Privacy Policy

2. What personal data we collect

We collect the following categories of personal data:

• Contact data: name, email address, telephone number — collected through our website enquiry form or by direct correspondence.
• Enrolment data: name, email address, telephone number, and any information relevant to course placement — collected when you enrol in a course.
• Written work: exercises and written responses submitted as part of a course or the Tutored Reading Companion — held for the duration of your enrolment and for one year thereafter.
• Website usage data: pages visited, time on site, browser type — collected via analytics cookies where consent has been given.

Legal basis for processing

We process personal data on the following grounds under the PDPA 2010:

• Consent — for website analytics and marketing correspondence
• Contract — for the administration of course enrolments
• Legitimate interest — for responding to enquiries and maintaining student records

Retention periods

• Enquiry data not resulting in enrolment: 12 months
• Enrolment and student records: 5 years from the end of enrolment
• Written exercises: 1 year from end of course
• Website analytics: as determined by the analytics provider (typically 26 months)

3. How we use personal data

We use personal data for the following purposes:

• Responding to enquiries about our courses
• Processing enrolments and managing course places
• Communicating about course schedules, changes, or relevant administrative matters
• Providing written feedback on student exercises
• Sending information about new courses or intakes, where you have consented to receive it
• Improving our website and course materials through anonymised analytics

We do not use personal data for automated decision-making or profiling.

Data sharing

We do not sell or share personal data with third parties for marketing purposes. We may share data with service providers who support our operations (such as email and website hosting) under appropriate data processing agreements. We do not share student data with financial institutions or other organisations.

4. How we protect personal data

• Website communications are encrypted via HTTPS/TLS
• Access to student records is restricted to authorised staff
• Physical documents containing personal data are stored securely on our premises
• We review data security practices periodically
• In the event of a data breach affecting your personal data, we will notify you and the relevant authority as required under applicable law

5. Cookies

Our website uses cookies for essential functionality and, where consent is given, for analytics. Essential cookies cannot be disabled as they are necessary for the site to function. You can manage your cookie preferences at any time. For full details, see our Cookie Policy.

6. Your rights under the PDPA 2010

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right of correction: to request that inaccurate or incomplete data be corrected
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time
• Right to limit processing: to request that we restrict the use of your data in certain circumstances
• Right to complain: to lodge a complaint with the Department of Personal Data Protection Malaysia (PDPD)

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.

7. Links to other websites

Our website may contain links to external sites, including the websites of companies whose reports we use as course examples. We are not responsible for the privacy practices of those sites and encourage you to read their policies separately.

8. Children

Our courses are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted personal data to us, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "last updated" date at the top of the page. Significant changes will be communicated by email to enrolled students.

10. Contact

For any questions about this policy or about how we handle your personal data, please contact: