Legal
Privacy Policy
This policy explains how Cashwise collects, uses, stores, and protects your personal information. It is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Last updated: 1 January 2026 ◆ Version 1.0
1. Who we are
Cashwise is a financial education provider based in Kuala Lumpur, Malaysia. We operate from 18 Jalan Raja Chulan, 50200 Kuala Lumpur.
We offer structured educational programs designed to help individuals and families develop a clearer understanding of financial concepts. We are an education provider, not a licensed financial adviser. Nothing in our programs or communications constitutes personal financial advice.
Data Controller: Cashwise
Address: 18 Jalan Raja Chulan, 50200 Kuala Lumpur
Email: [email protected]
Phone: +60 3-2047 8316
2. What personal data we collect
We only collect personal data that is necessary for us to deliver our services and communicate with you. This may include:
- Contact information — your full name, email address, and phone number, provided when you submit an enquiry form or register for a program.
- Program participation data — attendance records, program preferences, and session feedback, collected as part of program delivery.
- Payment information — processed securely through our payment provider; we do not store full card details on our systems.
- Website usage data — anonymised analytics information including pages visited, session duration, and referral source, collected via cookies (subject to your consent).
- Communication records — records of enquiries and correspondence exchanged between you and Cashwise.
We do not knowingly collect personal data from individuals under the age of 18 without verifiable parental consent.
3. How we use your personal data
We process your personal data for the following purposes, each supported by a lawful basis under the PDPA:
- Program delivery — to organise sessions, share materials, and maintain attendance records. Basis: contractual necessity.
- Customer communications — to respond to enquiries, send program confirmations, and provide follow-up information. Basis: contractual necessity or legitimate interest.
- Service improvement — to analyse feedback and website usage in order to improve our programs and website. Basis: legitimate interest.
- Marketing communications — to send you information about programs or updates that may be of interest. Basis: consent. You may withdraw consent at any time.
- Legal compliance — where required to comply with applicable Malaysian law or regulatory requirements. Basis: legal obligation.
We do not use your personal data for automated decision-making that produces legal or similarly significant effects.
4. Sharing your personal data
We do not sell or rent personal data to third parties. We may share data in the following limited circumstances:
- Service providers — third-party vendors who assist us with email delivery, payment processing, website hosting, or analytics. These providers are bound by data processing agreements and may only use your data to perform services on our behalf.
- Legal requirements — where disclosure is required by law, court order, or regulatory authority.
- Business transfers — in the event of a merger, acquisition, or business transfer, personal data may be transferred as part of that process. We would notify you in advance where practicable.
Where data is transferred outside Malaysia, we take reasonable steps to ensure it receives equivalent protection.
5. How long we keep your data
We retain personal data only for as long as necessary for the purpose it was collected, or as required by law:
- Contact and enquiry data — up to 2 years from the date of last contact.
- Program participation records — up to 5 years from program completion, for quality assurance and record-keeping purposes.
- Payment records — as required under Malaysian financial regulations, typically 7 years.
- Website analytics data — anonymised data retained for up to 26 months in aggregate analytics platforms.
When data is no longer needed, we securely delete or anonymise it.
6. Cookies
Our website uses cookies to enhance your browsing experience and to help us understand how our site is used. Detailed information about the cookies we use, their purpose, and how to manage them is available in our Cookie Policy.
Non-essential cookies (analytics, marketing) are only placed with your explicit consent. You may update your cookie preferences at any time using the cookie settings link in our website footer.
7. Your rights
Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:
- Right of access — you may request a copy of the personal data we hold about you.
- Right to correction — you may request that we correct inaccurate or incomplete data.
- Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
- Right to limit processing — in certain circumstances, you may request that we limit the processing of your data.
- Right to prevent processing for direct marketing — you may opt out of receiving marketing communications at any time.
To exercise any of these rights, please contact us at [email protected] or call +60 3-2047 8316. We will respond within 21 days.
8. Data security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:
- HTTPS encryption for all data transmitted through our website.
- Access controls limiting personal data to authorised staff only.
- Regular review of our data handling practices.
- Secure deletion procedures for data that is no longer required.
No method of electronic transmission or storage is entirely secure. We will notify you promptly in the event of a data breach that affects your rights or interests.
9. Third-party links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any website you visit through a link on our site.
10. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The "Last updated" date at the top of this page indicates when it was most recently revised. Where changes are significant, we will take reasonable steps to notify you.
Questions about this policy?
If you have any questions about how we handle your personal data, or if you wish to exercise your rights under the PDPA, please don't hesitate to get in touch.
Related documents