LEGAL
Privacy Policy
Last Updated: 18 July 2025 | Effective Date: 18 July 2025
Duit Lantern ("we", "us", "our") is committed to protecting your personal data. This policy explains how we collect, use and safeguard information provided through our website and sessions, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Please read it before using our services.
1. Data Controller
Duit Lantern
Level 3, Dialog Tower, No. 15, Jalan PJU 7/5, Mutiara Damansara, 47810 Petaling Jaya, Selangor Darul Ehsan, Malaysia
Data privacy enquiries: [email protected]
2. Personal Data We Collect
We collect only the personal data necessary to provide our session services:
- Contact form data: Full name, email address, phone number (optional), and any message you submit.
- Session preparation data: Financial context and personal circumstances you share voluntarily before or during a session.
- Technical data: IP address, browser type, pages visited and time spent on site, collected via analytics cookies where consent is given.
- Payment data: Transaction references only. Full payment details are handled by our payment processor and not stored by us.
Retention: Contact and session records are retained for up to three years from your last session date, or until you request deletion.
3. Legal Basis for Processing
- Consent: Analytics cookies and marketing communications (you may withdraw at any time).
- Contractual necessity: Processing required to deliver a booked session and issue session materials.
- Legitimate interest: Maintaining session records for quality assurance and follow-up communications directly related to a booked session.
4. How We Use Your Data
- To respond to enquiries and book sessions
- To send pre-session preparation notes and post-session summary emails
- To process payments and maintain booking records
- To send service-related communications (e.g. scheduling changes)
- To improve our session content and website (analytics, where consented)
We do not use your data for automated profiling, and we do not sell, rent or share personal data with third parties for their marketing purposes.
5. Third-Party Data Processors
We may share data with processors who help us operate our services:
- Payment processors (FPX-linked gateways) — for transaction processing only
- Email service provider — for sending session-related communications
- Google Analytics — for anonymised site usage data (where cookie consent is given)
All processors are contractually required to handle data in accordance with applicable law.
6. Data Security
We implement reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure or loss. These include:
- HTTPS encryption for all website data transmission
- Access restricted to authorised Duit Lantern staff only
- Password-protected and access-logged record systems
- Breach notification to affected individuals within 72 hours of discovery
7. Cookies
We use essential cookies to maintain basic site functionality and, where you consent, analytics cookies to understand how visitors use our website. You may manage your cookie preferences at any time via our Cookie Policy page.
8. Your Rights Under PDPA 2010
As a data subject under Malaysian law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data (subject to legal retention obligations)
- Withdraw consent for data processing at any time
- Object to processing for direct marketing purposes
- Lodge a complaint with the Department of Personal Data Protection (JPDP) of Malaysia
To exercise any of these rights, contact [email protected]. We will respond within 21 calendar days.
9. External Links
Our website and session summary emails may contain links to external websites, including public government resources. We are not responsible for the privacy practices of those sites and recommend you review their policies separately.
10. Children's Privacy
Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this policy periodically. Significant changes will be communicated by email to active clients and noted on this page with a revised "Last Updated" date. Continued use of our services after a change constitutes acceptance of the updated policy.
12. Contact for Privacy Matters
Duit Lantern — Data Privacy
Level 3, Dialog Tower, No. 15, Jalan PJU 7/5, Mutiara Damansara, 47810 Petaling Jaya, Selangor
Email: [email protected]