Privacy Policy — SoulNowBiz

Definitions

This section defines terms used in the policy to describe types of data and processing activities. Clear definitions help users understand what information is handled and for what reasons.

Personal data means any information that identifies an individual directly or indirectly, such as name, email address, phone number, billing address, and user account identifiers.
Processing refers to any operation performed on personal data, including collection, storage, use, modification, transmission, and deletion.
User refers to an individual who interacts with SoulNowBiz services, including prospective students, enrolled participants, newsletter subscribers, and website visitors.
Service refers to the educational programs, digital resources, newsletters, and support communications provided by SoulNowBiz through SoulNowBiz.digital.
Cookies are small text files placed on a device by a website to remember preferences, session information, or to support analytics and functionality.

Data collection

SoulNowBiz collects data directly provided by users and data collected automatically during use of our website and platforms. We limit collection to what is necessary for the stated purposes.

Data you provide directly

Information supplied when registering, enrolling, contacting support, or submitting forms. This data enables course access, communication, billing, and customer service.

Full name and contact details (email, phone, postal address) used for communication and billing
Account credentials and profile information needed to access learning materials
Payment and billing information required to process course fees (handled via secure payment processors)
Communications content such as messages to support or feedback submitted about courses
Optional application or questionnaire responses when applying to programs or requesting tailored advice
Marketing preferences and consent choices provided for newsletters and promotional messages

Automatically collected data

When you visit SoulNowBiz.digital or use our online services, we automatically collect technical and usage data to improve service quality and security.

Device and browser information (device type, OS, browser version)
Usage data such as pages visited, time spent, and interactions within learning modules
IP address and approximate geolocation for analytics and security monitoring
Cookies and similar identifiers used for session handling and preference storage
Analytics data aggregated to understand course engagement and platform performance
Error logs and performance metrics to identify and fix technical issues

Data from third parties

We may receive limited information from trusted third-party services when necessary to provide or enhance our services, subject to contractual data protection terms with those providers.

Payment processor confirmations and transaction records needed to complete purchases
Third-party analytics providers that supply aggregated reports about website use
Integrations requested by users, such as calendar or communication tools, where users authorize data sharing

Purposes of processing

We process personal data for specific operational and lawful purposes. Each purpose uses the minimum data necessary.

Delivering educational content, account management, and course access
Processing payments and issuing invoices for course fees
Responding to user inquiries and providing technical or customer support
Improving services and performing analytics to understand user engagement
Sending administrative messages related to account status, updates, and important notifications
Managing marketing communications when users have consented to receive them
Ensuring platform security, fraud prevention, and abuse detection
Complying with legal obligations such as tax and record-keeping requirements

Legal bases for processing

We rely on lawful grounds appropriate to each activity. For example, contract performance for enrollment, legitimate interests for platform security and analytics, and consent for marketing communications.

Performance of a contract: to fulfill obligations related to course delivery and billing
Legitimate interests: for platform operation, security monitoring, and service improvement, balanced with user privacy
Consent: for optional marketing communications and use of certain tracking technologies
Legal compliance: where processing is required to meet statutory obligations such as accounting or tax reporting

European data protection references

Although SoulNowBiz is based in Malaysia, we reference commonly recognized European data protection concepts to help international users understand rights and safeguards relevant to their data.

Right to access: users can request a copy of personal data held about them
Right to rectification: users may request correction of inaccurate or incomplete information
Right to erasure: users can request deletion of personal data where processing is not required by law
Right to restrict processing: users may ask to limit how their data is used in certain circumstances
Right to data portability: users can request a structured, commonly used electronic format for their data when applicable
Right to object: users can object to processing based on legitimate interests or direct marketing

Cookies and tracking

Cookies are used to provide essential site functionality, enhance user experience, and measure usage. Users can manage cookie preferences through browser settings or provided controls.

Common cookie types include session cookies (temporary), persistent cookies (remember settings), and third-party cookies used by analytics or embedded services.

Categories cover essential cookies for functionality, performance cookies for analytics, and optional cookies for personalization or advertising where consent is required.

Users may adjust browser settings to block or delete cookies. Blocking certain cookies may affect functionality. We provide a cookie control tool on SoulNowBiz.digital to manage preferences.

Read our cookie policy

Data sharing and disclosure

SoulNowBiz shares personal data only with service partners necessary for providing services, under contractual terms that impose data protection obligations. We avoid unnecessary disclosures.

Payment processors for transaction handling and fraud prevention
Hosting and infrastructure providers that store course content and user accounts
Analytics and technical support vendors to maintain and improve the platform
Professional advisors such as accountants or legal counsel when required for compliance
Law enforcement or regulators when disclosure is required by applicable law
Third parties authorized by users through integrations or explicit consent

International data transfers

Personal data may be processed or stored by service providers located outside Malaysia. When transfers occur, we apply contractual safeguards and review provider security practices to protect data.

Appropriate safeguards include data processing agreements, standard contractual clauses where applicable, and assessment of provider security controls. We limit transfers to jurisdictions with adequate protections when possible.

Data retention

We retain personal data only as long as necessary for the purposes described, considering legal, tax, and operational requirements.

Account and profile information is retained for the duration of the user relationship plus a retention period for administrative and tax records as required by local law.

Communications with support and administrative messages are retained to provide consistent customer service and for dispute resolution for a limited period.

System logs and analytics data are retained in aggregated or pseudonymized form for service improvement; some raw logs may be kept temporarily for security contribute.

Users may request deletion of their account and personal data, subject to retention of certain records required for compliance or legitimate business needs such as business record-keeping.

Security measures

SoulNowBiz implements reasonable administrative, technical, and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. Security controls are reviewed periodically and updated as needed.

Encryption of data in transit using TLS and secure storage for sensitive records
Access controls and role-based permissions to limit data access to authorized personnel
Regular backups, software updates, and monitoring for suspicious activity

Your rights

Users have rights regarding their personal data. Requests should be sent to the contact address below and will be handled within a reasonable timeframe.

Access and obtain a copy of personal data held by SoulNowBiz
Request correction or deletion of personal data, subject to legal and contractual constraints
Withdraw consent for marketing communications and object to certain processing activities
The right to restriction of processing when certain conditions apply, allowing you to limit how personal data is used.
The right to object to processing of personal data for direct marketing purposes and certain other uses based on legitimate interests.
The right to withdraw consent at any time for processing activities that rely on consent, without affecting processing carried out before withdrawal.
The right to portable access to personal data provided electronically in a commonly used, machine-readable format where applicable.
The right to lodge a complaint with a supervisory authority if you consider our handling of personal data to be non-compliant with applicable data protection regulations.

How to exercise your privacy rights

To request access, correction, deletion, restriction, portability, or to object to processing, contact our privacy team with a clear description of your request and any supporting information. We will verify your identity before taking action to protect your account and data.

[email protected]

We aim to acknowledge receipt of privacy requests within 10 business days and to provide a substantive response within 30 calendar days where feasible. Complex requests may require additional time and we will inform you if that is the case.

Marketing communications and choices

SoulNowBiz may send marketing communications about courses, events, and resources related to spiritual business education. Communications are based on your consent or legitimate interest where permitted. You can opt out at any time using the unsubscribe link in messages or by contacting us directly.

To stop receiving promotional emails, click the unsubscribe link included in each email or contact [email protected]. Processing of unsubscribe requests will be completed within a reasonable time frame.

Children and personal data

Our services are intended for adults and professionals. We do not knowingly collect personal information from children under the age of majority in Malaysia. If you believe a child has provided personal data, contact us and we will take appropriate steps to remove that information.

Links to third-party sites

Our website may include links to external sites operated by third parties. We are not responsible for the privacy practices or content of those sites. Review the privacy policies of any external site before providing personal information.

Changes to this privacy policy

We review this privacy policy periodically. When changes are material, we will post an updated policy on SoulNowBiz.digital with a revised effective date. Continued use of our services after an update indicates acceptance of the revised terms.

General privacy information