Privacy Policy

2. Data We Collect

2.1 Information You Provide

• Full name — collected through the contact form and enrolment process
• Email address — required for communication and programme delivery
• Phone number — optional; used for follow-up on enquiries if provided
• Message content — included in form submissions
• Portfolio materials — submitted voluntarily for portfolio review sessions

2.2 Data Collected Automatically

• Browser type and version
• Pages visited and time spent on pages
• Referring URL
• Cookie data — see our Cookie Policy for full details

2.3 Legal Basis for Processing

• Consent — where you have submitted a form or accepted cookies
• Contractual necessity — where data is needed to deliver a programme you have enrolled in
• Legitimate interest — for analytics and improving the website

3. How We Use Your Data

• Responding to enquiries submitted through the contact form
• Processing enrolments and communicating about programme progress
• Delivering mentor sessions and distributing assessed feedback
• Sending programme updates and administrative notices
• Improving our website using anonymised analytics data
• Complying with Malaysian legal obligations

We do not use personal data to send unsolicited marketing communications. Any programme-related communications can be opted out of by contacting [email protected].

3.1 Data Retention

• Enquiry data: 12 months from last contact if no enrolment follows
• Enrolment and programme data: 5 years from programme completion
• Financial records: 7 years as required by Malaysian law
• Cookie consent logs: 13 months

4. Data Sharing

We do not sell personal data. We may share data with:

• Hosting and infrastructure providers who store our website and programme data under confidentiality obligations
• Analytics providers, where data is anonymised before sharing
• Mentors and instructors within Suria Kod's team, for the purpose of delivering assessed feedback
• Malaysian authorities, where required by law

Where data is processed by third-party services, those services are selected for their compliance with applicable data protection standards.

5. Data Protection Measures

• Data transmitted through the website is encrypted using TLS
• Access to personal data is restricted to staff who need it to deliver the programme
• Stored data is held on servers with appropriate access controls
• In the event of a data breach affecting personal information, affected individuals will be notified without undue delay
• Security practices are reviewed periodically

6. Cookies

Our website uses essential cookies for basic functionality and optional cookies for analytics and preference storage. Cookie consent is managed through the banner displayed on first visit. For full details on what each cookie does and how to manage preferences, see our Cookie Policy.

7. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right of access — You may request a copy of the personal data we hold about you
• Right to correct — You may request correction of inaccurate data
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time
• Right to limit processing — You may request that we stop using your data for purposes beyond what is necessary
• Right to erasure — Subject to legal retention requirements, you may request deletion of your data

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. Complaints regarding data handling may be directed to the Personal Data Protection Department of Malaysia (JPDP).

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and this policy does not apply to them. We encourage you to read the privacy policies of any site you visit.

9. Age Restrictions

Our programmes are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If we become aware that a minor has submitted data without appropriate consent, we will delete it promptly.

10. Policy Updates

We may update this policy from time to time. Changes will be posted on this page with a revised Last Updated date. Where changes are significant, we will notify enrolled learners by email. Continued use of the site after changes constitutes acceptance of the updated policy.

11. Contact for Data Enquiries

For questions about this policy or to exercise your data rights, reach out to: