Legal · Data Protection
Privacy Policy
Last Updated: 14 April 2025 · Effective: 14 April 2025
1. Introduction
Karex ("we", "us", "our") is an educational services provider operating in Malaysia. We deliver M&A process education programmes — including an online course, a senior team workshop, and a readiness consulting engagement — to individuals and organisations based primarily in Malaysia.
This Privacy Policy describes how Karex collects, uses, stores, and protects personal data that you provide when visiting our website at karexm.pro or enquiring about our programmes. It also explains the rights you hold over your personal data under applicable Malaysian law.
This policy applies to personal data collected through our website contact form, programme enquiry processes, and direct correspondence. It does not apply to data handled by third-party services beyond what is described in Section 3.
2. Data We Collect
Personal data collected directly
When you submit an enquiry through our website contact form or contact us directly by phone or email, we may collect:
- Full name
- Email address
- Phone number (where provided)
- Organisation name and role (where provided in your message)
- The content of your enquiry or message
Technical data collected automatically
When you visit our website, our hosting infrastructure may automatically record limited technical data, including:
- IP address and approximate geographic region
- Browser type and version
- Pages visited and time spent on each page
- Referring URL
Legal basis for processing
We process personal data on the following bases under the Personal Data Protection Act 2010 (PDPA) of Malaysia:
- Consent — where you have submitted a form or opted into communications
- Legitimate interests — for responding to enquiries and maintaining our website
- Contractual necessity — where data is required to deliver a programme you have enrolled in
Data retention
Enquiry and contact data is retained for a maximum of 24 months from the date of last contact. Programme enrolment records are retained for 5 years for administrative purposes. You may request deletion at any time — see Section 6.
3. How We Use Your Data
Personal data collected is used strictly for the following purposes:
- Responding to your enquiries and providing programme information
- Processing and administering programme enrolments
- Sending programme-related communications (scheduling, materials, completion records)
- Improving website content and usability based on aggregated usage patterns
- Complying with applicable legal obligations
Marketing communications
We do not send unsolicited marketing communications. If you have enquired about our programmes and wish to receive occasional updates about new offerings, you may indicate this when completing the contact form. You may withdraw this consent at any time by emailing [email protected].
Data sharing
We do not sell, rent, or trade personal data with third parties. Limited sharing occurs only in the following circumstances:
- With our hosting and website infrastructure providers, who process data on our behalf under data processing agreements
- With analytics services (where enabled) to understand aggregate website usage — no individual-level data is shared
- Where required by applicable Malaysian law or a court order
4. Data Protection Measures
Karex takes reasonable technical and organisational steps to protect personal data from unauthorised access, loss, or disclosure:
- Website connections are encrypted using TLS/SSL
- Access to stored personal data is restricted to authorised Karex personnel only
- Internal systems are password-protected with access logs maintained
- We conduct periodic reviews of our data handling practices
Data breach notification
In the event of a data breach that is likely to result in a risk to your rights or interests, we will notify affected individuals and, where required, the relevant Malaysian supervisory authority, within a reasonable timeframe consistent with our obligations under the PDPA.
6. Your Rights
Under the Personal Data Protection Act 2010 (Malaysia) and, where applicable, related data protection frameworks, you have the following rights regarding your personal data:
- Right to access — request a copy of the personal data we hold about you
- Right to rectification — request correction of inaccurate or incomplete data
- Right to erasure — request deletion of your data where it is no longer necessary for the purpose it was collected
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing
- Right to lodge a complaint — with the Department of Personal Data Protection (JPDP) Malaysia if you believe your data has been mishandled
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days of receiving your request.
7. Third-Party Links
Our website may contain links to external websites operated by third parties. These links are provided for reference purposes only. Karex is not responsible for the privacy practices of external sites and encourages you to review the privacy policy of any site you visit.
8. Children's Privacy
Karex programmes are designed for senior managers and professionals aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently received data from a minor, please contact us at [email protected] and we will remove the data promptly.
9. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our data practices or applicable law. When material changes are made, we will update the "Last Updated" date at the top of this page. Continued use of the website following an update constitutes acceptance of the revised policy.
If the changes are significant, we may also notify enquirers and programme participants by email where we hold a current address.
10. Contact & Data Controller Details
Karex is the data controller for personal data collected through this website and its programme processes.
Data enquiries: [email protected]
Phone: +60 3 2382 7491
Address: Level 28, Menara 3 Petronas, KLCC, 50088 Kuala Lumpur, Malaysia
Supervisory authority: Department of Personal Data Protection (JPDP), Malaysia — pdp.gov.my