Privacy Policy

1. Introduction

Cerdas Academy ("we", "us", "our") is committed to handling personal data with care and transparency. This policy explains what information we collect, why we collect it, how we use it, and the rights you have over it. We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have questions about how we handle your data, you can reach us at [email protected].

2. What Data We Collect

We collect only what we need to manage enrolments, respond to enquiries, and improve our courses. This includes:

• Contact information: name, email address, phone number (if provided)
• Enrolment details: course chosen, payment records, cohort assignment
• Course activity: exercise submissions, tutor feedback exchanges, completion records
• Technical data: browser type, device type, IP address, pages visited — collected through cookies and analytics tools

We do not collect sensitive personal data such as identity card numbers, financial account details, or health information.

3. How We Collect It

• Enquiry and enrolment forms on our website
• Email correspondence with our team
• Cookies and analytics (see Cookie Policy for detail)
• Payment processing through our payment gateway (we do not store card data)

4. Legal Basis for Processing

We process your personal data on the following grounds:

• Consent: for marketing communications and non-essential cookies, where you have opted in
• Contract performance: for course delivery, exercise feedback, and enrolment administration
• Legitimate interest: for analytics used to improve our courses and website
• Legal obligation: for record-keeping required under Malaysian law

5. How We Use Your Data

• Processing and confirming course enrolments
• Delivering course materials, exercises, and tutor feedback
• Responding to enquiries and support requests
• Sending cohort-related communications (schedules, reminders, updates)
• Analysing site usage to improve content and structure
• Issuing completion documents
• Sending marketing emails to those who have opted in (with easy opt-out)

6. Data Retention

We retain data for as long as reasonably necessary:

• Enrolment records: held for up to 5 years after course completion, for administrative and legal purposes
• Exercise and feedback records: retained for the duration of the course plus 12 months
• Marketing consent records: retained until withdrawn
• Enquiry records: held for 12 months if no enrolment follows

After these periods, data is securely deleted or anonymised.

7. Data Sharing

We do not sell personal data. We share it only where necessary:

• Payment processors: to complete transactions securely
• Analytics providers: anonymised usage data for site improvement
• Legal obligations: if required by Malaysian law or court order

We do not share personal data with advertisers or unrelated third parties.

8. Data Security

We take reasonable technical and organisational steps to protect data from unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), restricted staff access to personal records, and regular review of our data practices. In the event of a data breach that poses risk to individuals, we will notify affected parties in line with our obligations under the PDPA.

9. Cookies

We use cookies to help the site function and to understand how it is used. You can manage your preferences through the cookie banner on our homepage or via our Cookie Policy page. Disabling non-essential cookies will not prevent you from using the site.

10. Your Rights

Under the PDPA and related Malaysian data protection principles, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Withdraw consent for marketing communications at any time
• Request deletion of data we no longer have a lawful basis to hold
• Object to processing for direct marketing purposes

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

11. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies before sharing personal information.

12. Children's Privacy

Our courses are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data to us, please contact us at [email protected] and we will remove it promptly.

13. Changes to This Policy

We may update this policy from time to time. When we do, the revised version will be published on this page with an updated "Last Updated" date. Continued use of our site or services after changes are published constitutes acceptance of the revised policy.

14. Contact

For data-related questions or to exercise your rights, contact our data controller:

• Cerdas Academy
• B-8-3, Jaya One, Jalan Universiti, 46200 Petaling Jaya, Selangor
• Email: [email protected]
• Phone: +60 3-7954 2618