Privacy Policy

Introduction

Northmark ("we," "us," or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or participate in our financial education services.

This policy applies to all personal data we collect through our website, email communications, and in-person educational sessions. By using our services, you consent to the data practices described in this policy.

Data We Collect

Personal Information You Provide

We collect information that you voluntarily provide to us when you:

• Fill out contact forms on our website
• Register for our educational services
• Communicate with us via email or phone
• Subscribe to our communications

This information may include: full name, email address, phone number, postal address, and any information you choose to provide in messages or inquiries.

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including:

• IP address and browser type
• Operating system and device information
• Pages visited and time spent on pages
• Referral source and exit pages

Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our cookie practices, please refer to our Cookie Policy.

How We Use Your Data

We use the personal data we collect for the following purposes:

Service Delivery

• To provide and deliver our educational services
• To process registrations and manage participant information
• To communicate about sessions, schedules, and materials
• To respond to inquiries and provide customer support

Legal Basis for Processing

Under Malaysian Personal Data Protection Act 2010 (PDPA), we process your personal data based on:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: To fulfill our obligations under service agreements
• Legitimate Interest: To improve our services and communicate relevant information
• Legal Compliance: To meet regulatory and legal requirements

Website Improvement and Analytics

• To analyze website usage and improve functionality
• To understand user behavior and preferences
• To detect and prevent technical issues

Data Sharing and Disclosure

Third-Party Service Providers

We may share your information with trusted third-party service providers who assist us in operating our website and delivering our services. These providers include:

• Website hosting and maintenance services
• Email communication platforms
• Analytics services (e.g., Google Analytics)
• Payment processors (if applicable)

These service providers are contractually obligated to protect your data and use it only for the purposes we specify.

Legal Requirements

We may disclose your personal data if required to do so by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.

What We Don't Do

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not share participant session discussions or personal financial situations with any external parties.

Data Protection and Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure Socket Layer (SSL) encryption for data transmission
• Secure servers with restricted access
• Regular security assessments and updates
• Staff training on data protection practices
• Access controls limiting data access to authorized personnel

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but will notify you promptly of any data breaches as required by Malaysian law.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Service Participant Data: Retained for 7 years after service completion for record-keeping and potential follow-up
• Inquiry Data: Retained for 2 years or until the inquiry is resolved
• Website Analytics Data: Retained for 26 months as per standard practice
• Marketing Consent: Retained until consent is withdrawn

Your Rights Under Malaysian PDPA

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data:

Right to Access

You have the right to request access to the personal data we hold about you and obtain information about how we process it.

Right to Correction

You have the right to request correction of inaccurate or incomplete personal data we hold about you.

Right to Withdraw Consent

Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

Right to Limit Processing

You have the right to request that we limit the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Lodge a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected personal data from someone under 18 without parental consent, we will take steps to delete that information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.