Privacy Policy

Ilmu Labs ("we", "us", "our") is committed to handling your personal data with care and transparency. This policy explains what data we collect when you use our website or enrol in one of our programmes, how we use it, and what rights you have under Malaysian law.

This policy applies to all personal data processed by Ilmu Labs in connection with our online AI learning programmes and this website. If you have questions, contact us at [email protected].

1. Data We Collect

We collect personal data in the following ways:

• Contact forms: Name, email address, and optionally phone number and message content when you submit an enquiry.
• Programme enrolment: Name, email address, and payment details processed through our payment provider when you enrol.
• Cookies and analytics: Technical data including IP address, browser type, pages visited, and session duration through analytics tools. See our Cookie Policy for details.
• Programme participation: Submitted exercises, project files, and correspondence with tutors in connection with your active programme.

2. Legal Basis for Processing

We process your personal data on the following bases under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: For marketing communications and non-essential cookies, where you've given explicit consent.
• Contract: To deliver the programme you've enrolled in and handle related communications.
• Legitimate interest: To improve our website, understand how learners use our programmes, and maintain the security of our systems.
• Legal obligation: Where required by Malaysian law, including tax and record-keeping requirements.

3. How We Use Your Data

• To respond to enquiries submitted through our contact form
• To manage your programme enrolment and deliver course materials
• To facilitate tutor communication and project feedback
• To process payments through our payment provider
• To send administrative communications related to your programme (schedule updates, access information)
• To analyse website usage and improve our programmes and content
• To meet legal and regulatory obligations

We do not use your data for automated decision-making that produces legal or similarly significant effects.

4. Data Retention

• Enquiry data: Retained for 12 months from submission, or until you request deletion.
• Programme records: Retained for 3 years after programme completion for administrative and legal purposes.
• Payment data: Retained as required by Malaysian financial regulations (typically 7 years).
• Analytics data: Retained in aggregated, anonymised form indefinitely; identifiable session data retained for up to 26 months.

5. Data Sharing

We do not sell your personal data. We may share it with:

• Payment processors: To handle programme fees securely.
• Analytics providers: In aggregated or anonymised form to understand site usage.
• Cloud hosting providers: Who store data on servers we control, under data processing agreements.
• Legal authorities: Where we are required by Malaysian law to disclose information.

6. Data Security

We use technical and organisational measures to protect your personal data, including:

• HTTPS encryption for all data transmitted through our website
• Access controls limiting who within Ilmu Labs can access personal data
• Secure storage on our hosting provider's infrastructure
• Regular review of data handling practices

In the event of a data breach affecting your rights and freedoms, we will notify you and the relevant authorities as required under the PDPA.

7. Cookies

We use cookies for essential site functions, analytics, and (optionally) marketing. You can manage your cookie preferences at any time through our Cookie Policy page.

8. Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Withdrawal of consent: Withdraw consent to processing where consent is the legal basis.
• Limit processing: Request that we stop using your data for certain purposes, subject to legal obligations.
• Erasure: Request deletion of your data where there is no legitimate reason for us to continue holding it.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may include links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before sharing any personal data with them.

10. Children's Privacy

Our programmes are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us at [email protected] so we can delete it.

11. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will notify active learners by email. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of our website or programmes after changes are published constitutes acceptance of the updated policy.

12. Contact Us

For data-related questions or to exercise your rights:

• Email: [email protected]
• Phone: +60 3-2287 6413
• Address: Level 7, Menara UOA Bangsar, Jalan Bangsar Utama 1, 59000 Kuala Lumpur, Malaysia

Ilmu Labs is the data controller for personal data collected through this website and our programmes. Disputes relating to this policy are governed by the laws of Malaysia.