Privacy Policy
Your Privacy Rights and Data Protection
1. Introduction and Overview
At girexofaluno ("we," "us," "our"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our financial services platform at girexofaluno.sbs.
Our commitment to privacy extends beyond mere compliance – we believe transparency about data practices builds trust. This policy applies to all users of our services, whether you're browsing our website, using our financial tools, or engaging with our customer support team.
2. Information We Collect
We collect various types of information to provide you with our financial services and improve your experience on our platform. The data we collect falls into several categories:
Personal Information
- Full name and contact details (email address, phone number, mailing address)
- Government-issued identification numbers when required for financial services
- Date of birth and demographic information
- Employment information and income details for credit assessments
- Banking information and financial account details
Technical Information
- Device information including IP address, browser type, and operating system
- Website usage data and interaction patterns
- Cookies and similar tracking technologies
- Location data when permitted by your device settings
- Session recordings and analytics data to improve user experience
Financial Information
- Transaction history and payment information
- Credit history and financial behavior patterns
- Investment preferences and risk tolerance assessments
- Account balances and financial goals
3. How We Use Your Information
Your information helps us provide better financial services and maintain the security of our platform. We use collected data for legitimate business purposes that benefit both you and our service quality.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Service Delivery | Personal and financial information | Contract fulfillment |
| Security and Fraud Prevention | All collected data | Legitimate interest |
| Customer Support | Contact and account information | Contract fulfillment |
| Legal Compliance | Identity and transaction data | Legal obligation |
| Service Improvement | Usage and technical data | Legitimate interest |
We analyze usage patterns to enhance our platform's functionality and develop new features that meet your financial needs. This includes personalizing your experience and providing relevant financial insights based on your activity.
4. Data Sharing and Third Parties
We maintain strict control over your personal information and only share data when necessary for service delivery or legal compliance. Our approach to data sharing is governed by necessity and your best interests.
Authorized Third Parties
- Financial institutions and payment processors for transaction processing
- Credit bureaus and financial data providers for credit assessments
- Technology service providers who support our platform infrastructure
- Professional service providers including legal and accounting firms
- Regulatory authorities when required by Malaysian financial regulations
All third-party partners are bound by strict confidentiality agreements and must demonstrate adequate data protection measures. We regularly audit these relationships to ensure your information remains secure throughout the sharing process.
5. Your Privacy Rights
You have significant control over your personal information and how we use it. These rights are fundamental to our privacy approach and are designed to give you transparency and control over your data.
Access and Correction Rights
- Request a copy of all personal information we hold about you
- Correct inaccurate or incomplete information in your profile
- Update your contact preferences and communication settings
- Download your data in a portable format for personal use
Control and Deletion Rights
- Restrict processing of your personal information for specific purposes
- Request deletion of your account and associated data
- Withdraw consent for data processing where consent is the legal basis
- Object to data processing based on legitimate interests
To exercise these rights, contact our privacy team using the information provided below. We typically respond to privacy requests within 30 days, though complex requests may require additional time. You'll receive regular updates on the status of your request.
6. Data Security and Protection
Protecting your information is our top priority. We employ multiple layers of security measures to safeguard your data against unauthorized access, disclosure, alteration, or destruction.
Technical Safeguards
- Bank-level encryption for all data transmission and storage
- Multi-factor authentication for account access
- Regular security audits and penetration testing
- Automated threat detection and response systems
- Secure data centers with 24/7 monitoring
Operational Security
- Employee background checks and regular security training
- Strict access controls based on job responsibilities
- Incident response procedures for potential security breaches
- Regular backup and disaster recovery testing
While we implement robust security measures, we also encourage you to protect your account by using strong passwords, avoiding public WiFi for sensitive transactions, and logging out of your account when finished. Your security is a shared responsibility.
7. Data Retention and Deletion
We retain your information only as long as necessary to provide our services and meet legal obligations. Our retention periods are designed to balance your privacy rights with legitimate business needs and regulatory requirements.
Retention Periods
- Active account information: Retained while your account is active
- Transaction records: 7 years from transaction date (regulatory requirement)
- Communication records: 3 years from last contact
- Marketing preferences: Until you withdraw consent
- Technical logs: 12 months for security and troubleshooting
When you close your account, we begin the deletion process for information no longer required by law or legitimate business purposes. Some data may be retained in anonymized form for statistical analysis and service improvement purposes.
8. International Data Transfers
As a Malaysia-based company, we primarily store your data within Malaysia. However, some of our service providers may process your information in other countries. When this occurs, we ensure appropriate safeguards are in place to protect your data.
Transfer Safeguards
- Contractual data protection clauses with all international partners
- Verification of adequate data protection laws in destination countries
- Regular monitoring of international data processing activities
- Immediate notification procedures for any data protection concerns
We regularly review our international data transfer practices to ensure they meet evolving privacy standards and provide you with consistent protection regardless of where your data is processed.
9. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience on our platform. These tools help us understand how you use our services and allow us to provide personalized features and improved functionality.
Types of Cookies We Use
- Essential cookies: Required for basic website functionality and security
- Performance cookies: Help us understand how visitors use our website
- Functional cookies: Remember your preferences and settings
- Analytics cookies: Provide insights into user behavior and service performance
You can control cookie settings through your browser preferences, though disabling certain cookies may affect your ability to use some features of our platform. We respect your choices about cookie usage and provide clear information about what each type of cookie does.
10. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we'll notify you through your registered email address or by posting a prominent notice on our website.
We encourage you to review this policy periodically to stay informed about how we protect your information. The "Last Updated" date at the top of this policy indicates when the most recent changes were made.
Contact Us About Privacy
If you have questions about this Privacy Policy or how we handle your personal information, please contact our privacy team:
Email: privacy@girexofaluno.sbs
Phone: +60392854424
Address: Exit Jalan Permatang Pauh, Kampung Bagan Serai, 13500 Permatang Pauh, Pulau Pinang, Malaysia
We're committed to addressing your privacy concerns promptly and thoroughly. Your trust is essential to our business, and we're here to help you understand and control how your information is used.