Privacy Policy
1 Introduction
Mahir ("we", "us", "our") is committed to handling your personal data carefully and transparently. This Privacy Policy describes how we collect, use, store, and protect information you share with us when you visit our website or enquire about our financial education programmes.
This policy applies to all personal data processed by Mahir in connection with our website at mahirs.cyou and our services. We operate from Suite 18A, Plaza Sentral, Jalan Stesen Sentral 5, 50470 Kuala Lumpur, Malaysia, and this policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia.
If you have any questions about this policy or how we handle your data, please contact us at [email protected] before using the site.
2 Data We Collect
Information you provide directly
When you submit an enquiry through our contact form, we collect the following:
- Full name — to address you correctly in correspondence
- Email address — to respond to your enquiry
- Phone number (optional) — if you choose to provide it for follow-up calls
- Message content (optional) — any details you share about your enquiry
Information collected automatically
When you visit our website, certain technical data is collected automatically by our hosting infrastructure and third-party analytics tools. This may include your approximate IP address, browser type, operating system, pages visited, and time spent on each page. This data does not identify you personally.
Legal basis for processing
- Consent — for marketing communications and non-essential cookies
- Contractual necessity — to respond to your enquiry and deliver services you have requested
- Legitimate interests — for website security, fraud prevention, and internal analytics to improve our service
How long we keep your data
Enquiry records and correspondence are retained for up to 24 months from the date of last contact. After that period, personal data is securely deleted unless a longer retention period is required by Malaysian law or we have an ongoing relationship with you.
3 How We Use Your Data
We use the information you provide for the following purposes:
- Responding to your enquiry about our financial education programmes
- Scheduling intake conversations and programme sessions
- Sending relevant follow-up information related to your enquiry
- Improving the content and structure of our website based on aggregated usage data
- Meeting our legal obligations under Malaysian law
Marketing communications
We only send programme updates or educational content if you have explicitly consented. You may withdraw consent at any time by contacting us at [email protected].
Data sharing
We do not sell your personal data. We may share limited data with trusted service providers who assist us in operating the website and delivering our programmes — such as email hosting or analytics platforms — under strict data processing agreements. These providers are not permitted to use your data for their own purposes.
4 Data Protection Measures
We take the security of your personal data seriously. The measures we have in place include:
- TLS encryption for all data transmitted between your browser and our server
- Access controls restricting personal data to staff with a genuine need to see it
- Secure server environments with up-to-date software and security patching
- Periodic reviews of our data handling practices to identify and address any weaknesses
In the unlikely event of a data breach that could affect your rights, we will notify you and the relevant Malaysian authorities as required under the PDPA within a reasonable timeframe.
No system is entirely without risk. While we work to protect your data, you share information with us at your own discretion.
6 Your Rights
Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights regarding your personal data held by Mahir:
Right of access
Request a copy of the personal data we hold about you.
Right to correction
Request that inaccurate or outdated data be corrected.
Right to withdraw consent
Withdraw consent for marketing or non-essential processing at any time.
Right to object
Object to processing of your data for direct marketing purposes.
Right to portability
Receive your data in a structured, commonly used format where technically feasible.
Right to complain
Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been infringed.
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days as required under the PDPA. Some requests may require identity verification before we can proceed.
7 Third-Party Links
Our website may contain links to external websites for reference or informational purposes. Mahir has no control over the content or privacy practices of those sites and is not responsible for how they handle your data.
We recommend reviewing the privacy policy of any external site before submitting personal information through it.
8 Children's Privacy
Our programmes and website are intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18 years of age.
If you believe a minor has submitted personal information through our website, please contact us at [email protected] and we will promptly delete it.
9 Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or the services we offer. When we make changes, we will update the "Last updated" date at the top of this page.
Continued use of our website after a policy update constitutes your acceptance of the revised terms. We encourage you to revisit this page periodically if you use our site regularly.
For significant changes that affect how we use your data, we will make reasonable efforts to notify you by email if we hold your contact details.
10 Contact Us — Data Queries
For any questions or requests relating to this Privacy Policy or your personal data, please reach out to us directly. We aim to respond within 21 days.
Data Controller
Mahir
Suite 18A, Plaza Sentral
Jalan Stesen Sentral 5
50470 Kuala Lumpur, Malaysia
Supervisory Authority
Department of Personal Data Protection Malaysia (JPDP)
www.pdp.gov.my