Protecting Your Personal Information

(1) Handling of Personal Information

Duranno Father School Malaysia (hereafter “the Organization”) values your personal information. We comply with relevant laws (e.g. Network Utilization & Promotion of Information Protection) to ensure your information is protected and handled carefully.

(2) What Personal Data We Collect & How

• When you register as a member, we collect necessary details: name, ID, password, email, birthdate, gender, phone number.
• Using mobile services or apps, device info (such as device model, OS version) and usage statistics may be collected in ways that do not identify individuals. If additional data is needed, we will inform you and seek consent.
• For orders (goods), we collect address, contact numbers, email, etc.
• Automatically collected data may include IP address, cookies, access logs, payment records, misuse records, etc.
• For paid services: payment agency providers may collect payment details. The Organization itself does not retain full payment card information.

(3) Purpose of Use

We use your personal data for:

• Providing our services and managing contracts, billing, content delivery, authentication, device synchronization.
• Member management, verifying identity, preventing misuse, handling disputes, sending announcements.
• Development of new services, personalized services, statistical analysis, marketing, events.

(4) Consent & Withdrawal

• When you sign up, you agree via a consent “Agree” button. You may withdraw consent later.
• If third-party partners collect data, you will also be informed and asked for your consent.

(5) Sharing Data

• We use your information only within the scope of purposes we have declared.
• We do NOT provide data to third parties except when:

1. You have given permission; or
2. Required by law or for investigations by legal authorities.

(6) Data Retention & Membership Cancellation

• If you request account deletion or withdraw consent, or when purposes are fulfilled, we will delete data without undue delay.
• Some data will be retained for legal obligations or records:

1. Name, ID, email — for about 6 months (e.g. to prevent misuse)
2. Records of contracts/orders, etc. — 5 years
3. Records of complaints/dispute handling — 3 years, etc.

(7) Rights & Obligations

• You have the right to view, correct, or delete your personal info, and to withdraw from membership.
• You must provide accurate information, maintain password security, and avoid misuse of others' information.
• Misuse or false info may lead to limitation or termination of membership.

(8) Security Measures

• Passwords are encrypted.
• Networks and systems are protected (anti-virus, firewalls, backups).
• Only authorized staff handle personal data, trained and bound to confidentiality.
• Procedures exist for handling and preventing data leaks, misuse, or breaches.

(9) Notice

• This policy was posted & enforced from 22 September 2025.
• Changes to this policy will be announced via the website at least 10 days in advance.