PRIVACY POLICY

PRIVACY POLICY

Last Updated: 10 Jan 2026

This Privacy Policy explains how Balaena Softtech Sdn Bhd (20190104025) of No. 13, Jalan Raja Bot 35/134, Alam Impian, Seksyen 35, 40470 Shah Alam, Selangor, Malaysia (“Company”, “we”, “our”, or “us”) collects, uses, discloses, stores, and protects your personal data when you visit our website, register for our programs, make a purchase, attend our events, or otherwise interact with us.

For clarity, Balaena Softtech Sdn Bhd is the merchant of record, service provider, and operations / fulfillment partner for the relevant Program. Where applicable, Empact Group Sdn Bhd may act as a marketing partner for lead generation, campaign execution, promotion, or related support activities on our behalf.

By using our website or services, submitting your information to us, registering for a Program, or making a payment, you acknowledge that you have read and understood this Privacy Policy.

1. Scope of This Policy

This Privacy Policy applies to personal data collected through:


  • our websites and landing pages;

  • registration forms, order forms, survey forms, and checkout pages;

  • email, WhatsApp, Telegram, live chat, support channels, and CRM systems;

  • webinars, workshops, masterclasses, bootcamps, coaching, mentorship, educational programs, and related services;

  • community platforms, member portals, course platforms, and communication platforms;

  • marketing campaigns, advertisements, analytics tools, tracking systems, and remarketing tools connected to our business.

2. Personal Data We May Collect

We may collect and process the following categories of personal data:

  • full name;

  • email address;

  • mobile number or telephone number;

  • country, city, or address details where relevant;

  • company name or business details where applicable;

  • payment-related transaction details submitted through our payment processors;

  • account login details and profile information;

  • IP address, browser type, device information, cookies, and usage data;

  • registration details, attendance records, order details, survey answers, form responses, and support history;

  • chat messages, call notes, correspondence, and customer service records;

  • information you voluntarily provide during events, coaching, onboarding, support, or community participation.

We do not usually store full payment card details ourselves. Payments may be processed by third-party payment processors, and their handling of payment data is governed by their own policies and terms.

3. How We Collect Personal Data

We may collect personal data:

  • directly from you when you register, purchase, contact us, or submit a form;

  • automatically through cookies, pixels, analytics tools, server logs, and tracking technologies;

  • from third-party platforms such as payment processors, CRM systems, automation tools, course platforms, webinar tools, and communication tools;

  • from marketing partners, affiliates, referral partners, or lawful third-party sources where permitted.

4. Purposes of Collection and Use

We may collect, use, and process your personal data for the following purposes:

  • to process registrations, purchases, invoices, and payments;

  • to deliver programs, events, services, support, and related materials;

  • to verify your identity and communicate with you;

  • to grant access to communities, portals, member areas, replays, bonuses, and resources;

  • to send reminders, follow-up messages, schedule changes, onboarding updates, and service notices;

  • to provide customer support and account administration;

  • to manage operations, fulfillment, troubleshooting, and internal record-keeping;

  • to improve our services, content, offers, website performance, and customer experience;

  • to conduct analytics, attribution, ad measurement, tracking, and remarketing;

  • to send newsletters, invitations, promotional messages, updates, and marketing communications;

  • to detect fraud, unauthorized access, misuse, abuse, or chargeback risk;

  • to comply with legal, regulatory, tax, accounting, contractual, and enforcement obligations.

5. Marketing, Cookies, Analytics, and Tracking

We may use cookies, pixels, tags, scripts, and similar technologies for:

  • website functionality;

  • traffic measurement and analytics;

  • conversion tracking;

  • ad attribution;

  • audience building;

  • retargeting and remarketing.

These may include tools and platforms such as:

  • Google Analytics;

  • Google Ads;

  • Meta Pixel;

  • Meta Conversions API;

  • CRM and email marketing systems;

  • WhatsApp automation tools;

  • webinar, course, and community platforms;

  • advertising and automation tools used by us or our marketing partner.

These tools may collect information such as your IP address, browser activity, device information, pages viewed, actions taken, referral sources, and purchase or registration events.

You may disable cookies through your browser settings, but doing so may affect the functionality of parts of our website or services.

6. Disclosure of Personal Data

We may disclose your personal data to:

  • our employees, staff, contractors, and authorized personnel;

  • affiliated companies and operational partners;

  • Empact Group Sdn Bhd as our marketing partner where relevant for lead management, campaign execution, retargeting, communication flow, and marketing operations;

  • payment processors, gateway providers, and financial institutions;

  • CRM, hosting, storage, webinar, communication, automation, analytics, and IT service providers;

  • legal, tax, compliance, and professional advisers;

  • regulators, courts, law enforcement, or government authorities where required or permitted by law;

  • buyers, successors, assignees, or restructuring parties in the event of a merger, restructuring, acquisition, financing, or sale of business assets.

We do not sell your personal data as a standalone commercial data product.

7. Cross-Border Transfers

Your personal data may be transferred to, stored in, or processed in jurisdictions outside Malaysia where our technology providers, service providers, servers, partners, or operational systems are located. By using our services and submitting your personal data, you acknowledge and consent to such transfer, storage, and processing, subject to reasonable safeguards and applicable law.

8. Data Retention

We retain personal data for as long as reasonably necessary for:

  • the purposes set out in this Privacy Policy;

  • contract performance and service delivery;

  • customer support and follow-up;

  • internal administration and business operations;

  • dispute handling, fraud prevention, and chargeback defense; and

  • compliance with legal, tax, accounting, and regulatory obligations.

We may retain certain records for a longer period where reasonably necessary to protect our legitimate interests or where required by law.

9. Security

We take reasonable administrative, technical, and organizational measures to protect personal data against unauthorized access, disclosure, alteration, misuse, loss, or destruction. However, no internet transmission or storage system is completely secure, and we do not guarantee absolute security.

10. Your Rights

Subject to applicable law, you may request to:

  • access your personal data;

  • correct inaccurate, incomplete, misleading, or outdated data;

  • withdraw consent where applicable;

  • limit or object to certain processing activities where permitted by law; and

  • opt out of marketing communications at any time.

To exercise any such request, please contact us using the contact details below. We may require reasonable proof of identity before processing your request.

11. Third-Party Websites and Platforms

Our website, services, or communications may contain links to third-party websites, tools, communities, or platforms. We are not responsible for the privacy, content, security, or operational practices of such third parties. You should review their policies separately.

12. Children and Minors

Our services are not intended for persons under the age of 18. We do not knowingly collect personal data from minors in connection with commercial transactions without appropriate authority. If you believe a minor has submitted personal data to us improperly, please contact us.

13. Changes to This Policy

We may amend this Privacy Policy from time to time by publishing an updated version on our website. Your continued use of our website or services after the updated version is published constitutes your acknowledgment of the revised Privacy Policy.

14. Contact Us

If you have any questions, requests, or complaints regarding this Privacy Policy or your personal data, please contact:

Balaena Softtech Sdn Bhd (20190104025)

No. 13, Jalan Raja Bot 35/134,

Alam Impian, Seksyen 35,

40470 Shah Alam, Selangor, Malaysia

Email: [email protected]