Privacy Policy

1. Introduction

Tenang Ledger ("we", "us", "our") is committed to protecting the personal data of everyone who interacts with our website and programmes. This Privacy Policy describes what information we collect, why we collect it, how we use it and what rights you have in relation to it.

This policy applies to data collected through the Tenang Ledger website at tenangzledge.sbs and through our programme enrolment process. It is governed by Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have questions about this policy, contact us at [email protected].

2. What Personal Data We Collect

Data you provide to us

• Full name
• Email address
• Phone number (optional, if provided in the enquiry form)
• Message content submitted through our contact form
• Programme selection and any notes about your situation

Data collected automatically

• IP address and approximate geographic location
• Browser type and device information
• Pages visited and time spent on each page (via analytics cookies, if consented)
• Referral source (how you arrived at our site)

Legal basis for processing

We process your personal data on the basis of: (a) your consent, where given; (b) contractual necessity, to process your enrolment and deliver the programme; and (c) legitimate interest, to improve our website and programmes. We do not process personal data for automated decision-making or profiling.

3. How We Use Your Data

• To respond to enquiries submitted through our contact form
• To confirm programme enrolments and send pre-session materials
• To send programme-related updates (schedule changes, follow-up notes)
• To produce HR summary reports for Workplace Series clients (aggregate, non-identifiable data)
• To analyse website usage and improve content (analytics cookies only, with consent)
• To comply with our obligations under Malaysian law

We do not use your data for marketing purposes unless you have given separate, specific consent. We do not sell, rent or otherwise transfer your data to financial product providers, advertisers or brokers under any circumstances.

Retention periods

• Enquiry form data: up to 12 months, unless an enrolment follows
• Enrolment and programme records: up to 3 years after programme completion
• Analytics data: up to 26 months (in line with standard analytics practice)
• Cookie consent records: 12 months

4. Data Sharing

We share personal data only where necessary:

• Service providers: We may use third-party tools for email delivery, website hosting or analytics. These providers process data on our behalf and are bound by data processing agreements.
• Legal requirements: We will disclose data where required by Malaysian law or a lawful order from a competent authority.

We do not share your data with any financial institution, insurance provider, fund manager or financial intermediary.

5. Data Protection Measures

• Website data is transmitted over HTTPS (TLS encryption)
• Access to personal data is restricted to authorised Tenang Ledger personnel on a need-to-know basis
• We do not store payment card data — enrolment fees are processed through secure third-party payment systems
• In the event of a data breach that affects your rights, we will notify you within a reasonable time in accordance with PDPA obligations

6. Cookies

We use cookies on this website. Essential cookies are required for basic site functionality and are always active. Analytics and preference cookies are optional and are only set if you consent via the cookie notice on our homepage.

For full details on the cookies we use and how to manage them, please see our Cookie Policy.

7. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request that inaccurate or incomplete data be corrected
• Withdrawal of consent: withdraw consent for processing at any time (this does not affect processing carried out before withdrawal)
• Limit processing: request that we limit how we use your data in certain circumstances
• Complaint: lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your rights have been violated

To exercise any of these rights, email [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may include links to external resources such as Bank Negara Malaysia, the Securities Commission Malaysia and KWSP. These sites have their own privacy policies. We are not responsible for the practices of any external website. We recommend reviewing the privacy policy of any site you visit.

9. Children's Privacy

Our services and website are intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data through our website, please contact us at [email protected] and we will delete that data promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this page periodically. Continued use of our website or programmes after a change constitutes acceptance of the updated policy.

11. Contact

Data Controller: Tenang Ledger
Level 25, Menara Takaful Malaysia, No. 4, Jalan Sultan Sulaiman, 50000 Kuala Lumpur, Malaysia

Email: [email protected]
Phone: +60 3-2276 6969