Privacy Policy

1. Introduction

Northvane Sdn Bhd ("Northvane", "we", "us", or "our") operates from Level 12, Wisma Pantai, 1 Lebuh Pantai, 10300 George Town, Penang, Malaysia. We provide structured financial education programmes and related materials to adults across Malaysia.

This Privacy Policy explains how we collect, use, store, and protect personal data in connection with our website and course services. It is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have questions about how we handle your data, please contact us at [email protected].

2. What Personal Data We Collect

We collect personal data only when you provide it to us directly or when it is generated by your use of this website.

Data you provide:

• Full name
• Email address
• Phone number (optional)
• Message content submitted through our contact form
• Course enrolment information

Data collected automatically:

• IP address and browser type
• Pages visited and time spent on the site
• Referral source (the website you came from)
• Cookie identifiers (see Section 5)

Legal basis for processing:

• Your consent (e.g., when submitting the contact form or accepting cookies)
• Performance of a contract (e.g., delivering course access after enrolment)
• Legitimate interests (e.g., understanding how the website is used to improve it)

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• Responding to enquiries sent through the contact form
• Processing course enrolments and delivering access to course materials
• Sending administrative communications about your enrolment
• Notifying enrolled participants of material updates to course content
• Improving the website and course content based on usage patterns

We do not use your personal data for direct marketing without your explicit consent. We do not sell, rent, or share your personal data with third-party financial institutions, product providers, or marketing companies.

Data retention periods:

• Contact form submissions: 24 months from the date of submission
• Enrolment records: 7 years from the date of enrolment (for accounting and administrative purposes)
• Website analytics data: 26 months (as per standard analytics platform settings)

4. Third-Party Services

We use a small number of third-party services to operate this website. Each handles data according to their own privacy policies:

• Google Analytics — website traffic analysis. Data is anonymised where possible.
• Email delivery service — used to send administrative emails related to enquiries and enrolments.
• Website hosting provider — server infrastructure located in the Asia-Pacific region.

We do not integrate with social media advertising platforms, affiliate networks, or financial data aggregators.

5. Cookies

This website uses cookies to function properly and to understand how it is used. We use the following types of cookies:

• Essential cookies — required for basic site functionality. These cannot be disabled.
• Analytics cookies — used to understand which pages are visited and how long people spend on them. Optional.
• Preference cookies — used to remember your cookie consent choice. Optional.

You can manage your cookie preferences at any time via our Cookie Policy page.

6. How We Protect Your Data

• This website uses HTTPS encryption for all data transmission.
• Access to personal data within Northvane is restricted to staff who need it to perform their role.
• We review our data handling practices periodically.
• In the event of a data breach affecting your personal data, we will notify you and the relevant authorities as required under the PDPA within a reasonable timeframe.

7. Your Rights Under Malaysian Law

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right to access — you may request a copy of the personal data we hold about you.
• Right to correction — you may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
• Right to prevent processing for direct marketing — you may ask us to stop using your data for marketing purposes.
• Right to lodge a complaint — you may contact the Personal Data Protection Commissioner of Malaysia if you believe your data has been handled unlawfully.

To exercise any of these rights, please write to [email protected]. We will respond within 21 working days.

8. Links to External Websites

This website may contain links to external resources, such as Bank Negara Malaysia publications, EPF information pages, or regulatory guidance. We are not responsible for the privacy practices of those sites and recommend you review their policies separately before providing any personal data to them.

9. Age Restriction

Our courses and services are intended for adults aged 18 and above. We do not knowingly collect personal data from persons under the age of 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For material changes affecting how we process your personal data, we will also notify enrolled participants by email.

Continued use of this website after a policy update constitutes acceptance of the revised terms.

11. Contact for Data Enquiries

If you have questions about this Privacy Policy or wish to exercise your rights, please contact: