Privacy Policy

1. Introduction

keysstonepllus is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you participate in our financial education programs or interact with our services.

For questions about this policy or our data practices, contact us at [email protected].

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when you register for programs, submit inquiries, or communicate with us, including:

• Name and contact details (email address, phone number, mailing address)
• Program preferences and areas of interest
• Payment information (processed securely through third-party payment processors)
• Communications with our team
• Feedback, reviews, and survey responses

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information through cookies and similar technologies:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, navigation patterns)
• Referral sources and exit pages
• Cookie identifiers and local storage data

3. How We Use Your Information

We use collected information for the following purposes:

• Program delivery and administration (enrollment, scheduling, materials distribution)
• Communication about programs, sessions, and updates
• Payment processing and financial record keeping
• Responding to inquiries and providing customer support
• Improving our programs based on feedback and usage patterns
• Website analytics and service optimization
• Compliance with legal obligations
• Marketing communications (with your consent, where required)

Legal Basis for Processing

We process personal information based on:

• Contractual necessity (to deliver programs you have enrolled in)
• Legitimate interests (to improve our services and communicate relevant information)
• Your consent (for marketing communications and certain data uses)
• Legal compliance (to meet Malaysian regulatory requirements)

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

We share information with trusted service providers who assist in operating our business:

• Payment processors for transaction handling
• Email service providers for communications
• Cloud storage providers for data hosting
• Analytics services for website performance monitoring

These providers are contractually obligated to protect your information and use it only for specified purposes.

4.2 Legal Requirements

We may disclose information when required by Malaysian law, legal process, or to protect our rights, property, or safety, or that of our participants and the public.

5. Data Security

We implement appropriate technical and organizational measures to protect personal information:

• Encryption of data in transit and at rest
• Secure access controls and authentication
• Regular security assessments and updates
• Staff training on data protection practices
• Incident response procedures

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy:

• Participant records: Duration of program plus seven years for financial and regulatory compliance
• Communication records: Three years from last interaction
• Website analytics: Two years
• Marketing preferences: Until you opt out or request deletion

7. Cookies and Tracking

Our website uses cookies and similar technologies. For detailed information about our cookie practices, see our Cookie Policy.

You can control cookie preferences through your browser settings or our cookie management tool.

8. Your Rights

Under Malaysian Personal Data Protection Act (PDPA) and applicable laws, you have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete data
• Withdrawal of Consent: Withdraw consent for specific data processing activities
• Data Portability: Receive your data in a structured, machine-readable format
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Object: Object to certain processing activities
• Restrict Processing: Request limitation of data processing

To exercise these rights, contact us at [email protected]. We will respond within 21 days as required by Malaysian law.

9. Marketing Communications

We send marketing communications only with your consent. You may opt out at any time through:

• Unsubscribe links in email communications
• Contacting us at [email protected]
• Adjusting preferences in your account settings (if applicable)

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any information.

11. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect information from children under 18. If we become aware of such collection, we will delete the information promptly.

12. International Data Transfers

Your information is primarily processed and stored in Malaysia. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your information.

13. Changes to This Policy

We may update this Privacy Policy periodically. Changes become effective when posted to our website. We will notify you of significant changes through email or prominent website notice. Continued use of our services after changes indicates acceptance.

14. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal information: