Privacy Policy

Cendekia ("we", "us", "our") is committed to handling personal data with care and transparency. This Privacy Policy describes how we collect, use, and protect information relating to people who enquire about, or enrol in, our courses, and to people who visit our website.

This policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia. Our registered address is 76 Jalan Pinang, 50450 Kuala Lumpur, Malaysia. For privacy-related questions, contact us at [email protected].

By using our website or submitting an enquiry form, you acknowledge that you have read this policy.

We collect only the personal data that is necessary for the purposes described in this policy. This may include:

• Contact information: your name, email address, and telephone number, submitted via our enquiry form or course enrolment process.
• Course and enrolment data: which course you have enquired about or enrolled in, and communications related to your participation.
• Website usage data: browser type, IP address, pages visited, and time spent, collected automatically when you use our website. This information is collected in aggregate and is not directly linked to an identified individual unless combined with other data.
• Cookie data: please see Section 6 and our Cookie Policy for detail.

Legal basis for processing

We process personal data on the following legal bases under the PDPA 2010: (a) consent, where you have provided it; (b) the performance of a contract or steps taken at your request before entering a contract, such as processing your enrolment; and (c) our legitimate interests in operating and improving our educational services, where those interests are not overridden by your rights and interests.

Retention periods

We retain contact enquiry data for up to 24 months following your last interaction with us. Enrolment and course records are retained for up to five years for administrative and legal purposes. Website analytics data in aggregate form may be retained indefinitely.

Personal data we collect is used for the following purposes:

• Responding to course enquiries and providing pre-enrolment information
• Administering course enrolment and communicating about your active course
• Sending administrative notices — such as cohort schedule changes or course updates — directly related to a course you have enrolled in
• Improving our website and course materials based on aggregate usage patterns
• Meeting legal obligations where applicable

We do not use your personal data for unsolicited marketing communications unless you have explicitly opted in to receive them. We do not sell, rent, or share personal data with third parties for their promotional purposes.

We may share data with service providers who process it on our behalf — for example, our website hosting provider or email communication platform — under written agreements that restrict them to processing data only for the purposes we specify.

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encrypted transmission of data between your browser and our website (HTTPS/TLS)
• Access controls limiting who within our team can view personal data, based on need
• Secure, access-controlled storage for course and enrolment records
• Periodic review of our data handling practices

In the event of a personal data breach that is likely to affect individuals adversely, we will take steps consistent with the PDPA 2010, including notifying affected individuals as appropriate.

We primarily store and process personal data within Malaysia. Where we use third-party services whose infrastructure is located outside Malaysia, we ensure that appropriate contractual protections are in place for any such transfers, consistent with applicable law.

Our website uses cookies for essential functionality, analytics, and user preference storage. Essential cookies are required for the site to function. Other cookie categories are optional and subject to your consent.

You can manage your cookie preferences at any time via our Cookie Policy page.

Under the PDPA 2010 and applicable law, you have the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right of correction: to ask us to correct inaccurate or incomplete personal data.
• Right to withdraw consent: where processing is based on your consent, to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.
• Right to limit processing: to request that we limit how we use your data in certain circumstances.
• Right to raise concerns: to raise concerns about our data handling with the Personal Data Protection Commissioner of Malaysia.

To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe.

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites, and this policy does not apply to them. We encourage you to review the privacy policies of any external sites you visit.

Our courses are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will remove it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of the page. Material changes will be communicated directly to enrolled learners by email where appropriate.

Continued use of our website or services after changes become effective constitutes acceptance of the updated policy.