Privacy Policy

1. Introduction

Mendric ("we", "us", "our") is a financial education provider operating from 38 Jalan SS 21/35, 47400 Damansara Utama, Petaling Jaya, Selangor, Malaysia. This Privacy Policy explains how we collect, use, store, and protect the personal data of individuals who interact with our website and enrol in our programmes.

We take the protection of personal data seriously. Our programmes require that we hold certain contact details for each participant, and this policy explains how we handle that information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal data in the following circumstances:

• Enquiry form: When you submit an enquiry through our website, we collect your name, email address, and optionally your phone number and a message.
• Programme enrolment: When you enrol in a programme, we collect your name, contact email, and phone number for coordination purposes.
• Website analytics: We may use analytics cookies to understand how visitors use our site. No personally identifiable information is linked to analytics data without your consent.

We do not collect sensitive personal data such as identity card numbers, financial account details, or health information.

3. Legal Basis for Processing

Under Malaysia's Personal Data Protection Act 2010, we process personal data on the following bases:

• Consent: When you submit a website enquiry form, you provide consent for us to use your contact details to respond to your enquiry.
• Contractual necessity: When you enrol in a programme, processing your contact details is necessary to fulfil the enrolment and deliver programme communications.
• Legitimate interests: We may use aggregated, non-identifiable data to improve our website and programme offerings.

4. How We Use Your Data

• To respond to enquiries submitted through the website contact form.
• To communicate programme schedules, session reminders, and workbook collection arrangements.
• To provide written workbook feedback to enrolled participants.
• To maintain records of programme attendance for our internal use.

We do not use personal data for automated decision-making or profiling. We do not use your contact details for marketing unless you have explicitly requested information about future programmes.

5. Data Sharing

We do not sell, rent, or trade personal data to third parties. We may share data with:

• Service providers: IT and hosting service providers who support our website operations, under contractual data protection obligations.
• Legal authorities: If required by Malaysian law or a court order.

We do not transfer personal data outside Malaysia except where required by the above circumstances.

6. Data Retention

We retain personal data for the following periods:

• Enquiry data: Up to 12 months after the enquiry, unless enrolment follows.
• Participant data: Up to 24 months after programme completion, for programme records and alumni correspondence if requested.
• Analytics data: Aggregated and anonymised; retained indefinitely in non-identifiable form.

After these periods, personal data is deleted from our systems.

7. Data Protection Measures

We maintain the following safeguards to protect personal data:

• Website contact forms are submitted over encrypted HTTPS connections.
• Participant records are stored in password-protected systems accessible only to Mendric staff involved in programme delivery.
• Physical workbooks are held at our Damansara Utama premises and returned to participants at programme close.
• In the event of a data breach affecting your personal data, we will notify affected individuals within a reasonable period and take steps to mitigate harm.

8. Cookies

Our website uses cookies to enable basic functionality and, where consented to, to analyse website usage. Please refer to our Cookie Policy for full details of the cookies we use and how to manage your preferences.

9. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that we correct inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
• Right to object: You may object to processing for purposes other than contractual necessity.
• Right to erasure: You may request that we delete your personal data, subject to legal retention obligations.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 calendar days.

If you are dissatisfied with our response, you may lodge a complaint with the Personal Data Protection Department Malaysia (JPDP) at www.pdp.gov.my.

10. Third-Party Links

Our website may contain links to external websites. Mendric is not responsible for the privacy practices or content of those sites. We encourage you to read the privacy notices of any external sites you visit.

11. Children's Privacy

Mendric's programmes are designed for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that data from a minor has been submitted, we will delete it promptly.

12. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted on this page with a revised "Last Updated" date. Continued use of our website after updates constitutes acceptance of the revised policy.

13. Contact

For any privacy-related questions or to exercise your data rights:

• Email: [email protected]
• Post: Mendric, 38 Jalan SS 21/35, 47400 Damansara Utama, Petaling Jaya, Selangor, Malaysia