Privacy Policy

Effective date: 17 September 2026

1. About this notice

This Personal Data Protection Notice explains how [FULL LEGAL NAME / REGISTERED BUSINESS NAME], registration number [NUMBER], trading as MyJagaKita (“MyJagaKita”, “we”, “us” or “our”), collects, uses, discloses, stores and protects personal data in connection with myjagakita.com, our pilot programmes, learning workspaces, communications and related services (collectively, the “Services”).

For the purposes of Malaysia’s Personal Data Protection Act 2010 (Act 709), as amended by the Personal Data Protection (Amendment) Act 2024 (Act A1727) (“PDPA”), we are the data controller responsible for the personal data described in this notice.

Data controller details

  • Legal name: [FULL LEGAL NAME]
  • Registration number: [SSM / OTHER NUMBER]
  • Business address: [ADDRESS]
  • Privacy email: [privacy@myjagakita.com]
  • General email: [trenddsolve@gmail.com OR REPLACEMENT]
  • Data Protection Officer, if applicable: [NAME AND CONTACT / NOT APPLICABLE]

2. Personal data we may collect

Depending on how you interact with the Services, we may process:

  • Identity and contact data: name, email address, telephone number, age range, organisation, institution or cohort.
  • Account data: username, account identifier, authentication records and account preferences.
  • Learning and participation data: goals, selected topics, recommended content, actions, check-ins, progress, reflections, feedback and programme participation.
  • Proof and uploaded content: notes, documents, screenshots, photographs or other evidence that you choose to submit. Please avoid uploading identity documents, financial information, health information, precise location data or information about another person unless it is necessary and you are authorised to do so.
  • Community and communications data: posts, comments, messages, support enquiries, survey responses and communications with us or other authorised participants.
  • Technical and usage data: IP address, browser and device information, login time, pages viewed, cookie identifiers, diagnostic logs and security events.
  • Transaction data: payment status, invoices and limited transaction records, if paid services are introduced. Full payment-card information should be processed by the appointed payment provider and not stored by MyJagaKita.
  • AI interaction data: goals, prompts, responses, feedback and related context used to provide recommendations or assistance.
  • Sensitive personal data: we do not intentionally require sensitive personal data, including health, religious-belief, political-opinion, alleged-offence or biometric data. If such data is genuinely required, we will provide additional information and obtain express consent where required by law.

3. Sources of personal data

We may obtain personal data:

  • directly from you through registration forms, the website, learning workspace, surveys, uploads, messages and programme activities;
  • automatically from your browser or device through cookies, logs and similar technologies;
  • from an organisation, institution, programme partner or cohort administrator that enrols or refers you, where authorised; and
  • from service providers that support registration, hosting, authentication, communications, payments, analytics, security or programme delivery.

If you provide personal data about another person, you confirm that you are authorised to do so and have informed that person about this notice where required.

4. Why we process personal data

We may process personal data to:

  1. register you and administer your account or pilot participation;
  2. understand your goals and personalise learning recommendations;
  3. provide book-summary discovery, micro-actions, progress tracking, reflection and related features;
  4. allow you to upload, organise and review visible proof of progress;
  5. facilitate cohort activities and community features according to your sharing choices;
  6. communicate service messages, schedules, support responses and programme updates;
  7. send optional news or marketing where you have chosen to receive it;
  8. analyse and improve the Services, content, safety and participant experience;
  9. prevent fraud, misuse, unauthorised access and security incidents;
  10. maintain records, resolve disputes and enforce applicable terms; and
  11. comply with legal, regulatory and lawful reporting requirements.

We process personal data in accordance with the PDPA and obtain consent where required. Consent for optional marketing or optional sharing is separate from access to the core Services and may be withdrawn.

5. AI-guided recommendations

MyJagaKita may use artificial-intelligence services to match your stated goals and context with relevant learning materials, generate suggested micro-actions, summarise inputs or support reflection.

AI-generated content may be inaccurate or unsuitable. It is provided as guidance rather than professional medical, psychological, legal, financial, educational or employment advice. You should review recommendations before acting on them and avoid entering unnecessary sensitive or confidential information.

[CONFIRM BEFORE PUBLISHING: MyJagaKita does not use solely automated processing to make decisions that produce legal or similarly significant effects about participants.]

6. What is obligatory and what is optional

Fields marked as required are necessary to create an account, respond to an enquiry or provide the relevant programme feature. If you do not provide required information, we may be unable to register you, respond to you or provide that feature.

Information such as optional profile details, reflections, uploads, community posts and marketing preferences is voluntary unless clearly stated otherwise. You may limit optional processing by leaving optional fields blank, changing your settings, choosing not to share content with a cohort, or contacting us.

7. Sharing and disclosure

We may disclose personal data only as reasonably necessary to:

  • authorised MyJagaKita personnel and programme facilitators;
  • hosting, cloud-storage, website, email, messaging, support, analytics, security, authentication, payment and AI service providers acting for us;
  • an organisation, institution or programme partner responsible for your cohort, but only to the extent explained during enrolment;
  • professional advisers, insurers, auditors or contractors subject to confidentiality obligations;
  • regulators, law-enforcement bodies, courts or other parties where required or permitted by law; and
  • a successor in connection with a genuine merger, restructuring, financing or transfer of the service, subject to appropriate safeguards.

We do not sell personal data. We will not make your private proof, reflections or learning activity visible to other participants unless you choose to share it or the relevant feature clearly identifies the intended audience.

Actual service providers to disclose: [LIST PROVIDER, PURPOSE AND COUNTRY—for example, website host, form provider, Notion, email platform, analytics provider, AI provider and payment provider].

8. International transfers

Some service providers may process or store personal data outside Malaysia. Where personal data is transferred internationally, we will take reasonable steps to ensure that the destination has substantially similar personal-data protection laws or that the recipient provides an adequate level of protection, or we will rely on another condition permitted by section 129 of the PDPA. Appropriate contractual, technical and organisational safeguards will be applied where required.

9. Retention

We retain personal data only for as long as necessary for the stated purposes, to protect legitimate legal interests and to meet legal, accounting or regulatory obligations. We will then securely delete, destroy or anonymise it.

Proposed schedule—confirm operationally before publishing:

  • Account and programme records: while active and up to 24 months after the account or pilot ends.
  • User uploads, proof and reflections: while active and up to 90 days after a verified deletion request, unless retention is required by law or for a dispute.
  • Enquiries and support messages: up to 24 months after the matter is closed.
  • Security and technical logs: normally up to 12 months.
  • Consent, privacy-request and compliance records: up to 7 years.
  • Financial and tax records: as required by Malaysian law, commonly 7 years.

Backups may retain residual copies for a limited period until they are overwritten, with access restricted.

10. Security

We use reasonable and practical administrative, technical and physical measures appropriate to the nature of the data, including access controls, authentication, staff or contractor confidentiality, secure configuration, backups, monitoring and appropriate service-provider requirements. No internet service is completely secure, so we cannot guarantee absolute security.

If a personal data breach occurs, we will assess and respond to it and make notifications to the Personal Data Protection Commissioner and affected individuals where required by the PDPA.

11. Your rights and choices

Subject to the PDPA and applicable exceptions, you may:

  • request access to personal data we hold about you;
  • request correction of inaccurate, incomplete, misleading or outdated data;
  • withdraw consent for processing based on consent;
  • request that processing likely to cause unwarranted damage or distress cease;
  • opt out of direct marketing at any time;
  • request data portability where applicable, technically feasible and compatible; and
  • ask us to delete data that is no longer required, subject to legal, security, recordkeeping and dispute-related obligations.

To exercise a right, email [privacy@myjagakita.com] with the subject “Privacy Request”. We may request information necessary to verify your identity and authority. We will respond within the period required by law. A permitted fee may apply to certain data-access requests, and we will inform you beforehand.

Withdrawing consent does not affect processing already carried out lawfully and may affect our ability to provide a feature that requires the relevant data.

12. Cookies and similar technologies

We may use:

  • Strictly necessary cookies for security, login, preferences and core website functions;
  • Analytics cookies to understand aggregate website usage; and
  • Marketing cookies, only if such tools are introduced and the required choice has been obtained.

Where required, non-essential cookies will not be activated until you make a choice. You can also manage cookies through your browser. [ADD A LINK TO A COOKIE NOTICE AND COOKIE SETTINGS IF NON-ESSENTIAL COOKIES ARE USED.]

13. Children and young participants

[SELECT AND CONFIRM ONE APPROACH BEFORE PUBLISHING.]

Option A—Adults only: The Services are intended for persons aged 18 and above. We do not knowingly collect personal data from a child. If you believe a child has provided data without appropriate authorisation, contact us.

Option B—Young participants: Where a programme accepts participants under 18, we will provide age-appropriate information, obtain consent or authorisation from a parent or guardian where required, limit collection and sharing, and apply additional safeguards. Young participants should not publicly share proof containing school details, identity documents, precise location or information about other children.

14. Third-party links and embedded services

The website or workspace may contain links to or integrations with third-party services. Those parties process data under their own privacy notices. We encourage you to review them before providing information. This notice does not govern an independent third party’s processing.

15. Changes to this notice

We may update this notice to reflect changes to the Services, vendors or law. We will post the revised version with a new effective date and provide additional notice where a change materially affects participants.

16. Questions and complaints

Please contact us first so we can address your concern:

  • Email: [privacy@myjagakita.com]
  • Address: [BUSINESS ADDRESS]
  • Data Protection Officer, if applicable: [CONTACT]

You may also contact or lodge a complaint with the Personal Data Protection Commissioner of Malaysia (JPDP) through the official website at www.pdp.gov.my.

17. Language

This notice is available in Bahasa Malaysia and English. If there is any inconsistency, [STATE WHICH VERSION PREVAILS], subject to applicable Malaysian law.