Privacy Policy

1. Introduction

Welcome to Cerdek (formerly known as MySchool AI Hub). This Privacy Policy explains how we collect, use, protect, and disclose your personal data in accordance with Malaysian laws, including the Malaysian Personal Data Protection Act 2010, the Computer Crimes Act 1997, the Interception of Communications and Provision of Communication-related Information Act 1999, the Communications and Multimedia Act 1998, and the Digital Signature Act 1997. By using our platform, you agree to the practices described in this Privacy Policy.

2. Data Collection

We collect personal data in a lawful, fair, and transparent manner. The types of data collected include:

• Personal Identification Information:
  • Name
  • Email address
  • Phone number
• Educational Records and Academic Information:
  • Academic performance
  • Enrollment details
• Usage Data:
  • Login history
  • Interactions with the platform
• Technical Data:
  • IP address
  • Browser type and version

Data is gathered through registration forms, platform usage, cookies, and other tracking technologies.

3. Data Usage

Your personal data is used for the following purposes:

• Providing, operating, and improving our educational services.
• Customizing and enhancing your learning experience.
• Communicating platform updates, important notices, and service-related information.
• Analyzing platform usage to improve our system and security.

Data processing is performed based on:

• Your explicit consent.
• Legal obligations.
• Protection of vital interests.
• Legitimate interests balanced with your privacy rights.

4. Data Sharing and Disclosure

Your data may be shared or disclosed in these circumstances:

• With trusted third-party service providers who support our platform under strict data protection obligations.
• When required by law, regulation, or legal process.
• In the event of a data breach or security incident, where we notify affected users and the relevant authorities in line with the Computer Crimes Act 1997.
• With authorities under the provisions of the Interception of Communications and Provision of Communication-related Information Act 1999.

5. Data Security Measures

We implement robust security measures to protect your data:

• Encryption of sensitive information.
• Access controls and authentication procedures.
• Regular security audits and system monitoring.
• Data anonymization techniques, where applicable.

These measures help ensure compliance with the PDPA 2010 and other cybersecurity laws.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enhance the user experience.
• Monitor and analyze usage patterns.
• Personalize content and advertisements.

Users can control cookie preferences via their browser settings. For more details, please also review our Cookie Policy.

7. Data Retention

Your data is retained only as long as necessary to:

• Fulfill the purposes for which it was collected.
• Comply with legal obligations.
• Resolve disputes and enforce agreements.

Retention periods are reviewed periodically to ensure compliance with PDPA guidelines.

8. User Rights

In accordance with the PDPA 2010, you have the following rights:

• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion or restriction of processing.
• Right to data portability.
• Right to object to processing based on legitimate interests.

To exercise any of these rights, please contact our Data Protection Officer using the details provided below.

9. Digital Signatures and Electronic Records

For transactions completed online, our platform adheres to the Digital Signature Act 1997, ensuring that digital signatures and electronic records are legally recognized. We maintain the integrity and authenticity of these electronic communications.

10. Policy Updates and Amendments

We reserve the right to update or amend this Privacy Policy at any time. Any changes will be:

• Communicated via our website.
• Directly notified to registered users, if necessary.

We encourage you to review this policy periodically to stay informed.

11. Contact Information

For any questions or concerns about this Privacy Policy, please contact our Data Protection Officer at:

• Email: [email protected]
• Address: PLOT 1116, LENGKOK PERINDUSTRIAN BUKIT MINYAK 2, KAWASAN PERINDUSTRIAN BUKIT MINYAK, 14100 SIMPANG AMPAT, PULAU PINANG, MALAYSIA.
• Telephone: 0189549483

Itemized Clauses Recap

Data Collection Examples

• Personal Identification Information: Name, Email Address, Phone Number.
• Educational and Academic Records: Academic performance, Enrollment details.
• Usage Data: Login history, Platform interactions.
• Technical Data: IP address, Browser type/version.

Data Usage Examples

• Educational service provision and improvement.
• Personalized learning experience.
• Communication of updates and notices.
• Usage analysis for security enhancements.

Data Sharing and Disclosure Examples

• Sharing with trusted third-party providers.
• Disclosure pursuant to legal requirements.
• Notification and disclosure upon data breaches.
• Sharing under the Interception of Communications Act provisions.

Data Security Measures Examples

• Use of encryption.
• Access controls and authentication.
• Regular audits and monitoring.
• Application of data anonymization techniques.

Cookies and Tracking Examples

• Enhancing user experience.
• Monitoring user behavior.
• Content personalization and targeted advertising.
• User control via browser settings.

Data Retention Examples

• Keeping data for necessary service delivery.
• Compliance with legal requirements.
• Periodic review in line with PDPA guidelines.

User Rights Examples

• Access and corrections.
• Deletion or processing restriction.
• Data portability and objection to processing.

Digital Signatures and Electronic Records Examples

• Ensuring legal effect per the Digital Signature Act 1997.
• Maintaining integrity and authenticity of records.

Policy Updates Examples

• Communicating changes via the website.
• Notifying users directly if needed.
• Encouraging periodic review of the policy.

Contact Information for Data Protection

• Email, physical address, and telephone contacts for the Data Protection Officer.

By continuing to use Cerdek, you provide your consent to the practices described in this Privacy Policy.