Introduction and Scope

At cavoralithos, we understand that managing your budget and financial planning requires trust. This privacy policy explains how we collect, use, protect, and share your personal information when you use our budget calendar planning platform at cavoralithos.org.

This policy applies to all users of our services in Malaysia and covers all personal data we process in connection with our budget calendar planning tools and related financial services. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and maintain transparency about our data practices.

Information We Collect

We collect several types of information to provide and improve our budget calendar planning services. Understanding what we collect helps you make informed decisions about using our platform.

We collect this information through direct input when you use our budget planning tools, automatically through cookies and similar technologies, and when you communicate with our support team. We do not access your bank accounts directly - all financial data is manually entered by you.

How We Use Your Information

Your information serves specific purposes related to providing our budget calendar planning services. We process your data lawfully and only for legitimate business purposes.

• Provide budget calendar functionality and financial planning tools
• Generate spending insights and budget recommendations based on your input
• Send important account notifications and service updates
• Improve our platform based on user behavior and feedback
• Provide customer support and resolve technical issues
• Ensure security and prevent unauthorized access to your account
• Comply with legal requirements and regulatory obligations in Malaysia
• Develop new features for budget management and financial planning

We process your personal data based on your consent, contractual necessity for providing our services, legitimate business interests, and legal compliance requirements. You can withdraw consent for marketing communications at any time through your account settings.

Data Sharing and Disclosure

We maintain strict controls over who can access your personal information. We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

Our service providers include cloud hosting companies, email service providers, and analytics tools. These partners are contractually required to protect your data and can only use it for specified purposes related to providing our services.

We may disclose your information if required by Malaysian law, court orders, or government regulations. We may also share information to protect against fraud, enforce our terms of service, or protect the rights and safety of our users.

Your Privacy Rights

Under Malaysia's Personal Data Protection Act 2010, you have several important rights regarding your personal data. We respect these rights and provide easy ways to exercise them.

To exercise these rights, contact us at info@cavoralithos.org with your request. We will verify your identity and respond within 21 days as required by Malaysian data protection law. Some requests may require additional time for complex data retrieval or verification processes.

Data Security and Protection

We implement comprehensive security measures to protect your personal and financial planning data from unauthorized access, alteration, disclosure, or destruction.

• Industry-standard encryption for data transmission and storage
• Regular security audits and vulnerability assessments
• Access controls limiting employee access to personal data
• Secure data centers with physical and digital protection measures
• Regular backups stored in encrypted, geographically distributed locations
• Multi-factor authentication options for user accounts
• Monitoring systems to detect and prevent unauthorized access attempts

While we implement strong security measures, no system is completely immune to security risks. We encourage you to use strong passwords, enable two-factor authentication, and log out of shared devices. Report any suspicious account activity to our support team immediately.

Data Retention and Deletion

We retain your personal information only as long as necessary to provide our services and comply with legal obligations. Different types of data have different retention periods based on their purpose and legal requirements.

Marketing communications data is deleted within 30 days of unsubscribing. Support ticket records are kept for 3 years. Usage analytics are anonymized after 2 years and may be retained indefinitely for service improvement purposes.

When data reaches the end of its retention period, we securely delete or anonymize it using industry-standard data destruction methods. You can request earlier deletion of your account data, subject to any legal retention requirements.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our budget calendar planning platform. These technologies help us remember your preferences, analyze site usage, and improve our services.

Essential cookies are necessary for basic platform functionality like maintaining your login session and remembering your budget preferences. These cannot be disabled without affecting the platform's operation.

Analytics cookies help us understand how users interact with our budget planning tools so we can improve the user experience. Marketing cookies may be used to show you relevant content and track the effectiveness of our communications.

You can control cookie settings through your browser preferences. Disabling certain cookies may limit some platform features but will not prevent you from using our core budget planning tools.

International Data Transfers

Your data is primarily stored and processed within Malaysia or in countries with adequate data protection standards. When we transfer data internationally, we ensure appropriate safeguards are in place.

Some of our service providers may be located outside Malaysia, including cloud hosting and customer support services. We only work with providers that maintain adequate data protection standards and sign data processing agreements that protect your information.

Any international transfers comply with Malaysia's Personal Data Protection Act 2010 requirements for cross-border data transfers. We regularly review our international partners to ensure continued compliance with data protection standards.

Children's Privacy

Our budget calendar planning services are designed for adults and we do not knowingly collect personal information from children under 18 years of age. If you are under 18, please do not use our services or provide any personal information.

If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information as quickly as possible. Parents or guardians who believe their child has provided personal information to us should contact us immediately.