Privacy Policy

1. Introduction

Ironquill ("we", "us", "our") is a financial education provider registered and operating in Kuching, Sarawak, Malaysia. We are committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This policy explains what personal data we collect, why we collect it, how it is used, and what rights you have in relation to it. It applies to visitors to our website and to individuals who enquire about or enrol in our courses.

For questions about this policy, please contact us at privacy@{{DOMAIN}.

2. Data We Collect and Why

2.1 Information You Provide

When you submit an enquiry through our website or contact us by other means, we collect your name, email address, and telephone number if provided. This information is used to respond to your enquiry and, if you proceed, to arrange your enrolment in a course.

2.2 Website Usage Data

We may collect standard analytics data relating to how our website is used — pages visited, time on page, general location by region. This data is aggregated and not used to identify individuals. It is used to understand how the site is used and to improve it.

2.3 Legal Basis for Processing

Under the Malaysian PDPA, we process personal data on the basis of consent (when you submit a form or contact us), legitimate interest (in operating and improving our services), and contractual necessity (in delivering courses to enrolled participants).

2.4 Retention

Enquiry data is retained for up to twelve months from the date of last contact. Enrolment records are retained for up to five years for administrative and compliance purposes. Anonymised analytics data is retained indefinitely.

3. How We Use Your Data

We use the information you provide to respond to your enquiry, to process enrolment, and to communicate course-related information to you. We do not sell your personal data to any third party.

If you have consented to receiving communications from us, we may send information about future courses or events. You may withdraw this consent at any time by contacting us at privacy@{{DOMAIN}.

We may share your data with third-party service providers who assist us in operating the website or delivering courses — for example, email delivery services or video-call platforms. These providers are required to handle data in accordance with applicable law and our instructions. We do not share personal data with financial product providers or advertising networks.

4. Data Protection Measures

Our website uses HTTPS encryption for all data in transit. Access to personal data held by Ironquill is limited to staff with a direct operational need for it. We review our data handling practices periodically.

In the event of a data breach that is likely to result in risk to the rights and freedoms of affected individuals, we will take steps to notify affected parties and relevant authorities as required under Malaysian law.

5. Cookies

We use cookies on this website for essential site functionality and for understanding how the site is used. Details of the specific cookies we use and your options for managing them are set out in our Cookie Policy.

6. Your Rights

Under the Malaysian Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to processing where consent is the legal basis
• Object to certain types of processing
• Request erasure of your data, subject to legal retention requirements

To exercise any of these rights, write to privacy@{{DOMAIN}. We will respond within thirty days. If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (PDPDM).

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any third-party site before providing personal information.

8. Children

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have received data from someone under 18, please contact us and we will delete it promptly.

9. Updates to This Policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our website after any revision constitutes acceptance of the updated policy. We will notify enrolled participants of material changes by email.

10. Contact

For any questions about this policy or about how we handle your personal data: