S
Sahaja
Legal

Privacy Policy

Last updated: April 2025

This Privacy Policy explains how Sahaja ("we", "us", "our") collects, uses, stores, and protects personal information when you visit our website or enquire about or enrol in our financial education programmes. We are committed to handling your information with care, transparency, and respect.

By using our website or submitting your details through our contact form, you acknowledge this policy. If you have any questions, please contact us at [email protected].

1. Who We Are

Sahaja is a financial education provider based at Level 9, Menara KEN TTDI, 37 Jalan Burhanuddin Helmi, Taman Tun Dr Ismail, 60000 Kuala Lumpur, Malaysia. We provide general financial education programmes for women. We do not provide regulated financial advice.

2. Information We Collect

We may collect the following types of personal information:

  • Name and contact details (email address, phone number) when you submit an enquiry through our contact form
  • Programme preferences or questions you include in your message
  • Technical data such as browser type, IP address, and pages visited, collected automatically via standard web server logs or analytics tools
  • Communication history if you correspond with us by email

We do not collect sensitive financial data, payment card details, or personal identification numbers through our website.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To respond to your enquiry and provide information about our programmes
  • To process enrolment and manage your participation in a programme
  • To send you relevant updates about sessions, schedules, or materials you have enrolled for
  • To improve our website and understand how visitors use it
  • To comply with our legal obligations under Malaysian law, including the Personal Data Protection Act 2010 (PDPA)

We do not use your personal data for automated decision-making or profiling.

4. Legal Basis for Processing

We process your personal data on the basis of your consent (when you submit a form), legitimate interest (to respond to enquiries and improve our services), and contractual necessity (to manage enrolment and deliver programmes you have signed up for). You may withdraw consent at any time by contacting us.

5. Sharing of Information

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data with:

  • Service providers who support our operations (such as email or website hosting), subject to confidentiality obligations
  • Regulatory or legal authorities if required by law

All such parties are required to handle your data with appropriate care and only for the purposes we specify.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law. Enquiry data from people who do not proceed with enrolment is generally held for up to 12 months. Enrolment and programme records may be retained for up to 7 years for administrative and legal purposes.

7. Your Rights

Under the Personal Data Protection Act 2010 and applicable data protection principles, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data where it is no longer necessary
  • Withdraw consent for processing where consent is the legal basis
  • Object to processing for direct marketing purposes

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies

Our website uses cookies to improve your experience. Please refer to our Cookie Policy for full details of how we use cookies and how you can manage your preferences.

9. Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. However, no transmission over the internet is entirely secure, and we cannot guarantee absolute security.

10. Children

Our programmes are designed for adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently received data from a minor, please contact us so we can delete it.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. The date at the top of this page indicates when it was last revised. Continued use of our website following any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please reach us at: