Privacy Policy

1. Introduction

Coinweft ("we", "us", "our") is committed to handling personal information responsibly. This Privacy Policy explains what information we collect, why we collect it, how we use it and the rights available to you under Malaysian law.

This policy applies to information collected through our website at https://coinweftty.cyou and through our course enrolment processes. For questions about this policy, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal information:

• Contact details: name, email address and phone number, provided when you submit an enquiry form or register for a programme.
• Programme participation data: attendance records and completion information relevant to the course you attend.
• Communications: emails and messages you send to us in connection with our programmes or enquiries.
• Website usage data: pages visited, time spent, browser type and referring URL, collected via analytics cookies when you consent.

We do not collect sensitive personal data such as financial account numbers, identity card copies or health information.

3. Legal Basis for Processing

We process your personal information on the following bases under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: for optional analytics and marketing cookies, and for marketing communications.
• Contract performance: to deliver the programme or service you have enrolled in or enquired about.
• Legitimate interests: to maintain records, respond to enquiries and improve our programmes, where this does not override your rights.

4. How We Use Your Information

• Responding to enquiries and providing information about our programmes
• Processing enrolments and managing your participation in courses
• Sending programme-related communications, including session reminders and materials
• Improving our website and course content based on aggregate usage patterns
• Complying with applicable legal obligations

We do not use your personal information to make automated decisions that affect you.

5. Data Sharing

We do not sell personal information. We may share information with:

• Service providers: email and hosting platforms that process data on our behalf under strict confidentiality agreements.
• Analytics providers: anonymised usage data shared with analytics services where you have consented to analytics cookies.
• Legal requirements: where disclosure is required by Malaysian law or a competent authority.

6. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy:

• Enquiry records: up to 12 months from the date of enquiry if no enrolment follows
• Programme participation records: up to 3 years from programme completion
• Financial transaction records: as required by Malaysian tax and commercial law (typically 7 years)
• Website analytics data: up to 26 months in aggregate form

7. Data Protection Measures

We take reasonable precautions to protect personal information against unauthorised access, use or disclosure. These include:

• HTTPS encryption for all website data in transit
• Access controls limiting who within our organisation can view personal information
• Regular review of third-party service providers' data handling practices

In the event of a data breach affecting your rights, we will notify you and the relevant authority as required under the PDPA.

8. Cookies

Our website uses cookies for essential functionality and, with your consent, for analytics purposes. You can manage your cookie preferences at any time through our Cookie Policy page.

9. Your Rights

Under the PDPA and applicable data protection principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate personal information
• Withdraw consent for data processing based on consent (including marketing communications)
• Request deletion of personal information where we have no overriding legal obligation to retain it
• Object to processing based on legitimate interests

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

11. Children

Our programmes are intended for adults aged 18 and above. We do not knowingly collect personal information from minors. If you believe we have inadvertently received information from a person under 18, please contact us and we will take appropriate action.

12. Policy Changes

We may update this policy periodically. Material changes will be communicated via our website. Continued use of our services after changes take effect constitutes acceptance of the updated policy.

13. Contact

For privacy-related enquiries or to exercise your data rights: