Introduction
This Personal Data Protection and Privacy Notice ("Notice") is issued by MWMC Wealth Planners, inclusive of Mutual Wealth Management Consultant, MWMC Advisory, and any affiliated brands or legal entities under the MWMC Group (collectively referred to as "MWMC Wealth Planners," "the Company," "we," "our," or "us").
In compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, we are committed to protecting your personal data and ensuring that it is used only in a lawful, transparent, and responsible manner.
By interacting with us, using our services, visiting our website, or submitting your personal data to us, you are deemed to have read, understood, and agreed to be bound by this Notice.
1. Definition of Personal Data
"Personal Data" means any information that relates directly or indirectly to an individual, who is identified or identifiable from that information or from that and other information in our possession.
This may include, but is not limited to:
- Name, identification number (NRIC/passport), nationality
- Date of birth, gender, marital status
- Contact details (email address, phone number, mailing address)
- Financial or income-related information
- Employment details
- Medical or health records (if applicable to insurance/wealth planning)
- Signature, photographs, audio/video recordings
- Any other information you voluntarily provide to us
2. Collection of Personal Data
We may collect your personal data directly or indirectly through:
- Online forms on our website or landing pages
- Phone calls, emails, or WhatsApp/Telegram messages
- Social media platforms, campaigns, or events
- Referral by third parties or business affiliates
- Application, subscription, or enquiry about our services
3. Purpose of Data Processing
Your personal data is collected and processed for the following purposes:
- To verify your identity and contact information
- To provide financial, insurance, or estate planning consultation
- To prepare and submit quotations, proposals, or applications to financial/insurance institutions
- To communicate with you about products, updates, and client servicing matters
- To invite you to webinars, workshops, or networking events
- To comply with legal, regulatory, or compliance requirements
- For internal analysis, data monitoring, and business development
- For marketing, loyalty, and promotional communications (with your consent)
- For audit, risk assessment, dispute resolution, and fraud prevention
4. Disclosure of Personal Data
We may disclose your personal data to the following categories of third parties, where necessary:
- Licensed insurance companies or financial institutions
- Regulatory bodies or authorities (e.g., Bank Negara Malaysia, LHDN)
- Auditors, lawyers, accountants, and professional advisors
- Service providers engaged by us (e.g., IT support, CRM vendors, cloud storage)
- Affiliates, partners, or subsidiaries under confidentiality agreements
- Internal sharing across Mutual Wealth Management Consultant and MWMC Advisory for service continuity, compliance, and client management
- Any party to whom disclosure is required by law, subpoena, or court order
We shall ensure that these parties only use your data for the intended purposes and are bound by appropriate confidentiality obligations.
5. Data Retention
Your personal data will be stored only as long as necessary to fulfil the purposes stated in this Notice or to comply with legal and regulatory requirements. As a general guide:
- Client records — retained for a minimum of 7 years after the end of the client relationship, in compliance with the Financial Services Act 2013 and applicable regulatory requirements
- Insurance-related records — retained for the duration of the policy and for at least 7 years thereafter
- Website enquiries and marketing data — retained until you opt out or request deletion, or for up to 2 years from last interaction, whichever is earlier
Once data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our internal retention policy.
6. Security of Personal Data
We implement appropriate technical and organisational security measures to:
- Safeguard your data from unauthorised access, misuse, or disclosure
- Protect against loss, damage, alteration, or destruction
- Regularly audit our systems and educate our staff on data protection
No method of transmission or storage is fully secure. While we strive to protect your personal data, we cannot guarantee its absolute security.
Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will take prompt remedial action and notify affected individuals within a reasonable timeframe through appropriate channels (email, website notice, or direct communication). We will also report the breach to the relevant authorities as required under applicable law.
7. Transfer of Personal Data Outside Malaysia
Where necessary, your personal data may be transferred to entities outside of Malaysia (e.g., cloud servers or service providers), provided that:
- Such transfer is compliant with PDPA requirements, and
- Reasonable steps are taken to ensure that your data remains protected and secure
8. Marketing and Promotional Use
We may, from time to time, contact you with information about our services, educational materials, financial literacy programmes, or upcoming events.
You may opt out of receiving such marketing messages at any time by:
- Clicking the "unsubscribe" link in our email
- Informing us via email or WhatsApp
9. Your Rights
Under the PDPA, you have the right to:
- Access your personal data held by us
- Request correction or update of inaccurate or outdated data
- Withdraw your consent for us to process your personal data (in full or in part)
- Object to certain types of processing
- Request deletion of data (subject to legal obligations)
To exercise any of these rights, please write to our Data Protection Officer (see Section 12). We may charge an administrative fee for access requests.
You also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your personal data has been processed in a manner that does not comply with the PDPA. For more information, visit www.pdp.gov.my.
10. Consent to the Processing of Personal Data
By providing your personal data to us, you consent to the collection, use, processing, storage, disclosure, and transfer of your data as described in this Notice.
If you provide us with data relating to another person (e.g., spouse, children, nominee, or business partner), you confirm that you have:
- Informed them about this Notice, and
- Obtained their consent to provide their personal data to us
Where we collect sensitive personal data — including medical or health records as defined under Section 40 of the PDPA — we will seek your explicit consent separately before processing such data. Your explicit consent may be obtained through a written declaration, a signed form, or a clearly marked acknowledgement during the onboarding process.
If you do not consent to the processing of your personal data, please do not submit your data or contact us to withdraw your consent.
12. Contact Us
If you have any questions, concerns, complaints, or wish to exercise your rights regarding your personal data, please contact our Data Protection Officer:
- Name: Jayden Lim
- Address: 02-08, Jalan Austin Perdana 2/23, Taman Austin Perdana, 81100 Johor Bahru, Johor
- Phone: +6011-5787 3322
- Email: jaydenlim@mwmc.com.my
13. Updates to This Notice
We reserve the right to modify, update, or revise this Notice from time to time. Any material changes will be posted on our website or communicated to you through appropriate channels.
Your continued use of our services or interaction with us after such updates constitutes your acceptance of the revised Notice.