Privacy Policy

1. Introduction

Capytal ("we", "us", or "our") is committed to protecting the personal data of everyone who uses our platform and services. This Privacy Policy explains what personal data we collect, how we use it, and the rights you have in relation to it.

This policy applies to the Capytal website and learning platform accessible at capytal.blog and to all services delivered through it. By using our platform, you acknowledge that you have read and understood this policy.

For questions about data privacy, contact us at: [email protected]

2. Data We Collect

We collect the following categories of personal data:

• Contact and identity data: your name, email address, and phone number (where provided), collected through our enquiry and enrolment forms.
• Usage data: information about how you interact with the platform — course progress, pages visited, time spent — collected automatically when you are logged in.
• Communications data: messages you send to us by email or through discussion threads, including support queries.
• Technical data: IP address, browser type, device type, and operating system, collected automatically by our web server and analytics tools.
• Cookie data: preferences stored in your browser. See Section 6 and our Cookie Policy for details.

We do not collect sensitive personal data (such as financial account numbers, health data, or national identity numbers) through the platform.

3. How and Why We Use Your Data

We use your personal data for the following purposes:

• Enrolment and course delivery: to process your enrolment, give you access to the courses and resources you have paid for, and issue your certificate of attendance where applicable. Legal basis: contract.
• Communication: to respond to your enquiries, send enrolment confirmations, and provide support. Legal basis: contract or legitimate interest.
• Platform improvement: to understand how learners use the platform and identify areas that need improvement. Legal basis: legitimate interest.
• Legal compliance: to comply with applicable Malaysian laws and regulations, including the Personal Data Protection Act 2010 (PDPA). Legal basis: legal obligation.
• Marketing communications: to send you updates about new courses or platform features, only if you have opted in. You can opt out at any time by contacting us at [email protected].

4. Data Retention

We retain your personal data for as long as your account is active or as long as is reasonably necessary for the purpose for which it was collected:

• Enrolment and account data: retained for the duration of your access, plus three years after account closure for administrative and audit purposes.
• Communications: retained for two years from the date of the last communication.
• Technical and analytics data: typically retained in aggregate or anonymised form for up to two years.
• Marketing preferences: retained until you withdraw consent.

5. Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share data with the following categories of service providers who support the operation of the platform:

• Hosting and infrastructure providers: who store the platform and its data on secure servers.
• Analytics tools: such as Google Analytics, to help us understand platform usage. Data shared is aggregated or anonymised where possible.
• Email communication tools: used to send enrolment confirmations and support responses.
• Payment processors: to handle enrolment payments securely. We do not store full payment card details ourselves.

All third-party providers are required to handle your data in accordance with applicable data protection laws and our instructions. We do not use your data to serve third-party advertising.

6. Cookies

We use cookies on the Capytal platform to support essential functionality and to understand how the platform is used. For detailed information about the cookies we use and how to manage your preferences, see our Cookie Policy.

7. Data Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. These measures include:

• HTTPS encryption for all data transmitted between your device and the platform.
• Access controls limiting who within Capytal can access personal data.
• Regular review of data handling practices.

In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the relevant authority as required under Malaysian law.

8. Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right of correction: to request that we correct inaccurate or incomplete data.
• Right to withdraw consent: to withdraw consent for processing based on consent, including marketing communications.
• Right to limit processing: to request that we restrict the way we use your data in certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. Identity verification may be required before we action your request.

If you have a complaint about how we handle your personal data, you may contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

9. Third-Party Links

Our platform may contain links to external websites or resources. We are not responsible for the privacy practices of those third-party sites and this policy does not apply to them. We encourage you to review the privacy policies of any external sites you visit.

10. Children's Privacy

Capytal's services are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us at [email protected] so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and notify enrolled learners by email where the changes are material. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

12. Contact

For any questions, requests, or concerns about this policy or your personal data:

• Email: [email protected]
• Post: Capytal, No. 44, Jalan Ampang, 50450 Kuala Lumpur, Malaysia
• Phone: +60 16-720 4839 (office hours: Mon–Fri 9 AM–6 PM)