Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Last updated: December 2024
GURU Credits ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our loan consultation services. We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
Information We Collect
- Personal identification information (Name, IC number, email address, phone number)
- Financial information (Income details, existing debts, loan commitments)
- Employment information (Employer name, job title, employment duration)
- Credit-related documents (CCRIS report, CTOS report, bank statements)
- Device and usage data (IP address, browser type, pages visited)
How We Use Your Information
- To perform credit analysis and loan eligibility assessments
- To provide personalized bank and lender recommendations
- To communicate with you about your applications and services
- To improve our services and user experience
- To comply with legal and regulatory requirements
- To send important updates about our services (with your consent)
Data Security
- All data is encrypted using industry-standard SSL/TLS encryption
- Access to personal data is restricted to authorized personnel only
- Regular security audits and vulnerability assessments are conducted
- Secure data storage with backup and disaster recovery measures
- Two-factor authentication for administrative access
Your Rights Under PDPA
- Right to access your personal data held by us
- Right to correct any inaccurate personal data
- Right to withdraw consent for data processing
- Right to request deletion of your personal data
- Right to be informed about how your data is used
- Right to data portability where applicable
Data Sharing & Third Parties
- We do not sell your personal information to third parties
- Data is only shared with banks/lenders with your explicit consent
- Service providers (payment processors, cloud hosting) are bound by confidentiality agreements
- We may disclose information when required by law or court order
- Anonymous, aggregated data may be used for statistical analysis
Data Retention
- Personal data is retained for up to 12 months after your last transaction
- Financial documents are securely deleted within 30 days of analysis completion
- Account information is retained while your account is active
- You may request immediate deletion of your data at any time
- Some data may be retained longer if required by law
Cookies & Tracking
We use cookies and similar tracking technologies to enhance your experience on our website. Cookies help us understand how you use our services, remember your preferences, and improve our offerings. You can control cookie settings through your browser preferences. Essential cookies are required for the website to function properly and cannot be disabled.
Contact Us About Privacy
If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights under PDPA, please contact us: