Stoneground Contact

Legal

Privacy Policy

Last Updated: 14 April 2025

1. Introduction

Stoneground ("we", "us", "our") is committed to protecting the personal data of those who contact us, attend our sessions, or visit this website. This policy explains what data we collect, why we collect it, how we use it, and what rights you hold in relation to it.

Stoneground is based at No. 14, Jalan Wong Ah Fook, 80000 Johor Bahru, Johor, Malaysia. For data-related enquiries, contact us at [email protected].

This policy applies to all personal data processed by Stoneground in connection with its website and session registration activities. It is written with reference to Malaysia's Personal Data Protection Act 2010 (PDPA).

2. Data We Collect

We collect personal data only when you provide it to us directly. This occurs when you:

  • Submit a contact or registration enquiry through this website
  • Email or telephone us directly
  • Attend one of our sessions and provide details for a registration record

The categories of data we may collect include: your full name, email address, telephone number, and any information you include in a message or enquiry. We do not collect sensitive personal data. We do not collect or retain copies of EPF statements or financial documents from session participants.

We also collect limited technical data automatically when you visit our website, such as browser type, device type, pages viewed, and visit duration. This data is not linked to your identity.

Retention: Contact and registration data is held for a maximum of 24 months from the date of collection, after which it is deleted unless we are required by law to retain it for a longer period.

3. How We Use Your Data

We use personal data for the following purposes:

  • Responding to your enquiry and confirming session availability
  • Maintaining a registration record for sessions you have attended or reserved
  • Sending you information about upcoming sessions, if you have requested this
  • Improving our website and session offerings based on aggregate, non-identifiable usage patterns

The legal basis for processing is your consent (where you have provided data via a contact form), legitimate interest in responding to direct communications, and contractual necessity where a session booking has been confirmed.

We do not use your data for automated decision-making or profiling. We do not sell your data to third parties. We do not share your data with financial services firms or third parties who market products.

4. Data Sharing

We may share your data with trusted service providers who assist us in operating the website or managing communications — for example, a web hosting provider or email service. These providers are required to handle your data only as directed by us and in compliance with applicable law.

We may also disclose data where required by law, regulation, or a competent authority in Malaysia.

We do not transfer personal data outside Malaysia except where necessary to support website infrastructure, in which case we take reasonable steps to ensure equivalent protection applies.

5. Data Protection Measures

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:

  • HTTPS encryption for all data submitted through this website
  • Access to personal data limited to Stoneground staff who need it for their role
  • Regular review of data held and deletion of data no longer required
  • Prompt notification to affected individuals and the relevant authority in the event of a data breach, in accordance with Malaysian PDPA requirements

6. Cookies

This website uses cookies to remember your preferences and to help us understand how the site is used. We use essential cookies (which the site requires to function) and optional analytics cookies (which we only set with your consent).

You can manage your cookie preferences at any time via our Cookie Policy page.

7. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

  • Access: You may request a copy of the personal data we hold about you.
  • Correction: You may request that inaccurate or incomplete data be corrected.
  • Withdrawal of consent: Where processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
  • Cessation of processing: You may request that we stop processing your data for marketing or non-essential purposes.
  • Complaint: You may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your data has been handled unlawfully.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

This website may link to external websites — for example, the official EPF portal. We are not responsible for the privacy practices of those sites. We recommend reading their privacy policies before submitting any personal data to them.

9. Children's Privacy

Our sessions and this website are intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website or services following a policy update constitutes acceptance of the revised terms.

11. Contact

For any questions about this Privacy Policy or your personal data, please contact: