Privacy Notice — AuraMDrive
This Privacy Notice explains how AuraMDrive collects, uses and protects personal data when delivering inner transformation courses for business leaders. The policy emphasizes practical examples and real-life scenarios — for instance, how participant email and role information are used to tailor learning cohorts and how anonymized feedback is analyzed to refine course modules. We describe data flows with concrete cases: registration for a leadership cohort, invoicing for a corporate client, and follow-up analytics for course improvement. We aim to be transparent about categories of data processed, legal bases, retention periods and rights available to individuals. If you participate in a pilot program, a use case summary will indicate which data elements are required to support scheduling, mentor matching and outcome tracking.
Definitions
This section provides concise definitions for terms used in this notice, followed by examples tied to AuraMDrive courses and services.
- Personal data means any information relating to an identified or identifiable individual, for example name, business email, professional title, company affiliation and billing details provided when registering for a leadership cohort.
- Processing refers to any operation performed on personal data, such as collection, storage, use, analysis, anonymization and deletion — e.g., storing assessment results for cohort placement and measuring training outcomes.
- User refers to any participant, prospective participant, corporate client contact, trainer or visitor interacting with AuraMDrive services or the AuraMDrive.digital platform.
- Service refers to AuraMDrive’s inner transformation programs, workshops, coaching, online course materials and related administrative systems used to enroll, deliver, assess and support participants.
- Cookies are small data files stored on a user’s device to recognize returning visitors, remember preferences, and support analytics; AuraMDrive uses cookies to improve course delivery and platform performance.
Data collection
We collect data from direct inputs, automated sources and third parties. The examples below align with practical course scenarios — registration, cohort planning, assessment and administrative communications.
Information you provide directly
When you register, contact us or submit course materials, we collect information that you supply. Typical items include:
- Contact details: full name, professional email address, business phone number and job title used to form peer groups and scheduling.
- Company information: employer name, industry sector and corporate billing details needed for invoicing and corporate reporting.
- Registration and payment data: enrollment forms, invoice details and payment method metadata required to process course fees.
- Assessment and training inputs: self-assessments, performance reflections, session notes and submitted assignments used for learning personalization.
- Communications: messages platform with mentors, support requests and responses used to resolve logistics and improve program delivery.
- Consent and preferences: marketing preferences, scheduling availability and consent choices used to respect your communication choices.
Automatically collected information
When you interact with AuraMDrive.digital we record technical and usage data to operate the platform and refine services through practical analytics.
- Device and browser information (device type, OS, browser version) to ensure platform compatibility in real training scenarios.
- Log and usage data (pages visited, session duration, content accessed) to analyze which modules support effective leader outcomes.
- IP address and approximate location to detect unusual access patterns and to localize scheduling for in-person or hybrid sessions.
- Cookies and tracking identifiers used for session continuity and analytics of engagement with course materials.
- Performance metadata from interactive tools (timestamps, submission history) to support cohort evaluations and case study development.
- Error and diagnostic data to troubleshoot platform issues and improve reliability in live workshop environments.
Third-party sources
We may receive information about you from partners and service providers that support AuraMDrive operations. Examples below show common integrations used in course delivery.
- Corporate clients and HR contacts who nominate executives and supply participant lists for cohort enrollment and billing.
- Payment processors and business service providers for validating and recording transactions related to course fees.
- Analytics and platform service providers that supply aggregated insights and performance metrics to improve course design.
Purposes of processing
We process personal data to administer courses, support participants, improve services and meet legal and contractual requirements. Each purpose is illustrated with a practical case scenario.
- Course delivery and management: administering enrollments, scheduling sessions, assigning mentors and sharing materials for cohorts.
- Participant support: responding to queries, accommodating access needs and coordinating practical logistics in workshop scenarios.
- Billing and administration: issuing invoices, processing payments and maintaining business records for corporate engagements.
- Personalization and learning analytics: analyzing assessment data to adapt pathways and group compositions based on demonstrated needs.
- Research and program improvement: using aggregated and anonymized feedback to refine curricula and create case studies for future cohorts.
- Security and fraud prevention: detecting unauthorized access to protect participant data and course integrity in live events.
- Legal and compliance obligations: responding to lawful requests from authorities or addressing regulatory requirements related to data processing.
- Marketing and communications: sending course announcements and event invitations where communication preferences are explicitly provided; practical examples include invitations to follow-up practice sessions.
Legal basis for processing
Depending on context, we rely on appropriate legal bases for processing personal data. The descriptions below relate to typical course interactions and administrative needs.
- Performance of a contract: processing necessary to enroll and provide the course to participants or corporate clients.
- Legitimate interests: improving course materials, ensuring platform security and conducting internal research aimed at better learning outcomes, balanced with participant privacy.
- Consent: where required for marketing communications, cookies beyond strictly necessary ones, or special categories of data if collected with explicit consent.
- Legal obligation: when processing is required to comply with statutory obligations such as tax and accounting requirements for corporate engagements.
Applicable rights and compliance notes
Where EU data protection rules apply, the following rights are relevant. We offer practical guidance and examples for exercising these rights in the context of AuraMDrive programs.
- Right of access: you can request a copy of personal data we hold about you — for example, enrollment records and assessment inputs from a completed cohort.
- Right to rectification: you may ask us to correct inaccurate contact or role information used for cohort placement.
- Right to erasure: in appropriate cases you can request deletion of personal data, for example when withdrawing from marketing communications and no contractual reason to retain data exists.
- Right to restrict processing: you may ask to limit processing while a dispute about accuracy is resolved, illustrated by a scenario where assessment records are under review.
- Right to data portability: where processing is based on consent or performance of a contract, you can request structured data exports for transfer to another provider.
- Right to object: you may object to processing based on legitimate interests, such as profiling for marketing; we will consider the objection against our legitimate grounds.
Cookies and similar technologies
AuraMDrive.digital uses cookies to support platform functionality, user experience and analytics. We describe cookie categories and how they are applied in course delivery contexts.
We use essential cookies for login and session management, preference cookies for remembering language and scheduling preferences, and analytics cookies to measure module engagement and completion rates in cohorts.
Cookie categories include: strictly necessary cookies (required for platform operation), performance cookies (analytics), functionality cookies (preferences) and optional marketing cookies (used only with consent).
You can manage cookies through your browser settings or via the cookie banner on AuraMDrive.digital. For practical cohorts, disabling certain cookies may affect functionality such as saved progress and personalized schedules.
Full cookie policy
Data sharing and disclosures
We share personal data with service providers and partners only where necessary for course operations. Each sharing scenario is tied to a practical activity, such as event organization or payment processing.
- Service providers: platform hosting, payment processors and communications providers used to run trainings and manage registrations.
- Corporate clients: participant lists and progress reports shared with client contacts as agreed in contracts for cohort deliveries.
- External trainers and mentors: limited participant information required to deliver coaching and feedback in a given cohort.
- Analytics partners: aggregated and de-identified engagement metrics used to improve course design and facilitator practices.
- Event partners and venues: necessary attendee details for in-person sessions, including dietary needs and emergency contact information when provided by participants.
- Legal and regulatory requests: disclosure to authorities when required by law or to respond to valid legal requests.
International transfers
Some service providers and platform components may process data outside Malaysia. When transfers occur, we apply safeguards appropriate to the context and applicable law, described below.
Safeguards include data processing agreements with contractual safeguards, selection of providers subject to comparable protections, and using approved transfer mechanisms where required. For practical cases, we document transfers when a vendor hosts cohort materials abroad.
Data retention
Retention periods vary by data type and purpose. We describe common retention patterns tied to operational scenarios such as active cohorts, invoicing, and long-term program evaluation.
Account information is retained for the duration of your relationship with AuraMDrive and archived for a defined period afterwards to meet contractual and accounting needs for corporate programs.
Support messages and correspondence are retained as long as necessary to resolve the matter and for a short archival period to inform future participant support scenarios.
System logs and analytics data are retained in aggregated or anonymized form for program improvement. Raw logs used for security may be retained for a limited period to detect and contribute incidents.
When retention periods expire or upon valid requests where applicable, we delete or anonymize personal data unless legal obligations require longer retention, for example for tax records related to course fees.
Security measures
AuraMDrive implements administrative, technical and organizational measures proportionate to the risk associated with the data we process. We focus on practical controls used in course delivery: access controls for mentor notes, encryption for stored assessments and secure channels for sharing session materials.
- Encryption of data in transit and at rest for sensitive course and payment information.
- Role-based access controls limiting who can view participant assessments and cohort reports.
- Regular backups, penetration testing, and operational audits to detect and address vulnerabilities.
Your rights
You have rights over your personal data. The section below outlines those rights and how they apply in common AuraMDrive scenarios such as cohort enrollment, follow-up communications and corporate reporting.
- Access: request a copy of the personal data we hold about you and examples of how it has been used.
- Correction: ask to update inaccurate or incomplete information, for example a changed job title or employer details.
- Erasure: request deletion of personal data where there is no legal or contractual basis to retain it.
- Restriction: request temporary suspension of processing while accuracy is verified or a dispute is resolved.
- Objection: object to processing based on legitimate interests, such as profiling for marketing lists.
- Portability: request structured, machine-readable copies of data provided to us for transfer to another provider.
- Withdraw consent: where processing is based on consent, you may withdraw that consent at any time for future processing.
- Complaint: lodge a complaint with a relevant supervisory authority if you consider your rights compromised; we can provide guidance on the appropriate authority.
How to make a rights request
To exercise your rights, contact us using the details under Contact details. Provide sufficient information to identify you and specify the request type. We may ask for identity verification or clarifying information to process your request safely and accurately.
[email protected]
We aim to respond to valid requests promptly and typically within 30 days of receipt. Complex requests or those requiring additional verification may take longer, in which case we will inform you and provide an expected timeframe.
Marketing communications
With your consent or where permitted under legitimate interests, AuraMDrive may send information about upcoming programs, case study releases and events. Communications are targeted and tied to practical topics such as leadership practice sessions and cohort alumni events.
You may opt out of marketing communications at any time by using the unsubscribe link in emails or by contacting us at [email protected]. Opting out will not affect transactional messages about enrollments or billing.
Children and minors
Our services are intended for professionals and business leaders. We do not knowingly collect personal data from individuals below the age of 16. If you believe we have inadvertently collected data of a minor, contact us so we can take appropriate action.
Links to third-party sites
AuraMDrive.digital may include links to third-party resources or partner platforms used for learning activities. Those sites have their own privacy policies; we are not responsible for their practices. For practical workshops, we identify partner platforms in advance and provide guidance on data items shared with them.
Changes to this notice
We may update this notice to reflect changes in services, legal requirements or operational practices. Material changes will be communicated to existing participants and posted on AuraMDrive.digital with the updated effective date.