Privacy Policy
This policy explains how Fundora collects, uses, and safeguards your personal data in accordance with the Personal Data Protection Act 2010 (Malaysia).
Last Updated: 5 April 2026
Fundora ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy outlines the types of information we collect, the purposes for which it is used, how it is stored, and your rights as a data subject. By using our website at fundorax.live or enquiring about our programs, you acknowledge that you have read and understood this policy.
1. Data Controller
The data controller responsible for your personal data is:
Fundora
12 Jalan Wong Ah Fook
80000 Johor Bahru, Johor, Malaysia
Email: [email protected]
Phone: +60 7-3864 2917
2. Personal Data We Collect
We may collect the following categories of personal data:
- Contact information: name, email address, phone number
- Enquiry content: program interests, questions, and messages submitted through our contact form
- Technical data: IP address, browser type, device type, pages visited, time and date of visits (collected via cookies and server logs)
- Communication records: records of correspondence with us by email, phone, or form submission
We do not collect sensitive personal data such as financial account numbers, identity card details, or medical information through our website.
3. How We Collect Your Data
We collect personal data through the following means:
- Contact and enquiry forms on our website
- Direct communications via phone or email
- Automatic technical data collection via cookies and analytics tools when you visit our website
- Program registration and onboarding processes
4. Purposes of Processing
We use your personal data for the following purposes:
- To respond to your enquiries and provide information about our programs
- To process program enrolments and manage participant records
- To send program-related communications including schedules, materials, and updates
- To improve our website's functionality, content, and user experience
- To comply with legal and regulatory obligations applicable in Malaysia
- To maintain records of communications for quality and compliance purposes
We do not use your personal data for automated decision-making or profiling.
5. Legal Basis for Processing
Under the Personal Data Protection Act 2010 (PDPA), we process your personal data on the following bases:
- Consent: where you have provided explicit consent, such as submitting an enquiry form or agreeing to receive communications
- Contractual necessity: where processing is required to fulfil a program enrolment or service agreement
- Legitimate interests: where processing is necessary for our legitimate business interests, provided these do not override your rights
- Legal obligation: where required by applicable Malaysian law
6. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data to third parties. We may share data with:
- Service providers: third-party vendors who assist with website hosting, email delivery, or analytics, bound by data processing agreements
- Legal authorities: if required to do so by law, court order, or lawful governmental request
Any third parties who receive your data are required to handle it in accordance with applicable data protection laws.
7. Data Retention
We retain personal data only for as long as is necessary for the purposes outlined in this policy or as required by law. Enquiry records are typically retained for 12 months. Program participant records are retained for a period of 7 years in compliance with Malaysian tax and business record-keeping requirements, after which they are securely deleted.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include secure server infrastructure, encrypted data transmission (HTTPS), and access controls limiting data access to authorised personnel only.
No method of data transmission over the internet is entirely secure. While we take reasonable precautions, we cannot guarantee absolute security.
9. Your Rights
Under the PDPA and applicable data protection principles, you have the following rights:
- Access: the right to request a copy of the personal data we hold about you
- Correction: the right to request correction of inaccurate or incomplete data
- Withdrawal of consent: the right to withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal
- Objection: the right to object to processing based on legitimate interests
- Erasure: the right to request deletion of your data where it is no longer necessary for the purposes for which it was collected
To exercise any of these rights, please contact us at [email protected] or call +60 7-3864 2917. We will respond to verified requests within 21 days.
10. Cookies
Our website uses cookies to improve functionality and analyse usage. For detailed information on the cookies we use and how to manage them, please refer to our Cookie Policy.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be published on this page with a revised "Last Updated" date. We encourage you to review this page periodically.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:
Fundora
12 Jalan Wong Ah Fook, 80000 Johor Bahru
Email: [email protected]
Phone: +60 7-3864 2917
Monday – Friday: 9:00 AM – 6:00 PM | Saturday: 10:00 AM – 2:00 PM