Privacy Policy

1. Data Controller

The data controller for personal data collected through this website and our services is:

Wexar
Lebuhraya Sultan Iskandar 18, 11700 Gelugor, Pulau Pinang, Malaysia
Email: [email protected]

2. What Data We Collect

2.1 Data you provide directly

• Full name and work email when you submit the contact form
• Phone number if provided voluntarily in the form
• Message content submitted through the contact form
• Any information shared during a discovery session for the Bespoke Planning Model

2.2 Data collected automatically

• Browser type and version
• Pages visited and time spent on each page
• Referring URL
• General geographic region (country or state level, not precise location)
• Cookie preferences as stored in your browser's local storage

We do not collect payment card details directly. Any payment processing is handled by a third-party payment provider operating under its own privacy terms.

3. Legal Basis for Processing

• Consent: For analytics and marketing cookies where you have given explicit consent through the cookie banner.
• Legitimate interest: For processing enquiries submitted through the contact form, responding to questions, and maintaining records of commercial correspondence.
• Contract performance: For delivering purchased resources and associated support, including discovery sessions for the Bespoke Planning Model.
• Legal obligation: For retaining records required under Malaysian law.

4. How We Use Your Data

• Responding to enquiries and requests submitted through the contact form
• Delivering purchased resources and post-delivery support
• Conducting discovery sessions and preparing custom planning models
• Notifying prior purchasers of significant updates to standard resources
• Understanding how the website is used to improve its structure and content
• Complying with legal obligations

We do not use your data for unsolicited marketing and do not sell personal data to third parties.

5. Data Retention

• Contact form submissions: retained for 24 months from the date of enquiry.
• Discovery session records (Bespoke Planning Model): retained for the duration of the engagement plus 12 months, then deleted.
• Purchase records: retained for 7 years to meet Malaysian accounting requirements.
• Analytics data: aggregated and anonymised; no personal identifiers retained beyond 26 months.

6. Data Sharing

We do not share personal data with third parties except in the following limited circumstances:

• Analytics providers: Anonymised usage data may be processed by analytics tools such as Google Analytics. These providers are subject to their own privacy terms and data processing agreements.
• Payment processors: Where payment is made through a third-party gateway, only the data required to complete the transaction is shared.
• Legal requirement: Where disclosure is required by Malaysian law or a lawful order from a competent authority.

7. Data Protection Measures

• Website data transmitted over HTTPS (TLS encryption)
• Contact form submissions stored in an access-controlled environment
• Discovery session notes kept in access-restricted internal storage
• No personal data stored in publicly accessible locations
• Staff with access to personal data are limited to those with a direct operational need

8. Cookies

This website uses cookies for site functionality, analytics, and preference storage. You can manage your cookie preferences at any time through the cookie banner or our Cookie Policy page.

9. Your Rights Under PDPA (Malaysia)

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent for data processing based on consent (this will not affect prior lawful processing)
• Request that we stop processing your data for direct marketing purposes
• Lodge a complaint with the Personal Data Protection Commissioner (Malaysia)

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Children's Privacy

Our services are directed at professional planning teams and business users. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently received data from a minor, please contact us and we will delete it promptly.

11. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently before providing any personal data.

12. Policy Updates

We may update this policy to reflect changes in our data practices or applicable law. Significant changes will be noted by updating the "Last Updated" date at the top of this page. Continued use of the website after changes are published constitutes acceptance of the updated policy.

13. Contact

For any privacy-related questions or to exercise your rights:
Wexar · Lebuhraya Sultan Iskandar 18, 11700 Gelugor, Pulau Pinang, Malaysia
Email: [email protected]
Phone: +60 4-384 5267