Privacy Policy

1. Introduction

esstuary fis is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our services, attend our workshops, or use our website.

This policy applies to all personal data we process as a data controller. By using our services or providing us with your personal data, you consent to the practices described in this policy.

For privacy-related inquiries, you can contact us at: [email protected]

2. Data We Collect

Personal Information

We collect the following types of personal data:

• Name, email address, and phone number when you contact us or enroll in workshops
• Professional information relevant to workshop participation (current occupation, general financial situation)
• Payment information (processed securely through third-party payment processors)
• Communication preferences and workshop feedback

Workshop-Related Information

During workshops, we may collect:

• Information you voluntarily share during exercises and discussions
• Attendance records and completion status
• Assessment responses and learning progress
• Feedback and evaluation responses

Technical Information

When you visit our website, we automatically collect:

• IP address and browser type
• Pages visited and time spent on site
• Referring website addresses
• Device information and operating system

3. How We Use Your Data

We process your personal data for the following purposes:

Service Delivery

• Managing workshop enrollments and attendance
• Delivering educational content and materials
• Providing individual consultations where applicable
• Communicating important updates about workshops

Communication

• Responding to your inquiries and requests
• Sending workshop reminders and materials
• Providing follow-up resources and support
• Notifying you of upcoming workshops (with your consent)

Improvement and Analytics

• Analyzing workshop effectiveness and participant outcomes
• Improving curriculum and teaching methods
• Understanding website usage patterns
• Conducting anonymous satisfaction surveys

Legal Basis

We process your data based on:

• Contract performance: Processing necessary to deliver workshops and services
• Consent: For marketing communications and optional data uses
• Legitimate interests: Improving our services and maintaining security
• Legal obligations: Complying with Malaysian tax and business laws

4. Data Retention

We retain your personal data for the following periods:

• Workshop participant data: 7 years from last engagement (for business records)
• Marketing consent data: Until you withdraw consent
• Financial records: 7 years (as required by Malaysian law)
• Website analytics: 26 months maximum
• Communication records: 3 years from last contact

After these periods, we securely delete or anonymize your data unless required by law to retain it longer.

5. Data Sharing and Disclosure

We do not sell your personal data. We share data only in these limited circumstances:

Service Providers

We work with trusted third-party service providers who assist us in:

• Payment processing (financial institutions and payment gateways)
• Email delivery and communication services
• Website hosting and technical infrastructure
• Analytics and performance monitoring

These providers are contractually obligated to protect your data and use it only for specified purposes.

Legal Requirements

We may disclose your data when required to:

• Comply with legal obligations or court orders
• Protect our legal rights or defend against claims
• Prevent fraud or security threats
• Cooperate with law enforcement when legally required

Business Transfers

If our business is acquired or merged, your data may be transferred to the new owner, who must continue to honor this privacy policy.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit using SSL/TLS protocols
• Secure storage with access controls and authentication
• Regular security assessments and updates
• Staff training on data protection practices
• Restricted access to personal data on a need-to-know basis
• Secure backup procedures and disaster recovery plans

While we use industry-standard security measures, no system is completely secure. We cannot guarantee absolute security but commit to promptly addressing any breaches.

7. Cookies and Tracking

Our website uses cookies and similar technologies. We use:

• Essential cookies: Required for basic site functionality
• Analytics cookies: Help us understand site usage (with your consent)
• Preference cookies: Remember your settings and choices

You can manage cookie preferences through our cookie consent banner or your browser settings. Disabling certain cookies may affect site functionality. For more details, see our Cookie Policy.

8. Your Rights

Under Malaysian data protection laws, you have the following rights:

Right to Access

Request a copy of the personal data we hold about you, including how we use it and who we share it with.

Right to Correction

Request correction of inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data when we no longer have a legitimate reason to retain it.

Right to Restrict Processing

Request that we limit how we use your data in certain circumstances.

Right to Data Portability

Request a copy of your data in a structured, commonly used format.

Right to Object

Object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Withdraw consent for data processing at any time (where consent is the legal basis).

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days of receiving your request.

9. Third-Party Links

Our website may contain links to external sites not operated by us. We are not responsible for the privacy practices of these sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Data Protection for Minors

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from a minor, we will promptly delete it.

11. International Data Transfers

Your personal data is primarily stored and processed in Malaysia. Some service providers may process data outside Malaysia. When this occurs, we ensure appropriate safeguards are in place through:

• Contractual clauses requiring equivalent data protection
• Verification of adequate data protection laws in the destination country
• Additional security measures for cross-border transfers

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify active workshop participants via email
• Post a notice on our website homepage

We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

14. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with:

However, we encourage you to contact us first so we can address your concerns directly.