Privacy Policy

We collect information you provide directly when you:

• Contact us — name, email address, WhatsApp / phone number, and the message you send.
• Place an order — name, email address, phone number, and any shipping or billing address you supply.
• Enrol in a course — name and email address used to provision your access.

We also collect limited technical data automatically (browser type, pages visited, approximate location via IP address) through standard server logs and analytics tools, to help us understand how the site is used.

We use the information collected to:

• Process and fulfil your orders and send transactional emails (order confirmation, receipt).
• Provision access to digital products and courses you have purchased.
• Respond to enquiries and provide customer support.
• Send service-related updates where you have opted in or where permitted by law.
• Improve our website and service offerings based on aggregated, non-identifiable analytics.
• Comply with legal obligations under Malaysian law.

We do not sell or rent your personal data to third parties.

All payments are processed by Billplz Sdn Bhd, a licensed payment service provider in Malaysia. When you click “Pay Now” you are redirected to Billplz’s secure checkout. 5StepAds does not receive or store your card or banking credentials. Billplz’s own privacy policy governs how they handle your payment data.

Your personal data is stored on Supabase infrastructure hosted in Singapore. We apply industry-standard security measures including encrypted connections (TLS/HTTPS), access controls, and role-based permissions to protect your data from unauthorised access or disclosure.

No method of transmission over the internet is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

We use essential cookies required for the site to function (e.g., your shopping cart session). We may also use analytics cookies to understand aggregate site usage. You can disable cookies in your browser settings; however, some features may not work as expected.

We share your data only with:

• Service providers — Billplz (payments), Supabase (database), and email delivery services — strictly to fulfil our services.
• Legal authorities — when required by Malaysian law, court order, or to protect our legal rights.

All third-party service providers are bound by contractual obligations to protect your data.

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate personal data.
• Withdraw consent to the processing of your personal data (subject to legal or contractual limitations).
• Request that we limit or cease use of your personal data for direct marketing.

To exercise any of these rights, contact us at admin@5stepads.com. We will respond within 14 business days.

We retain personal data for as long as necessary to fulfil the purposes described above, or as required by Malaysian law (typically 7 years for financial records). When data is no longer required, it is securely deleted or anonymised.

Our site may contain links to third-party websites (e.g., Billplz, Meta, WhatsApp). We are not responsible for the privacy practices of those sites and encourage you to review their policies.

We may update this policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of our services after changes are posted constitutes your acceptance of the revised policy.

If you have any questions or concerns about this Privacy Policy, please contact: