Privacy Policy

1. Introduction

Tabungo ("we", "us", "our") is committed to protecting the personal data of everyone who contacts us or attends our programmes. This policy explains what data we collect, why we collect it, how we use it, and what rights you have under Malaysia's Personal Data Protection Act 2010 (PDPA 2010).

This policy covers information collected through our website at tabungo.live, through our contact form, by telephone, and through programme enrolment. If you have questions, please contact us at [email protected].

2. Data We Collect

When you enquire about or enrol in a Tabungo programme, we may collect:

• Full name
• Email address
• Phone number (if provided)
• Enquiry or message content
• Programme attendance records

Our website may also collect standard browser and usage data through cookies. See our Cookie Policy for details.

3. Legal Basis for Processing

We process your data on the following bases under PDPA 2010:

• Consent: when you submit an enquiry form or register for a programme
• Legitimate interest: to manage programme logistics and respond to enquiries
• Contractual necessity: to deliver programmes you have enrolled in

4. How We Use Your Data

• To respond to enquiries and provide programme information
• To process programme enrolment and manage attendance
• To send session reminders and follow-up materials related to your programme
• To improve our programmes based on feedback
• To comply with legal obligations under Malaysian law

We do not use your data for marketing unrelated to your enquiry or enrolment, and we do not sell your data to any third party.

5. Data Retention

We retain personal data for as long as reasonably necessary for the purposes outlined above:

• Enquiry records: up to 12 months from last contact if no enrolment follows
• Programme enrolment records: up to 3 years from the programme date
• Financial records (if applicable): as required by Malaysian tax law

After the applicable retention period, data is securely deleted or anonymised.

6. Data Security

We take reasonable steps to protect your personal data from unauthorised access, loss, or misuse. These measures include:

• Secure storage of digital records with restricted access
• Physical security measures at our Kuala Lumpur office
• Staff awareness of data handling responsibilities

If we become aware of a data breach that affects your rights, we will notify you and the relevant authority as required under PDPA 2010.

7. Third-Party Services

We may use third-party services to operate our website, including web hosting and analytics tools. These providers are not permitted to use your data for purposes other than those we specify. Our website may use Google Analytics to understand visitor behaviour in aggregate; this data is not linked to your identity.

We are not responsible for the privacy practices of external websites linked from our site.

8. Cookies

Our website uses cookies to function correctly and to improve the visitor experience. For a full explanation of cookies used and how to manage them, please see our Cookie Policy.

9. Your Rights

Under PDPA 2010, you have the following rights regarding your personal data:

• Right of access: to request a copy of the data we hold about you
• Right to correct: to request correction of inaccurate or incomplete data
• Right to withdraw consent: to withdraw consent to processing at any time
• Right to limit processing: to request we limit how we use your data

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days. Some requests may require identity verification before we can proceed.

If you have a concern about how your data has been handled, you may contact the Personal Data Protection Commissioner of Malaysia (PDPC) at www.pdp.gov.my.

10. Children's Privacy

Our programmes are designed for adults aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page will reflect the most recent revision. We encourage you to review this policy periodically. Continued use of our website or services after any changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related enquiries, please contact:

• Email: [email protected]
• Address: Level 5, Wisma Genting, 28 Jalan Sultan Ismail, 50250 Kuala Lumpur
• Phone: +60 3-2118 6493