Privacy Policy
Last Updated: 15 June 2025 | Effective Date: 15 June 2025
This Privacy Policy explains how Vaultise ("we", "us", "our") collects, uses and protects personal information in connection with our student financial education programmes and this website. We are based in Malaysia and this policy reflects our obligations under the Personal Data Protection Act 2010 (PDPA) of Malaysia.
1. Who we are
Data Controller: Vaultise
Address: No. 14-2, Jalan Setia Prima, Setia Alam, 40170 Shah Alam, Selangor, Malaysia
Privacy enquiries: [email protected]
Vaultise provides general financial education programmes for students in Malaysia. We take the handling of personal information seriously and limit what we collect to what is genuinely needed for programme delivery.
2. What information we collect
We collect information in the following situations:
Enquiry and enrolment
- Full name
- Email address
- Phone number (optional)
- Message content you include in your enquiry
- Programme of interest
Website usage
- Browser type and device information (via analytics cookies, if consented)
- Pages visited and time spent on the site
- Referring website
We do not collect sensitive personal data such as financial account numbers, identity card numbers or health information.
3. Legal basis and how we use your information
Under the PDPA 2010, we process personal data on the following bases:
- Consent — when you submit an enquiry form or agree to optional cookies
- Contract — to fulfil a programme enrolment and deliver the associated sessions and materials
- Legitimate interest — for programme administration, responding to queries and improving our education offering
We use the information we collect to:
- Respond to enquiries about our programmes
- Process enrolments and arrange session logistics
- Send programme-related communications (session reminders, material access)
- Improve our website and programme content based on usage patterns
- Comply with legal obligations if required
We do not use your information for automated decision-making or profiling.
4. Data retention
We retain personal data for no longer than necessary for the purpose for which it was collected:
- Enquiry data (no enrolment): deleted or anonymised after 6 months
- Participant records: retained for up to 3 years after programme completion for administrative purposes
- Analytics data: aggregated and anonymised — not retained in identifiable form beyond the session
You may request earlier deletion of your data at any time (see Section 7).
5. Data sharing
We do not sell personal data to third parties. We may share data with:
- Service providers — for example, email delivery services used to send programme communications. These providers act under data processing agreements and may not use the data for their own purposes.
- Analytics providers — where cookies are consented to, anonymised usage data may be shared with analytics tools.
- Legal authorities — if required by Malaysian law or a valid legal order.
We do not share participant information with advertisers, financial product providers or any commercial partners without explicit consent.
6. Data security
We take reasonable technical and organisational measures to protect personal data, including:
- HTTPS encryption for data transmitted through our website
- Restricted access to participant data — limited to team members who need it for programme delivery
- Secure handling of physical materials (handbooks, planner sheets) containing no personal data beyond names
In the event of a data breach that affects your rights and interests, we will notify affected individuals within a reasonable timeframe in accordance with applicable requirements.
7. Cookies
Our website uses cookies. Essential cookies are required for basic site functionality. Optional analytics and preference cookies are only placed with your consent. See our Cookie Policy for full details and to manage your preferences.
8. Your rights
Under the PDPA 2010 and applicable data protection standards, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate or incomplete data
- Erasure — request deletion of your personal data (subject to legal retention requirements)
- Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
- Object to processing — raise an objection to how we use your data in certain circumstances
- Lodge a complaint — contact the Department of Personal Data Protection Malaysia (JPDP) if you believe your data rights have not been respected
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.
9. Third-party links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their policies before submitting any personal information.
10. Children and young people
Some of our programmes are designed for secondary school students who may be under 18. Where a student is under 18, we encourage a parent or guardian to make the enquiry on their behalf and to review this policy. We do not knowingly collect personal data from individuals under 13 without parental consent.
11. Updates to this policy
We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our site or participation in our programmes after changes are posted constitutes acceptance of the revised policy.
12. Contact for privacy matters
For any questions about this policy or your personal data:
Vaultise
No. 14-2, Jalan Setia Prima, Setia Alam, 40170 Shah Alam, Selangor, Malaysia
Email: [email protected]
Phone: +60 13-846 2079