Policy

Privacy Policy

Last updated: 2 August 2026

This policy applies to ridwanshah.com, including Ridwan Shah School at /school. It explains what personal information is collected, why, and who helps process it.

Who collects this information

This site is operated by Ridwan Shah. For any questions about this policy or your personal information, contact ridwan@ridwanshah.com.

What we collect

Depending on which part of the site you use:

  • Lead form at /live — name and email address, to send you the material you requested.
  • Course purchases at /school — full name, email and phone number, collected by CHIP during checkout. Order details (course, amount paid, seat number) are stored in our database to confirm your seat and send you course access.

We never see or store your credit/debit card number. Payment is processed directly by CHIP on their checkout page.

Why we collect this information

  • To send you what you requested or bought — playbook, course access, confirmation email.
  • To manage the seat cap for pre-order courses.
  • For accounting records and tax compliance.

Your information is not sold to third parties, and is not used for advertising.

Who helps process this information

A few third-party services are used to run this site:

  • CHIP (Chip-in Asia) — processes payments and collects checkout details.
  • Resend — sends transactional email (playbook, order confirmation).
  • Supabase — stores order records in a database (servers in Singapore).
  • Vercel — hosts this website.

Cookies and tracking

As of this policy’s last update, this site does not use Google Analytics, Meta Pixel, or other tracking cookies. If this changes in the future, this policy will be updated first.

How long information is kept

Order records are kept as long as needed to confirm your course access and for accounting records. If you'd like your information deleted sooner, contact us and we'll handle it as appropriate (for example, accounting records may need to be kept for a statutory period).

Your rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to:

  • Know what information we hold about you
  • Request correction if that information is wrong
  • Request your information be deleted, subject to accounting/legal requirements

To make a request, email ridwan@ridwanshah.com.

Children

This site and its courses are not intended for children under 18.

Changes to this policy

If this policy is updated, the date above will change. Any major change (for example, adding tracking/analytics) will be clearly stated.