notify you and the relevant authority within the timeframes required by law

8. Your Rights Under the PDPA 2010

As a data subject under Malaysian law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent at any time for processing based on consent (this does not affect processing already carried out)
• Object to processing for direct marketing purposes
• Request deletion of personal data where there is no lawful basis to retain it
• Lodge a complaint with Malaysia's Personal Data Protection Commissioner if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external websites. Prospara is not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any third-party site you visit.

10. Children's Privacy

Prospara's programs are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently received data from a minor, please contact us so we can delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our website. Continued use of our website or programs after any update constitutes your acknowledgement of the revised policy. The current version's date is shown at the top of this page.

12. Contact Information

Data Controller: Prospara

77 Jalan Wong Ah Fook, 80000 Johor Bahru, Johor, Malaysia

Email: [email protected]

Phone: +60 7-3184 9206