Privacy Policy Overview

Key Definitions

This section defines terms used throughout the policy to ensure clarity about the types of data we process, the actors involved, and the services provided by ValueLabFocus.

Personal data means any information that identifies or can reasonably identify an individual, including name, contact details, business affiliation, and identifiers provided during registration or communications with ValueLabFocus.

Processing refers to any action performed on personal data, such as collection, storage, retrieval, use, disclosure, or deletion, carried out in support of delivering services, billing, communication, and compliance activities.

User refers to any individual who accesses ValueLabFocus.pro, registers for training, subscribes to communications, or otherwise interacts with our services, including business owners participating in our programs.

Service includes ValueLabFocus training programs, workshops, online resources, templates, coaching sessions, and any related customer support or administrative activities necessary to operate these offerings.

Cookies are small data files placed on your device to store preferences, permit sign-in sessions, and collect analytics data that helps us improve website performance and user experience.

Data We Collect

We collect two primary categories of data: information you provide directly and data automatically collected when you use our website or participate in services. We limit collection to data necessary for the defined purposes below.

Purposes of Processing

We process personal data for specific, limited purposes connected to our operations and the services we provide. Each purpose is supported by a lawful basis as described below.

• To register and manage participant accounts and course enrollments
• To process payments and issue invoices for services rendered
• To deliver training materials, coaching sessions, and program updates
• To communicate about scheduling, support requests, and administrative matters
• To analyze usage and performance to improve course content and user experience
• To ensure security and detect or prevent fraud and abuse
• To comply with legal obligations and respond to lawful requests
• To conduct limited marketing communications where consent has been obtained

Legal Basis for Processing

We rely on relevant legal bases to process personal data. The applicable basis depends on the purpose of processing and the context in which data was collected.

• Performance of a contract: processing necessary to deliver agreed services and manage subscriptions
• Consent: where you have given permission for communications or marketing activities
• Legitimate interests: for fraud prevention, service improvement, and security where such interests do not override user rights
• Legal obligations: processing required to meet statutory or regulatory duties

Cookies and Tracking

We use cookies and similar technologies to enable site functionality, measure performance, and personalize user experience. You can control cookie preferences through your browser and any preference tools we provide.

Cookies used include session cookies for site functionality, persistent cookies to remember preferences, and third-party analytics cookies to collect aggregate usage information.

Categories include strictly necessary cookies, performance and analytics cookies, and optional marketing cookies used only with consent.

You can manage or disable cookies through your browser settings. Disabling certain cookies may affect site functionality or access to features of ValueLabFocus.pro.

View our detailed cookie policy at https://ValueLabFocus.pro/cookie-policy

Data Sharing and Disclosures

We share personal data only as necessary for providing services, with trusted service providers, or to comply with legal requirements. Any sharing is governed by contracts that require appropriate protection of the data.

• Service providers that perform payment, hosting, analytics, and communication functions
• Professional advisors, including legal and accounting service providers, where necessary for compliance
• Authorized partners involved in program delivery with strict data handling agreements
• Competent authorities when required by law or to respond to lawful requests
• Acquirers or advisers in connection with business reorganizations or transfers
• Aggregated or anonymized data that does not identify individuals and may be used for research

International Data Transfers

As a global digital service, ValueLabFocus may transfer personal data to service providers and partners located outside Malaysia. Transfers are limited to jurisdictions necessary for service delivery.

When transfers occur, we apply safeguards such as contractual data protection clauses, assessing the recipient's security practices, and technical measures like encryption to protect the data in transit and at rest.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes described, to meet legal obligations, and to resolve disputes. Retention periods vary by category of data and the services provided.

Account information is retained for the duration of your active relationship and for a period thereafter to allow for recordkeeping and possible reinstatement, typically not less than 2 years unless a different retention period is required by law.

Messages, support records, and correspondence are kept for the period necessary to address customer service needs and for a reasonable time to support compliance and improvement processes.

Server logs and analytics data are retained in aggregated or pseudonymized form for performance monitoring and may be stored up to 3 years depending on operational needs.

Upon request where lawful and applicable, we will delete or anonymize personal data when it is no longer necessary for the purposes outlined, subject to any legal or contractual obligations to retain certain records.

Security Measures

We maintain technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. Security practices are reviewed periodically to reflect evolving risks and industry best practices.

• Encryption of data in transit and at rest where appropriate
• Role-based access controls and multi-factor authentication for administrative accounts
• Regular security assessments, patch management, and staff training on data protection

Your Rights

Depending on applicable law, users may have rights regarding their personal data. To exercise these rights, please contact ValueLabFocus using the contact information above.

• Right to access personal data we hold about you
• Right to correct inaccurate or incomplete data
• Right to request deletion or anonymization where lawful and appropriate
• Right to restrict or object to certain processing activities
• Right to data portability for data provided in a structured, commonly used format
• Right to withdraw consent for processing activities based on consent, without affecting processing already performed
• Right to lodge a complaint with a competent supervisory authority if you consider your data protection rights have been infringed
• Instructions on how to exercise rights: submit a request to the contact details provided; we will respond within applicable statutory timeframes

Data Subject Rights and Requests

If you wish to exercise your rights regarding personal data processed by ValueLabFocus, you may submit a request to access, correct, restrict processing, object to processing, or request deletion where applicable under relevant law. Please include sufficient details to allow us to locate your records and verify your identity. Requests are handled in line with applicable data protection requirements and our internal verification procedures.

[email protected]

We aim to acknowledge receipt of a verified rights request within 14 calendar days. Depending on the complexity of the request and legal requirements, we may take up to 30 calendar days to provide a substantive response. Where applicable law permits, we will inform you of any extension and the reasons for it.

International Standards and Compliance

ValueLabFocus recognizes international data protection frameworks and, where applicable, will respond to requests consistent with the European Union's General Data Protection Regulation (GDPR) for individuals who are eligible under that framework. This section explains key rights and how to contact us for GDPR-related queries.

• Right of access: You may request confirmation whether we process your personal data and obtain a copy of the data we hold about you.
• Right to rectification: If your personal data is inaccurate or incomplete, you can request updates or corrections.
• Right to erasure: In certain circumstances you may request deletion of personal data we hold about you, subject to legal and contractual retention obligations.
• Right to restriction: You may ask us to restrict processing in specific situations, for example while accuracy or lawfulness is being verified.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your personal data in a structured, commonly used format.
• Right to object and automated decision-making: You can object to processing for direct marketing and, in certain cases, to processing based on legitimate interests. You may also request human intervention if decisions are made solely by automated means.

If you believe your rights under GDPR have been infringed and you are entitled to file a complaint with a supervisory authority, you may do so. ValueLabFocus will engage constructively with any supervisory authority contribute a matter and will cooperate as required by law.

Marketing Communications

ValueLabFocus may contact you with information about workshops, training programs, research updates and relevant services related to economic mindset development for business owners. Communications will be relevant, targeted and sent only where we have a lawful basis such as consent or a legitimate interest. We strive to limit frequency and provide clear content about the nature of each communication.

You may opt out of marketing communications at any time by using the unsubscribe link in emails, updating your preferences via our website ValueLabFocus.pro, or contacting our data protection team at the postal address or telephone number listed in this policy. Processing unrelated to marketing will continue as required for service delivery and legal obligations.

Children and Minors

Our services and content are intended for business owners and professionals. We do not knowingly collect personal data from individuals under 16 for the purposes of our adult-focused training programs. If we become aware that we have collected personal data from a minor without appropriate consent, we will take steps to delete such data in accordance with applicable law.

Third-Party Links and Services

ValueLabFocus web pages and communications may contain links to third-party websites, tools or resources. Clicking on third-party links may redirect you away from ValueLabFocus.pro. We do not control external sites and are not responsible for their privacy practices or content. Please review third parties' privacy policies before submitting personal data to them.