Privacy Policy

Kapital Owl ("we", "our", or "us") is committed to handling your personal data with care and transparency. This Privacy Policy explains what information we collect, how we use it, and the choices you have in relation to your data. It applies to all personal data collected through our website at {{DOMAIN}}, our enquiry forms, and any direct communications with us.

We operate in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

1. Who We Are

Kapital Owl is a financial education provider based in Kuala Lumpur, Malaysia. We provide structured courses on personal budgeting, retirement planning, and financial literacy for entrepreneurs.

• Business name: Kapital Owl
• Address: 6 Jalan Yap Kwan Seng, 50450 Kuala Lumpur, Wilayah Persekutuan
• Phone: +60 3-2163 8594
• Email: info@{{DOMAIN}}

2. What Personal Data We Collect

We collect personal data in the following circumstances:

• Enquiry and contact forms: name, email address, phone number, and the message you submit.
• Course enrolment: name, email address, phone number, and payment details (processed by a third-party payment provider — we do not store card details).
• Website usage: IP address, browser type, pages visited, and time spent — collected via cookies and analytics tools where you have consented to their use.
• Direct correspondence: emails or messages you send to us.

We do not knowingly collect data from individuals under the age of 18.

3. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• To respond to your enquiries and provide information about our courses.
• To process enrolments and manage your participation in our programmes.
• To send you course reminders, scheduling updates, and relevant follow-up materials.
• To improve our website and course offerings by understanding how visitors interact with our content (analytics, where consented).
• To comply with legal or regulatory obligations.

We do not use your personal data for automated decision-making or profiling that produces legal or significant effects.

4. Legal Basis for Processing

Under the PDPA 2010, we process your personal data on one or more of the following grounds:

• Consent: where you have given us clear consent, such as when you submit an enquiry form or agree to cookies.
• Contractual necessity: where processing is needed to deliver a course you have enrolled in.
• Legitimate interests: where we have a reasonable business purpose that does not override your rights, such as responding to a direct message you sent us.
• Legal obligation: where we are required by law to retain or disclose data.

5. How We Share Your Data

We do not sell or rent your personal data to any third party. We may share your information in limited circumstances:

• Service providers: third parties who assist us in operating our website or delivering services (for example, email delivery platforms, payment processors, or analytics providers). These providers are bound by confidentiality obligations and may only use data on our instructions.
• Legal requirements: where we are required to disclose information under Malaysian law, a court order, or at the direction of a regulatory body.
• Business transfer: in the event of a sale, merger, or acquisition, your data may be transferred to the successor entity, subject to equivalent privacy protections.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law:

• Enquiry and contact data: up to 24 months from the date of last contact, unless you have enrolled in a course.
• Course participant records: up to 7 years, to meet financial and tax record-keeping requirements under Malaysian law.
• Analytics data: as per our analytics provider's retention settings, which we review periodically.

Once data is no longer required, we delete or anonymise it securely.

7. Your Rights

Under the PDPA 2010, you have the following rights in relation to your personal data:

• Right of access: you may request a copy of the personal data we hold about you.
• Right to correction: you may request that we correct any inaccurate or incomplete data.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
• Right to limit processing: in certain circumstances, you may ask us to restrict how we use your data.

To exercise any of these rights, please contact us at info@{{DOMAIN}} or by post at the address above. We will respond within 21 days.

8. Cookies

We use cookies on our website. Please refer to our Cookie Policy for detailed information about the types of cookies we use, how they work, and how to manage your preferences.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies directly.

10. Data Security

We take reasonable technical and organisational precautions to protect your personal data from unauthorised access, loss, or misuse. These include the use of HTTPS encryption on our website, access controls on internal systems, and limited staff access to personal data on a need-to-know basis.

No method of transmission over the internet is completely secure. While we do our best to protect your data, we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

• Email: info@{{DOMAIN}}
• Phone: +60 3-2163 8594
• Post: 6 Jalan Yap Kwan Seng, 50450 Kuala Lumpur, Wilayah Persekutuan, Malaysia