Privacy Policy

Last updated: 24 June 2026

This Privacy Policy explains how Senaman Tua ("we") collects, uses, and protects your personal information when you purchase and use our video course. We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Information we collect

• Account information: the name and email address you provide at purchase.
• Payment information: processed securely by Stripe. We do not store your full card number, only a record of your purchase (status, amount, and Stripe customer ID).
• Usage information: basic data such as the training progress you mark and your logins.
• Affiliate referral information: if you arrive through an affiliate link (?ref=), the referral code is recorded for commission purposes.

2. How we use your information

• To give you access to the course and send your login details.
• To process payments and issue refunds (where applicable).
• To provide customer support and answer your questions.
• To send important information related to your account or the service.
• To calculate and pay affiliate commissions.

3. Sharing with third parties (data processors)

We share information only with the service providers needed to run our service:

• Stripe, payment processing
• Supabase, account & database hosting
• Resend, transactional email delivery
• Vercel, website & app hosting
• Bunny.net, video streaming

Some of these providers may process data outside Malaysia. We only use providers that apply reasonable data protection measures. We do not sell your personal information to anyone.

4. Storage & security

Your information is stored in password-protected and encrypted systems. Your account password is hashed and cannot be viewed by us. Even so, no system is 100% secure; you are responsible for keeping your password confidential.

5. Data retention

We keep your information for as long as your account is active or as required for accounting and legal purposes. You may request deletion at any time (see Section 6).

6. Your rights under the PDPA

You have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Request deletion of your account and data;
• Withdraw consent for marketing communications.

To exercise these rights, email us at syedshazni@gmail.com.

7. Cookies

Our website uses minimal local storage to keep your login session and progress. We do not use invasive third-party advertising cookies.

8. Children

This Service is not intended for individuals under 18 years of age without the consent of a parent or guardian.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date above will indicate the latest version.

10. Contact us

Any privacy questions: syedshazni@gmail.com