Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to Wawasan AI ("we," "us," "our"), a provider of online AI development courses based at Suite 21-A, The Pinnacle, Persiaran Lagoon, 47500 Petaling Jaya, Selangor, Malaysia. It covers personal data collected through our website, enquiry forms, and course enrolment processes.

By using our website or submitting an enquiry, you acknowledge that you have read and understood this policy. If you have questions about any part of it, please contact us at [email protected] before proceeding.

---

2. Data We Collect

Information You Provide

• Your name and contact email address when you submit an enquiry
• Your phone number, if you choose to include it
• The content of messages you send us through our contact form
• Enrolment details when you register for a course

Information Collected Automatically

• Browser type, device type, and operating system
• Pages visited and time spent on each page
• Referring URL and general geographic location (country or region)
• Anonymised session data used to improve site experience

Cookies

We use cookies to support basic site functionality and, with your consent, to gather anonymised usage data. Please see our Cookie Policy for full details on how to manage your preferences.

---

3. How We Use Your Data

Primary Purposes

• Responding to your enquiries and course-related questions
• Processing course enrolments and communicating course access details
• Sending administrative messages relevant to your enrolment

Secondary Purposes (with consent)

• Sending information about new courses or course updates that may be relevant to your interests
• Gathering anonymised feedback to improve course content

Legal Basis

We process your data on the basis of your consent (for optional communications), on the basis of a contractual relationship (for course delivery), and where we have a legitimate interest in maintaining a functioning website and communicating with enquirers. Processing is carried out in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

Retention Periods

• Enquiry records: retained for 24 months from the date of enquiry
• Enrolment and course records: retained for 7 years for accounting and compliance purposes
• Marketing consent records: retained until withdrawn
• Website analytics data: retained in anonymised form for 26 months

---

4. Data Sharing

We do not sell your personal data. We share it only in the following limited circumstances.

Service Providers

• Email and communication platforms used to deliver enquiry responses and course notifications
• Web hosting and infrastructure providers who process data on our behalf
• Analytics tools that process anonymised usage data

All service providers are bound by data processing agreements and are required to handle data only as instructed by us.

Legal Obligations

We may disclose personal data where required to do so by Malaysian law, by a court order, or by a regulatory authority with jurisdiction over our operations.

---

5. Data Protection Measures

• All data transmitted between your browser and our site is encrypted using TLS (HTTPS)
• Access to personal data is restricted to personnel who need it to perform their work
• We review and update our security practices on a regular basis
• In the event of a data breach that affects your rights or freedoms, we will notify you and the relevant authority within a reasonable timeframe in accordance with applicable law

---

6. Cookies

Our website uses essential cookies required for the site to function, and optional analytics and preference cookies that are activated only with your consent. A full description of each cookie category, its purpose, and its duration is available in our Cookie Policy. You may update your preferences at any time on that page.

---

7. Your Rights

Under the Personal Data Protection Act 2010 and related Malaysian data protection principles, you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate or incomplete data
• Withdraw consent at any time where processing is based on consent
• Request deletion of data we no longer have a lawful basis to retain
• Object to processing for direct marketing purposes
• Request restriction of processing in certain circumstances

To exercise any of these rights, write to us at [email protected]. We will acknowledge your request within 5 working days and aim to respond fully within 21 days. Some requests may take longer if they are complex; we will let you know if that is the case.

---

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policies of any website you visit.

---

9. Children's Privacy

Our courses are designed for practitioners and working adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data to us, please contact [email protected] and we will remove it promptly.

---

10. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. If changes are material, we will take reasonable steps to bring them to your attention. Continued use of our website after an update constitutes acceptance of the revised policy.

---

11. Contact and Data Controller

For questions, requests, or concerns about your personal data, please contact: