Privacy Policy

1. Introduction

Penngrove ("we", "us", or "our") operates as an educational provider based at No. 41, Jalan Dato Bandar Tunggal, 70000 Seremban, Negeri Sembilan, Malaysia. We offer general-education programmes on retirement planning concepts and long-range planning terminology.

This Privacy Policy applies to all personal data we collect through our website at penngrove.live, our contact forms, and our programme enrolment processes. By using our website or submitting your information to us, you agree to the practices described in this policy.

We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs the collection, processing, and use of personal data in commercial transactions.

2. Data Collection

We collect personal data only when you voluntarily provide it to us or when it is automatically generated by your use of our website.

Information you provide directly:

• Full name and preferred name
• Email address
• Phone number (optional)
• Enquiry messages submitted via our contact form
• Programme preference or interest indicated in correspondence

Information collected automatically:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited and time spent on each page
• Referring website or search query
• Cookie identifiers (see Section 5 and our Cookie Policy)

Legal basis for processing (PDPA):

• Consent — when you submit a contact form or accept cookies
• Legitimate interest — to maintain website security and improve our educational resources
• Contract performance — to fulfil your enrolment in a programme

3. How We Use Your Data

We use the personal data we collect for the following purposes only:

• Responding to enquiries submitted through our contact form
• Processing enrolment and sending programme details
• Sending confirmation emails and administrative communications
• Sending educational updates or programme announcements, where you have opted in
• Improving the content and usability of our website
• Complying with legal and regulatory obligations

Marketing communications: We will only send you newsletters or promotional materials if you have expressly opted in. You may withdraw consent at any time by emailing [email protected].

Data retention:

• Contact form submissions: retained for 24 months from the date of submission
• Programme enrolment records: retained for 7 years for administrative and legal purposes
• Website analytics data: retained for 14 months
• Cookie consent records: retained for 12 months

4. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share your information with the following categories of service providers, strictly for the purposes outlined above:

• Email delivery providers — to send confirmation and programme emails on our behalf
• Website hosting providers — to maintain the availability of our website
• Analytics providers — to help us understand aggregate website usage (no personally identifying data shared)

All third-party providers are contractually required to handle your data securely and only for the purposes we specify. We do not transfer your personal data outside Malaysia unless adequate data protection safeguards are in place.

5. Cookie Information

Our website uses cookies — small text files stored in your browser — to support basic functionality and, where you consent, to understand how visitors use our site.

• Essential cookies: Necessary for the website to function. Cannot be disabled.
• Analytics cookies: Help us understand page visits and navigation patterns (optional).
• Preference cookies: Remember your cookie consent choices (optional).
• Marketing cookies: Used to understand how visitors arrive at our site (optional).

For full details and to manage your preferences, please visit our Cookie Policy.

6. Data Protection Measures

We take the security of your personal data seriously and maintain the following safeguards:

• All data transmitted via our website is encrypted using TLS (HTTPS)
• Access to personal data is restricted to authorised Penngrove staff only
• Our website hosting infrastructure is maintained on secured servers
• We conduct periodic reviews of our data handling practices

In the event of a data breach that is likely to result in harm to affected individuals, we will notify those individuals and, where required, the relevant Malaysian authorities within a reasonable timeframe.

7. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may ask us to correct any inaccurate or incomplete information.
• Right to withdraw consent: You may withdraw your consent to our processing of your data at any time. This will not affect the lawfulness of processing prior to withdrawal.
• Right to limit processing: You may ask us to restrict how we use your data in certain circumstances.
• Right to data portability: Where technically feasible, you may request your data in a commonly used, machine-readable format.

To exercise any of these rights, please email [email protected]. We will respond within 21 days. You also have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your rights have not been upheld.

8. Third-Party Links

Our website may contain links to external websites operated by third parties. These links are provided for convenience and information only. Penngrove is not responsible for the privacy practices or content of any third-party website. We encourage you to review the privacy policies of any site you visit.

9. Children's Privacy

Our services and website are intended for individuals aged 18 and above. We do not knowingly collect personal data from persons under the age of 18. If you believe a minor has submitted personal data to us, please contact us at [email protected] and we will promptly delete that information.

10. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.

11. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our data officer: