Privacy Policy

⚠️ Legal Review Required: This privacy policy is a working template. It must be reviewed and approved by a qualified lawyer before the website goes live. All [PLACEHOLDER] sections must be completed before legal review.

Effective Date: [PLACEHOLDER — set when ready to publish]
Last Updated: [PLACEHOLDER]

1. Who We Are

BizPal Group Sdn Bhd ("BizPal", "we", "us", or "our") operates the website at [PLACEHOLDER — insert domain] and the CapitalOS platform. We are committed to protecting your personal data in accordance with applicable data protection laws, including the Personal Data Protection Act 2010 (PDPA) of Malaysia.

For questions about this policy, contact us at: [PLACEHOLDER — data privacy contact email]

2. What Data We Collect

We collect the following personal data when you use our website or services:

  • Name, email address, phone number, and company name — provided via enquiry forms
  • Browser and device information — collected automatically via cookies and analytics tools
  • [PLACEHOLDER — add if applicable: CapitalOS account data, payment information, etc.]

3. How We Use Your Data

We use your personal data to:

  • Respond to your enquiries and communicate about our programmes
  • Send programme-related updates and information you have requested
  • Improve our website and service experience through anonymised analytics
  • [PLACEHOLDER — add if applicable: email marketing, with explicit opt-in]

We do not sell your personal data to third parties.

4. Cookies

Our website uses cookies to improve your experience. These include:

  • Essential cookies — required for the website to function
  • Analytics cookies — used to understand how visitors use our site [PLACEHOLDER — identify specific analytics tool, e.g. Google Analytics]
  • [PLACEHOLDER — add if applicable: marketing or tracking cookies]

You can manage your cookie preferences at any time via your browser settings.

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described above, or as required by law. Enquiry data is retained for [PLACEHOLDER — e.g. 3 years]. CapitalOS account data is retained for the duration of your programme access plus [PLACEHOLDER — e.g. 12 months].

6. Your Rights

Under the PDPA and applicable law, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate personal data
  • Request deletion of your personal data
  • Withdraw consent where processing is based on consent

To exercise your rights, contact: [PLACEHOLDER — data subject request contact]

7. Third-Party Services

We use the following third-party services that may process your data on our behalf:

  • [PLACEHOLDER — list: hosting provider, analytics, email service, CRM, form tools, payment processor, etc.]

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of our website constitutes acceptance of the updated policy.

10. Contact Us

For any privacy-related questions: [PLACEHOLDER — data privacy email]