Privacy Policy

1. Introduction

Duittra ("we", "us", "our") is committed to handling personal data with care and transparency. This Privacy Policy explains what information we collect when you interact with our website or attend our programmes, how we use it, and your rights in relation to it.

Duittra operates from Unit 19-08, The Vertical, No. 8 Jalan Kerinchi, Bangsar South, 59200 Kuala Lumpur, Malaysia. We are subject to the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs the processing of personal data in commercial transactions.

If you have any questions about this policy, contact us at [email protected].

2. Data We Collect

Information you provide directly

When you submit an enquiry through our website, register for a programme, or contact us, we may collect:

• Your name and email address (required for enquiries and programme registration)
• Your phone number (optional, where provided)
• The content of messages you send us

Information collected automatically

When you visit our website, standard server logs and analytics tools may collect:

• Pages visited and time spent on each
• Browser type and device information
• Referring website or search query
• IP address (not linked to personal identity in our analytics setup)

Cookies

We use cookies to maintain basic website functionality and, if you consent, to understand how visitors use our site. See our Cookie Policy for full details.

3. Legal Basis for Processing

We process personal data on the following bases under the PDPA:

• Consent: When you submit a contact form or agree to cookie use, you consent to the processing described at the point of collection.
• Legitimate interest: Responding to enquiries and improving our services represents a legitimate interest that does not override your rights.
• Contractual necessity: When you register for a programme, we process the information needed to administer that registration.

4. How We Use Your Data

We use the personal information we collect to:

• Respond to your enquiries and questions about our programmes
• Process programme registrations and send relevant programme information
• Improve the content and experience of our website and sessions
• Meet legal or regulatory obligations where required

We do not use your personal data for automated decision-making or profiling. We do not sell personal data to third parties.

5. Data Sharing

We may share personal data with trusted third-party service providers who assist us in operating our website and delivering programmes — for example, email delivery services. These providers process data only as directed by us and under data processing agreements.

We may disclose personal data if required by Malaysian law, court order, or regulatory authority. Beyond these circumstances, we do not share personal data with any external parties.

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Enquiry records: up to 12 months after the enquiry is resolved
• Programme registration records: up to 3 years for administrative purposes
• Analytics data: aggregated and anonymised, retained indefinitely

You may request deletion of your personal data at any time (see section 8).

7. Data Protection Measures

We take reasonable steps to protect personal data from unauthorised access, loss, or misuse:

• Data in transit is protected using HTTPS/TLS encryption
• Access to personal data is limited to staff with a specific need for it
• Our website and hosting infrastructure is reviewed periodically for security
• In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required under the PDPA

8. Your Rights

Under the PDPA and general data protection principles, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data, subject to any legal retention requirements
• Withdraw consent at any time where consent is the legal basis for processing
• Object to processing based on legitimate interest in circumstances where your rights override ours
• Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been breached

To exercise any of these rights, email [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently before sharing personal information with them.

10. Children's Privacy

Our programmes and services are designed for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us at [email protected] and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised. Continued use of our website after changes are posted indicates acceptance of the updated policy. For significant changes, we will take steps to inform registered programme participants directly.

12. Contact

For any privacy-related questions or to exercise your rights:

• Email: [email protected]
• Address: Unit 19-08, The Vertical, No. 8 Jalan Kerinchi, Bangsar South, 59200 Kuala Lumpur