Privacy Policy

1. Data Controller

The data controller responsible for your personal information is:

Grandpine Capital Sdn Bhd
40-3 Jalan PJU 8/5B, Bandar Damansara Perdana,
47820 Petaling Jaya, Selangor, Malaysia
Email: info@grandpine.com
Phone: +603 7727 0671

2. Information We Collect

We collect and process personal data you provide directly or that is automatically collected during your use of our services, including:

• Full name
• Phone number
• Identity number or equivalent
• Address
• Investment experience
• Email address
• Device identifiers and app usage data

3. Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Consent: When you voluntarily provide data or agree to marketing communications.
• Contractual necessity: To perform obligations related to your account and app usage.
• Legal obligation: To comply with financial or regulatory requirements.
• Legitimate interest: To improve security, functionality, and services, provided this does not override your rights.

4. How We Use Your Information

• Verify your identity and eligibility for app features
• Personalize and improve your user experience
• Provide customer support and process transactions
• Enhance app functionality, performance, and security
• Comply with legal and regulatory obligations

5. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. When data is no longer needed, it is securely deleted or anonymized.

6. Information Sharing and Disclosure

We do not sell or rent your personal data. We may share it only in the following circumstances:

• Service Providers: With trusted partners who assist us in operating our services, subject to confidentiality agreements.
• Legal Requirements: When required to comply with applicable laws or lawful government requests.
• Business Transfers: In the event of a merger, acquisition, or asset sale, with proper data protection safeguards.

7. Your Rights Under PDPA (Malaysia)

If you are a resident of Malaysia, you have rights under the Personal Data Protection Act 2010 (PDPA) concerning your personal data. These rights include:

• The right to access your personal data.
• The right to correct your personal data.
• The right to withdraw consent for the processing of your personal data.
• The right to prevent processing likely to cause damage or distress.
• The right to prevent processing for direct marketing.
• The right to request deletion of your personal data.

To exercise any of these rights, please contact our Data Protection Officer at info@grandpine.com.

8. Data Security

We implement technical and organizational measures to protect your data against unauthorized access, loss, or misuse. While no digital system is entirely immune to breaches, we continually update our security practices to ensure a high level of protection.

9. Third-Party Links

Our app may include links to third-party websites or services. These entities have independent privacy policies, and we are not responsible for their content or data practices. Please review their policies before sharing your data.

10. Policy Updates

We may revise this Privacy Policy periodically to reflect changes in law, technology, or our operations. Updates will be posted here with a new effective date. We encourage users to review this page regularly.