Privacy notice

Who we are

This website is operated by Finmax Wealth Advisors Sdn. Bhd. (registration number 202301003476 / 1497395-A), a financial planning firm based in Johor, Malaysia. In this notice, "we", "us" and "FinMax" refer to that company, which is the data user responsible for the personal data described below.

What we collect

When you submit an enquiry — through the form on our contact page, or the life planner on our homepage — we collect the information you provide:

• Your name
• Your email address
• Your phone number
• Your age range (a broad band, such as 25–34), on the contact form
• The topic you would like help with
• Your message or note, if you choose to write one
• From the life planner: the life goals you selected and your quick-check answers (broad bands such as roughly how many months of emergency savings you hold — never amounts)
• The date and time your enquiry was received

Supplying this information is entirely voluntary. However, we cannot respond to an enquiry without at least your name and a way to contact you, so those fields are required if you wish to hear back from us.

We do not ask for, and you should not send us, sensitive personal data through this form — including identity card numbers, bank or account details, income figures, or health or medical information. If we go on to work together, any such information will be collected separately through a secure process, under its own terms.

What we do not collect

We want to be specific about this, because many websites behave differently:

• No cookies. This site does not set any cookies, and there is no cookie banner because none is needed.
• No analytics or tracking. We do not use Google Analytics or any similar service, and there are no advertising or social media tracking pixels.
• No third-party fonts or scripts loading as you browse. Our typefaces are served from our own domain, so no font provider receives your visit.
• No health check answers unless you send them. The life planner and financial health check run inside your browser. Your goals and answers are transmitted only if you submit them with your details in the life planner's final step; otherwise they are gone as soon as you leave or refresh the page.
• No account, and no password. There is nothing to sign up for.

As with any website, our hosting provider automatically records basic technical request information, such as IP addresses, in its server logs for security and reliability purposes. We do not use these logs to build a profile of you.

Why we use your data

We use the information from your enquiry only to:

• Reply to you and arrange an initial conversation
• Understand what you would like help with, so that conversation is useful
• Keep a record of enquiries we have received and how we responded
• Meet our legal, regulatory and record-keeping obligations as a financial adviser

We will not use your details to send unrelated marketing, and we will not sell, rent or trade your personal data to anyone.

Who has access to it

Your enquiry is visible to FinMax's directors and to the staff or authorised representatives who need it in order to respond to you.

We also rely on service providers who process data on our behalf and only under our instructions:

• Google (Firebase Hosting and Cloud Firestore) — hosts this website and stores enquiry records.

We may also disclose personal data where we are required or permitted to do so by law, by a regulator such as Bank Negara Malaysia, or by a court.

Where your data is stored

Enquiry records are stored on Google Cloud infrastructure. Because our provider operates regional data centres, your data may be stored or processed on servers located outside Malaysia, within the Asia-Pacific region.

Where personal data is transferred outside Malaysia, we take reasonable steps to satisfy ourselves that it will receive protection comparable to that required under the Personal Data Protection Act 2010.

How we protect it

The website is served entirely over an encrypted HTTPS connection, and enquiries are transmitted encrypted in transit.

Our enquiry database is configured so that the public can submit an enquiry but cannot read, alter or delete any enquiry — including their own or anyone else's. Access to stored enquiries is restricted to authorised FinMax personnel signed in to our administrative console.

No system can be guaranteed completely secure, but we review these arrangements and keep access limited to those who need it.

How long we keep it

We keep enquiry records only for as long as necessary for the purposes described above, and for any period we are required to retain records under Malaysian law and financial services regulation. After that, records are deleted or anonymised.

Your rights

Under the Personal Data Protection Act 2010, you may:

• Ask for access to the personal data we hold about you
• Ask us to correct data that is inaccurate, incomplete or out of date
• Ask us to delete data we no longer need to hold
• Withdraw your consent, or ask us to limit how we process your data
• Ask how your data has been used, and raise a complaint about how we have handled it

To make any of these requests, contact us using the details below. We may need to verify your identity before we act, so that we do not disclose your data to someone else. We aim to respond to every request promptly and within the period required by law.

Changes to this notice

If we change how we handle personal data — for example, if we introduce analytics or an email notification service — we will update this notice and change the date shown at the top of this page before the change takes effect.