Privacy Policy

1. Who We Are

Sereva is a retirement information and education provider registered in Malaysia. Our registered address is Level 9, Menara Bumi, Jalan Sultan Ismail, 50250 Kuala Lumpur, Malaysia. For privacy-related enquiries, contact us at [email protected].

2. What Personal Data We Collect

We may collect the following categories of personal data:

• Contact details: your name, email address, and phone number when you submit our contact form or register for a programme
• Enquiry content: the message or questions you submit through our contact form
• Session-related information: attendance records, programme preferences, and notes made during sessions at your direction
• Website usage data: pages visited, time on page, browser type, and general location (country/city level) via analytics cookies, if you have consented to these

We do not collect financial account details, identity document numbers, or any sensitive personal data during our normal operations. Documents you bring to in-person workshops remain in your possession at all times; we do not copy or retain them.

3. How We Collect Your Data

• Contact form submissions on our website
• Direct email or telephone contact you initiate
• Programme registration (in-person or by email)
• Cookies and analytics tools on our website, subject to your consent (see Section 8)

4. Legal Basis for Processing

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, we process your personal data on the following grounds:

• Contract: processing necessary to communicate with you and deliver the programme you have requested
• Legitimate interests: responding to enquiries, maintaining session records, and improving our educational offerings
• Consent: for optional analytics and marketing cookies, where you have given explicit consent via our cookie banner

5. How We Use Your Personal Data

• To respond to your enquiries and questions
• To confirm your programme booking and provide session details
• To send follow-up session notes or post-programme email support
• To maintain attendance and programme records
• To improve the quality and relevance of our educational content
• To comply with applicable Malaysian legal requirements

We do not use your personal data for automated decision-making or profiling.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share data only in these limited circumstances:

• Service providers: hosting, email delivery, and analytics providers who process data on our behalf under confidentiality agreements
• Legal obligations: where required by Malaysian law, court order, or regulatory authority

We do not share data with financial institutions, insurance providers, or any third parties for marketing purposes.

7. Data Retention

• Enquiry and contact records: retained for 12 months from last contact, then deleted
• Programme attendance records: retained for 3 years for administrative purposes, then deleted
• Email support correspondence: retained for 12 months from last exchange
• Analytics data: retained in aggregated, non-identifiable form; individual session data retained for up to 14 months as standard

8. Cookies

Our website uses cookies. Essential cookies are required for the site to function and cannot be disabled. Optional analytics and preference cookies are only placed if you accept them via our cookie banner. For full details, see our Cookie Policy.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, or loss. These include:

• HTTPS encryption for all website communication
• Access controls limiting staff access to personal data on a need-to-know basis
• Secure email handling for programme correspondence

No transmission over the internet is entirely risk-free. If you believe your data has been compromised, contact us immediately at [email protected].

10. Your Rights Under the PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for processing based on consent (this will not affect processing before withdrawal)
• Request that we cease processing your data for marketing or direct contact purposes

To exercise any of these rights, email us at [email protected]. We will respond within 21 days. We may need to verify your identity before processing your request.

11. Third-Party Links

Our website may contain links to external websites — for example, the relevant Malaysian official bodies. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies when you visit them.

12. Children

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this policy from time to time. Any material changes will be noted at the top of this page with a revised "Last Updated" date. Continued use of our website or services after an update constitutes acceptance of the revised policy.

14. Contact for Privacy Matters

For any privacy-related question or request:

• Email: [email protected]
• Post: Sereva, Level 9, Menara Bumi, Jalan Sultan Ismail, 50250 Kuala Lumpur, Malaysia
• Phone: +60 3 2166 8340 (office hours)

For complaints that we have not addressed to your satisfaction, you may also contact the Department of Personal Data Protection Malaysia (JPDP) — the national supervisory authority for the PDPA.