Privacy Policy

1. Introduction

Fjord Office ("we", "us", "our") is committed to handling personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have in relation to it.

This policy applies to all personal data collected through this website and through our programme registration and engagement processes. If you have questions about how we handle your information, please contact us at [email protected].

2. Personal Data We Collect

2.1 Data you provide directly

When you enquire about a programme, register to attend a workshop, or engage us for the Multi-Year Household Plan, you may provide:

• Full name
• Email address
• Phone number (optional)
• Enquiry message or programme-specific notes

During the household planning engagement, you may share personal financial records — EPF statements, insurance policy details, income and expenditure figures. This information is used solely within the context of the engagement and is not retained after the engagement concludes.

2.2 Data collected automatically

This website may collect anonymised usage data through analytics tools, including pages visited and session duration. This data does not identify individual visitors and is used only for website improvement.

2.3 Legal basis for processing

We process personal data with your consent (enquiry forms), for the performance of a contract (programme registration), and where there is a legitimate interest in operating and improving our programmes. Where you provide financial records during an engagement, this is processed on the basis of your explicit consent and solely for delivering the agreed service.

2.4 Retention periods

Enquiry and contact information is retained for up to 12 months from the date of last contact. Programme registration records are retained for 3 years for administrative purposes. Financial records shared during an engagement are not retained beyond the final session of that engagement.

3. How We Use Your Data

We use the personal data you provide for the following purposes:

• Responding to programme enquiries and providing relevant information
• Processing and confirming programme registrations
• Sending programme-related communications (schedule reminders, material preparation notes)
• Improving the content and delivery of our programmes

We do not use your data for automated decision-making or profiling. We do not sell, rent, or share your personal data with financial institutions, product providers, or third-party marketers. We do not send marketing communications unless you have specifically requested them.

3.1 Third-party service providers

We use limited third-party services to operate this website, including web hosting and analytics providers. These parties process data on our behalf and are bound by appropriate data processing agreements. They are not permitted to use your data for their own purposes.

4. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure. These include:

• Secure, encrypted data transmission (HTTPS) on this website
• Access controls limiting who within Fjord Office can access personal data
• Secure disposal of physical documents containing personal financial information after engagements close
• Regular review of data handling procedures

In the event of a data breach that is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority as soon as reasonably practicable.

5. Cookies

This website uses cookies for basic functionality and, where consent is given, for anonymised analytics. Essential cookies cannot be disabled as they are necessary for the site to function. You may manage optional cookie categories through our Cookie Policy page.

6. Your Rights

Under the Personal Data Protection Act 2010 and, where applicable, the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access — to request a copy of personal data we hold about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of your data where no legitimate reason exists to retain it
• Right to data portability — to receive your data in a structured, machine-readable format where applicable
• Right to object — to object to data processing based on legitimate interests
• Right to withdraw consent — to withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days. You also have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) if you believe your rights have not been respected.

7. Third-Party Links

This website may contain links to external sites operated by third parties, including financial regulators and reference resources. Fjord Office is not responsible for the privacy practices of those sites and recommends you review their policies separately.

8. Children's Privacy

Our programmes are designed for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor's data has been submitted to us, please contact us immediately at [email protected].

9. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will note the new date at the top of this page. Continued use of our website or services after an update constitutes acceptance of the revised policy.

10. Contact

For all privacy-related enquiries, please contact:

Fjord Office
Jalan Bukit Gambir, No. 45
Penang Technology Park
11700 Gelugor, Penang, Malaysia
Email: [email protected]
Phone: +60 4-659 3218