Privacy Policy
Last updated: 10 June 2025 · Effective: 10 June 2025
This Privacy Policy explains how Daya Cipta Sdn Bhd ("Daya Cipta", "we", "us", or "our") collects, uses, and protects personal data from learners, website visitors, and prospective students. We are committed to handling personal data responsibly, and this policy reflects our obligations under Malaysia's Personal Data Protection Act 2010 (PDPA).
If you have questions about this policy, please contact us at [email protected].
1. Personal Data We Collect
We collect personal data in the following ways:
Data you provide directly
- Full name and email address when you enquire or enrol
- Phone number (optional, if provided in your enquiry)
- Messages you send through our contact form
- Payment information processed via our payment provider (we do not store card details)
Data collected automatically
- Browser type, device type, and approximate location (country level)
- Pages visited and time spent on our website (via analytics cookies, if consent is given)
- IP address for security and fraud prevention purposes
Legal basis for processing
- Consent — for analytics cookies and optional marketing communications
- Contract — to process enrolment and deliver course access
- Legitimate interest — for security monitoring and fraud prevention
Retention periods
- Enquiry data (non-enrolment): 12 months from last contact
- Enrolment and learner records: 5 years from course completion
- Payment records: 7 years (statutory requirement)
- Analytics data: Aggregated after 26 months
2. How We Use Your Data
We use the personal data we collect for the following purposes:
- Responding to enquiries and providing course information
- Processing enrolments and managing course access
- Communicating cohort schedules, session recordings, and updates
- Providing assignment feedback and mentor communications
- Issuing completion records
- Improving website content and course quality using aggregated, anonymised data
- Compliance with legal and regulatory obligations
We do not sell personal data. We do not share personal data with third parties for their own marketing purposes.
Third-party services we use that may process data on our behalf include our payment processor, email delivery service, and website analytics provider. Each operates under its own data protection commitments and processes data only as instructed by us.
Marketing emails are only sent where you have given explicit consent. You may withdraw consent at any time using the unsubscribe link in any email, or by contacting us directly.
3. How We Protect Your Data
We take reasonable and appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or loss. These include:
- HTTPS encryption across our website
- Access controls limiting who can view personal data within our organisation
- Secure hosting infrastructure with regular security reviews
- Data minimisation — we collect only what is necessary
In the event of a personal data breach that is likely to result in harm to individuals, we will notify affected persons and the relevant authority as required under applicable law.
4. Cookies
We use cookies to operate the website and, with your consent, to understand how visitors use it. Essential cookies are necessary for the site to function and cannot be disabled. Analytics and preference cookies are optional and only set when you give consent via our cookie banner.
For full details, including instructions for managing your preferences, please see our Cookie Policy.
5. Your Rights
Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:
- Right of access — you may request a copy of the personal data we hold about you
- Right of correction — you may ask us to correct inaccurate or incomplete data
- Right to withdraw consent — where processing is based on consent, you may withdraw at any time without affecting prior lawful processing
- Right to limit processing — you may ask us to stop using your data for certain purposes
- Right to object — you may object to direct marketing at any time
To exercise any of these rights, please write to [email protected]. We aim to respond within 21 days. Identity verification may be required before we act on a request.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) of Malaysia.
6. Third-Party Links
Our website may contain links to third-party websites or resources. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently. This Privacy Policy applies only to data collected through our own website and services.
7. Age Restrictions
Our courses are designed for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us and we will take steps to delete it promptly.
8. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes, we will notify enrolled learners by email. Continued use of our website after a policy update constitutes acceptance of the revised terms.
9. Contact for Privacy Matters
Data Controller: Daya Cipta Sdn Bhd
Address: Level 11, Menara Axis, Jalan Kemajuan, 46200 Petaling Jaya, Selangor, Malaysia
Privacy contact: [email protected]
Phone: +60 3-7965 2481