Privacy Policy

Provara ("we", "us", "our") is an education provider based in Kuala Lumpur, Malaysia. We offer structured programmes on Islamic finance concepts and principles. This Privacy Policy explains how we collect, use and protect personal information from individuals who use our website and enquire about or enrol in our programmes.

We are committed to handling personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using our website or submitting information to us, you acknowledge the practices described in this policy.

For data-related enquiries, contact us at [email protected].

We collect the following categories of personal data:

• Identification data: Full name
• Contact data: Email address, phone number (if provided)
• Enquiry content: The text of messages you submit through our contact form
• Enrolment data: Programme selection, attendance records, and payment confirmation
• Technical data: IP address, browser type, and pages visited (collected automatically through analytics cookies where consent is given)

We collect this information when you submit an enquiry form, contact us directly, or enrol in a programme.

Legal basis for processing: We process your data on the basis of your consent (when you submit a form), contract performance (when you enrol in a programme), and legitimate interests (to improve our services and respond to enquiries). Where we rely on consent, you may withdraw it at any time.

Retention periods: Enquiry data is retained for 12 months. Enrolment records are retained for 7 years in accordance with Malaysian statutory requirements. Analytics data is retained for 26 months.

We use personal data for the following purposes:

• Responding to your enquiries about our programmes
• Processing programme enrolments and managing attendance
• Sending administrative communications related to your enrolment
• Collecting and acting on participant feedback
• Maintaining records as required by applicable law
• Improving our website and programmes (using aggregate, anonymised analytics data)

We do not use your personal data for automated decision-making or profiling. We do not sell your personal data to third parties. We do not share your data with financial institutions or product providers.

Marketing communications: We do not send marketing emails. Administrative communications related to your enquiry or enrolment are not marketing.

We share personal data only in the following limited circumstances:

• Service providers: We use third-party tools for website hosting and analytics. These providers are bound by data processing agreements and do not use your data for their own purposes.
• Legal requirements: We may disclose data to regulatory authorities or courts where required by Malaysian law.
• Business transfers: In the event of a merger or acquisition, personal data may be transferred as part of that process, subject to continued protection under equivalent standards.

We do not transfer personal data outside Malaysia unless adequate protections are in place.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These include:

• Encrypted data transmission via HTTPS
• Access controls limiting who within our organisation can access personal data
• Secure storage practices for both digital and physical records
• Regular review of our security practices

In the event of a personal data breach that is likely to result in high risk to individuals, we will notify affected parties as required under Malaysia's PDPA.

Our website uses cookies to operate correctly and, where you consent, to understand how the site is used. Cookie types include essential cookies (always active), analytics cookies (with consent), and preference cookies (with consent).

You can manage your cookie preferences at any time through our Cookie Policy page. Withdrawing analytics consent does not affect the site's core functionality.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that inaccurate data be corrected.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to limit processing: In certain circumstances, you may request that we limit how we use your data.
• Right to prevent processing for direct marketing: You may object to your data being used for marketing purposes at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).