Privacy Policy and Data Protection

Our Privacy Commitment

At Oraphinexal, we understand that trust forms the foundation of every successful financial planning relationship. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our services.

We are committed to protecting your privacy and maintaining transparency about our data practices. This policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and international privacy standards.

Information We Collect

We collect information necessary to provide personalized financial planning services and improve your experience. The types of information we gather include:

• Personal identification information including name, age, contact details, and family status for planning purposes
• Contact information such as email addresses, phone numbers, and mailing addresses for communication
• Website usage data including pages visited, time spent, and interaction patterns for service improvement
• Technical information such as IP address, browser type, and device information for security and functionality

How We Use Your Information

We use collected information exclusively for legitimate business purposes related to providing financial planning services and improving our offerings:

• Delivering personalized financial planning consultations and ongoing support services
• Communicating with you about appointments, service updates, and relevant financial planning information
• Improving our services, website functionality, and customer experience based on usage patterns
• Complying with legal requirements, regulatory obligations, and industry standards for financial services

Legal Basis for Processing

Under Malaysian and international data protection laws, we process your personal information based on the following legal grounds:

Our legitimate interest includes providing requested services, maintaining customer relationships, and ensuring service quality while respecting your privacy rights and expectations.

Data Sharing and Disclosure

We limit data sharing to essential business purposes and never sell personal information to third parties. We may share data in these specific circumstances:

• Trusted service providers who assist with technical operations, payment processing, and business functions under strict confidentiality agreements
• Legal authorities when required by law, court orders, or regulatory investigations related to financial services compliance
• Business transfer scenarios such as mergers or acquisitions, with notification to affected customers and continued privacy protection

Data Security Measures

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security framework includes technical, administrative, and physical safeguards.

Security measures include encrypted data transmission, secure server infrastructure, access controls, regular security audits, and staff training on data protection protocols.

Your Privacy Rights

You have important rights regarding your personal information. Under Malaysian PDPA and international privacy laws, you can exercise the following rights:

• Access and obtain copies of personal information we hold about you
• Request correction of inaccurate or incomplete personal information
• Request deletion of personal information under certain circumstances
• Request transfer of your data to another service provider in portable format
• Object to certain types of data processing for legitimate interests or marketing purposes

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance website functionality, analyze usage patterns, and provide personalized experiences. Cookies help us remember your preferences and improve service delivery.

For detailed information about our cookie practices, please review our separate Cookie Policy, which explains cookie types, purposes, and management options. Cookie Policy

Data Retention

We retain personal information only as long as necessary for service provision, legal compliance, and legitimate business purposes. Retention periods vary based on data type, legal requirements, and business needs, typically ranging from 3 to 7 years for financial services records.

Children's Privacy

Our services are designed for adults and we do not knowingly collect personal information from individuals under 18 years of age. If we discover that we have collected information from a minor, we will delete it promptly and take steps to prevent future collection.

Privacy Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. Material changes will be communicated through email notifications or website announcements with reasonable advance notice.

Privacy Contact Information

For questions about this Privacy Policy, data practices, or to exercise your privacy rights, please contact our privacy team using the following information