1. Who We Are

Dollaroak operates as the data controller for personal data submitted through this website. Our registered address is 15 Jalan Stesen Sentral, KL Sentral, 50470 Kuala Lumpur, Malaysia. For privacy-related enquiries, contact us at [email protected].

2. Data We Collect

When you interact with this website or our programmes, we may collect:

• Contact information — name, email address, phone number (where provided)
• Enquiry details — messages submitted through our contact form
• Programme participation data — registration and attendance records for Dollaroak programmes
• Technical data — IP address, browser type, pages visited, collected via analytics tools (subject to cookie consent)
• Cookie preferences — your choices regarding optional cookies stored locally

We do not collect sensitive personal data such as financial account details, identification numbers, or health information.

3. Legal Basis for Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and where applicable the EU General Data Protection Regulation (GDPR) for individuals in those jurisdictions, we process personal data on the following bases:

• Consent — for optional analytics and marketing cookies, and for sending programme updates where you have opted in
• Contract performance — to process programme bookings, issue invoices, and deliver paid services
• Legitimate interests — to respond to enquiries, improve our programmes, and maintain the security of our systems
• Legal obligation — where required by Malaysian law

4. How We Use Your Data

• Responding to enquiries submitted through our contact form
• Processing programme bookings and payments
• Sending booking confirmations and session reminders
• Providing post-programme query support
• Improving programme content based on aggregated feedback
• Complying with legal and regulatory obligations

We do not use personal data for automated decision-making or profiling.

5. Data Sharing

Dollaroak does not sell, rent, or trade personal data. We may share data with:

• Payment processors — solely for the purpose of processing programme fees
• Analytics providers — in aggregated or anonymised form, where consent has been given
• Legal authorities — where required by Malaysian law or court order

6. Data Retention

We retain personal data only for as long as necessary:

• Contact form submissions: up to 12 months from submission date
• Programme participation records: 7 years for accounting and legal purposes
• Analytics data: as configured in the analytics platform, typically 26 months
• Cookie consent records: 12 months

7. Cookies

We use essential cookies required for the site to function and optional analytics and marketing cookies. For detailed information and to manage your preferences, please see our Cookie Policy.

8. Data Security

We apply appropriate technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• Encrypted data transmission (SSL/TLS)
• Access controls limiting data to authorised personnel
• Regular review of data handling processes

In the event of a data breach that poses risk to individuals, we will notify affected parties and relevant authorities as required under applicable law.

9. Your Rights

Under the PDPA 2010 and where applicable the GDPR, you have the following rights:

• Right of access — to request a copy of personal data we hold about you
• Right of rectification — to correct inaccurate or incomplete data
• Right of erasure — to request deletion of data where it is no longer necessary
• Right to restrict processing — in certain circumstances
• Right to data portability — where processing is based on consent or contract
• Right to withdraw consent — at any time, without affecting lawfulness of prior processing
• Right to lodge a complaint — with the Department of Personal Data Protection (JPDP) Malaysia at www.pdp.gov.my

To exercise any of these rights, email [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

11. Children's Privacy

Our programmes and website are intended for individuals aged 18 and above. We do not knowingly collect data from persons under 18. If we become aware that data from a minor has been submitted, we will delete it promptly.

12. Policy Updates

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. Material changes will be communicated by a notice on our website. Continued use of our site after such changes constitutes acceptance of the updated policy.

13. Contact for Privacy Matters

For any questions about this policy or to exercise your data rights:

• Email: [email protected]
• Address: 15 Jalan Stesen Sentral, KL Sentral, 50470 Kuala Lumpur, Malaysia
• Phone: +60 3-2781 5493