Privacy policy overview

Definitions

For clarity, the following terms are used throughout this policy to describe data and processes we operate in delivering LeadHubGo services.

Personal data means any information that identifies or can reasonably be linked to an identifiable person, such as name, contact details, job title and business affiliation collected in connection with our coaching services.

Processing refers to any operation performed on personal data, including collection, storage, use, disclosure, transfer and deletion, whether automated or manual.

User describes any individual who accesses our website, signs up for a program, registers interest, or participates in LeadHubGo coaching activities.

Service refers to the director coaching programs, assessments, tools and related support provided by LeadHubGo via LeadHubGo.digital.

Cookies are small text files stored on a user's device to recognise preferences, support analytics and enable core functionality for the LeadHubGo website.

Why we process personal data

We process personal data for specific, limited purposes that enable us to provide coaching services, manage accounts and meet legal obligations. Each purpose aligns with a lawful basis and a reasonable business need.

• Provision and management of coaching programs, assessments and personalised development plans
• Account administration, scheduling sessions and communicating important service notices
• Billing, invoicing and payment processing for subscribed services
• Improving our services and developing new coaching materials using aggregated, anonymised insights
• Security, fraud prevention and maintaining the integrity of our systems
• Responding to user support requests and managing client relationships
• Complying with legal and regulatory obligations, and exercising or defending legal claims
• Sending marketing communications where you have given consent or where permitted and relevant to your relationship with LeadHubGo

Legal basis for processing

We rely on appropriate legal bases when processing personal data, depending on the purpose and context of processing.

• Performance of a contract: to deliver coaching services you have requested or purchased
• Consent: for optional marketing communications, cookies and certain data uses where we ask for your explicit consent
• Legitimate interests: for fraud prevention, service improvements and direct communications related to your account, balanced against your privacy rights
• Legal obligation: where we must process data to comply with laws, tax or reporting requirements

Your data protection rights

Depending on applicable law, you may have rights in relation to your personal data. We respect these rights and provide mechanisms to exercise them.

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — correct inaccurate or incomplete information
• Right to erasure — request deletion of data where retention is no longer necessary subject to legal limits
• Right to restriction of processing — request limits on how your data is used
• Right to object — object to certain processing including direct marketing where applicable
• Right to data portability — receive a copy of your data in a structured, commonly-used format when technically feasible

Cookies and tracking

We use cookies and similar technologies to support site functionality, personalise user experience and perform analytics. You can manage cookie preferences through your browser or our cookie settings.

Types of cookies we use include essential cookies for core functionality, analytics cookies to measure site performance, and preference cookies to remember settings.

Essential (required for the site), Functional (preferences), Analytics (usage and performance) and Marketing (where consented). We do not use profiling cookies without consent.

You can manage or disable cookies via your browser settings or the cookie control on LeadHubGo.digital. Disabling certain cookies may affect site features and user experience.

Cookie settings and details

Sharing personal data

We may share personal data with trusted third parties to deliver services, fulfil contracts and meet legal obligations. We limit sharing to what is necessary and use contractual safeguards.

• Payment processors for billing and subscription management
• Cloud hosting and infrastructure providers that store or process data on our behalf
• Customer relationship and scheduling platforms used to manage client interactions
• Professional advisors and legal representatives where required for compliance or dispute resolution
• Corporate affiliates and service partners when delivering joint services to a client
• Regulatory bodies or law enforcement when required by law or valid legal process

International transfers

Delivering our services may involve transferring personal data across borders. Transfers are assessed and managed to ensure an adequate level of protection consistent with applicable law.

We rely on mechanisms such as adequacy decisions, standard contractual clauses and robust technical protections like encryption when transferring data internationally.

Data retention

We retain personal data only as long as necessary for the purposes described, or to meet legal and regulatory obligations. Retention periods vary by data category and purpose.

Account and client records are retained while the account is active and for a limited period afterward to fulfil contractual and legal obligations; typically up to seven years where needed for tax or compliance.

Communications and support correspondence are kept for a period necessary to respond to inquiries and maintain service quality, commonly two years unless otherwise requested.

Technical logs and analytics data used for performance and security monitoring are retained for operational needs, generally up to one year.

When retention periods expire or you request deletion subject to legal constraints, we securely delete or anonymise personal data. Some information may remain in archived backups for a limited time.

Data security and protection

LeadHubGo takes practical measures to protect personal data collected in connection with our Director coaching programs. We use encrypted storage, access controls, and routine monitoring to reduce unauthorized access and accidental disclosure. Our security practices are reviewed periodically and adjusted as needed to reflect evolving threats and business requirements while maintaining client confidentiality.

• Encryption of data at rest and in transit using industry-standard protocols.
• Role-based access controls with logged access and regular access reviews.
• Regular backups, vulnerability scanning, and incident response procedures.

Your rights regarding personal data

As a participant or prospective participant in our Director coaching programs, you have a set of rights with respect to personal data we hold. LeadHubGo supports requests to review, correct, restrict, or delete personal information where applicable under Malaysian law and applicable regulations. We also provide methods to object to processing for direct marketing and to request a portable copy of your data.

• Right to access the personal information we hold about you.
• Right to request correction of inaccurate or incomplete data.
• Right to request deletion of personal data where lawful and appropriate.
• Right to request restriction of processing in certain circumstances.
• Right to object to processing for direct marketing purposes.
• Right to request transfer of your data in a commonly used format.
• Right to withdraw consent where processing is based on consent.
• Right to lodge a complaint with a supervisory authority if you believe your rights are not respected.

How to submit a rights request

To exercise any of the rights above, please contact our privacy team by email or post using the contact details below. Include your full name, the email or phone used with LeadHubGo, a clear description of the request, and any documents needed to verify your identity. We will follow verification steps to protect your privacy and the integrity of our service.

[email protected]

We aim to respond to verified requests promptly and will provide an initial acknowledgement within 14 business days. Complex requests may require additional time; we will inform you if an extension is necessary.