Privacy Policy

1. Introduction

Vestara ("we", "our", "us") is the operator of this website and the provider of retirement document organisation workshops and sessions at 18 Jalan Tun Razak, 50400 Kuala Lumpur, Wilayah Persekutuan, Malaysia.

This Privacy Policy describes how we collect, use, and protect information provided to us through this website and in connection with our services. It applies to all visitors to this website and to individuals who contact us or register for our programmes.

We take the handling of personal information seriously and operate in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. If you have questions about this policy, please contact us at [email protected].

2. Personal Data We Collect

We collect personal data in the following circumstances:

Through the contact form on this website:

• Name (required)
• Email address (required)
• Phone number (optional)
• Message content you submit (optional)

Automatically when you visit this website:

• Browser type and version
• IP address (anonymised where possible)
• Pages visited and time on site (via analytics cookies, if consented)
• Referral source

Legal basis for processing:

• Consent — where you voluntarily submit information via our contact form
• Legitimate interest — in operating and improving the website
• Contract — when you register for a Vestara programme

Retention: Contact enquiry data is retained for up to 24 months. Session booking records are retained for 7 years for administrative purposes.

3. How We Use Your Information

We use the information you provide to:

• Respond to your enquiries about Vestara programmes
• Process registrations and manage session bookings
• Send you information about the session you have registered for
• Improve this website and our service offerings based on usage patterns
• Comply with applicable Malaysian legal requirements

Marketing communications: We will not send you promotional emails unless you have explicitly opted in. You may withdraw consent at any time by contacting [email protected].

Third-party sharing: We do not sell, rent, or trade your personal data. We may share data with service providers who assist us in operating this website (such as web hosting providers), subject to appropriate data processing agreements.

4. How We Protect Your Data

• This website is served over HTTPS. Data submitted via the contact form is encrypted in transit.
• Access to personal data held by Vestara is restricted to staff who need it to respond to enquiries or manage session bookings.
• We do not store financial payment data on our systems.
• In the event of a data breach that poses a risk to individuals, we will notify affected persons and the relevant authority as required by Malaysian law.

5. Cookies

This website uses cookies to function and to understand how it is used. We categorise cookies as follows:

• Essential cookies — required for the website to operate. These cannot be disabled.
• Analytics cookies — used to understand visitor behaviour. These are optional and require your consent.
• Preference cookies — used to remember your consent choices. Optional.

You can manage your cookie preferences at any time via our Cookie Policy page.

6. Your Rights Under Malaysian PDPA

As a data subject under the Personal Data Protection Act 2010, you have the following rights:

• The right to access personal data we hold about you
• The right to request correction of inaccurate data
• The right to withdraw consent to processing at any time
• The right to limit the processing of your personal data
• The right to enquire about our data processing practices

To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days. If you are not satisfied with our response, you may submit a complaint to the Department of Personal Data Protection Malaysia (JPDP).

7. Links to Other Websites

This website may contain links to external websites. Vestara is not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any external sites you visit.

8. Children's Privacy

Our services are intended for adults. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently collected such data, please contact us so we can remove it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of this website after changes are posted constitutes acceptance of the revised policy. For significant changes, we will make reasonable efforts to notify registered users.

10. Contact for Data Matters

For any queries about this Privacy Policy or how we handle your personal data, please contact: