Legal

Privacy Policy

Last updated: 1 April 2026

This Privacy Policy describes how Capitolix ("we", "our", or "us") collects, uses, and handles personal information when you interact with our website at capitoli.biz, enquire about or enrol in our programmes, or otherwise engage with our services. We are committed to handling personal information with care and in a manner consistent with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

1. Who We Are

Capitolix is a financial education provider operating from 21 Jalan Sultan Ismail, 50250 Kuala Lumpur, Malaysia. We offer structured financial education programmes for individuals and small groups. We do not offer investment advisory services, financial planning licenses, or products regulated under the Capital Markets and Services Act or the Financial Services Act.

2. Information We Collect

Information you provide directly

When you contact us, submit an enquiry form, or register for a programme, we may collect:

  • Full name
  • Email address
  • Phone number
  • General location (e.g., city or area)
  • Programme interest and any questions or notes you choose to include

Information collected automatically

When you visit our website, certain technical information is collected automatically through cookies and similar technologies, including your approximate geographic location, browser type, device type, pages visited, and time spent on the site. Please refer to our Cookie Policy for more detail.

3. How We Use Your Information

We use the information collected for the following purposes:

  • To respond to your enquiry and provide information about our programmes
  • To process programme registrations and manage participant communications
  • To send relevant updates or reminders about sessions you have enrolled in
  • To improve the quality and relevance of our website and programme content
  • To conduct basic website analytics to understand how visitors use our site
  • To comply with any applicable legal obligations

We do not use your information for automated decision-making, profiling for commercial targeting, or any purpose beyond those listed above without your prior consent.

4. Legal Basis for Processing

We collect and process personal information based on one or more of the following grounds:

  • Your consent, where provided (e.g., when submitting a contact form or accepting cookies)
  • The performance of a contract, where you have enrolled in a programme
  • Our legitimate interest in operating our educational services and maintaining our website
  • Compliance with applicable legal requirements

5. Sharing of Information

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may share information in limited circumstances:

  • Service providers: Trusted providers who assist us with website hosting, analytics, or communication tools, under appropriate data processing agreements
  • Legal compliance: Where required by law, court order, or to protect the rights and safety of individuals
  • Business transitions: In the event of a merger, acquisition, or restructuring, where data would be transferred under equivalent protections

6. Retention of Data

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Enquiry records are generally retained for up to 24 months. Programme participation records may be retained for longer where necessary for administrative or legal purposes.

7. Your Rights

Under the PDPA 2010 and applicable data protection principles, you have the right to:

  • Access the personal data we hold about you
  • Request correction of any inaccurate or incomplete data
  • Withdraw consent where processing is based on consent
  • Request that we cease processing your data for direct communication purposes

To exercise any of these rights, please contact us at [email protected] or by calling +60 3-2184 7635. We will respond within a reasonable timeframe and in accordance with the PDPA.

8. Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, or misuse. No method of transmission over the internet is completely secure, and while we take appropriate precautions, we cannot guarantee absolute security.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites, and we encourage you to review their privacy policies independently.

10. Cookies

Our website uses cookies and similar technologies. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: