Privacy Policy

1. Introduction

Bijak AI (operating as Bijak AI, registered in Malaysia, address: 3-A, Lebuh Farquhar, 10200 George Town, Penang) is committed to handling personal data responsibly and transparently. This policy describes what data we collect, why we collect it, how we use it, and what rights you have in relation to it.

This policy applies to personal data collected through our website at bijakpaidas.world and through our online course enrolment and delivery processes. Questions may be directed to [email protected].

Malaysian data protection is governed by the Personal Data Protection Act 2010 (PDPA). Our practices are designed to comply with this Act and its associated regulations.

2. Data We Collect

We collect personal data in the following ways:

2.1 Data you provide directly

• Full name and email address (required for course enquiries and enrolment)
• Phone number (optional, collected via enquiry form)
• Course submissions and exercise responses
• Communications sent to us by email or through the contact form

2.2 Data collected automatically

• Website usage data via cookies and analytics tools (see Section 5)
• Browser type, device type, and approximate geographic location (country/city level)
• Pages visited and time spent on the site

2.3 Legal basis for processing

• Consent — for marketing communications and optional cookies
• Contractual necessity — for course enrolment and delivery
• Legitimate interest — for website analytics and fraud prevention

2.4 Retention periods

Enquiry data: 12 months from last contact. Course records: 5 years following course completion. Financial transaction records: 7 years (statutory requirement). Analytics data: aggregated and anonymised after 26 months.

3. How We Use Your Data

• To respond to enquiries and process course enrolments
• To deliver course materials and tutor feedback
• To send service-related communications (course updates, schedule changes)
• To improve course content and website usability through aggregated analytics
• To send optional marketing communications about new courses — only if you have opted in
• To comply with legal obligations under Malaysian law

We do not sell personal data to third parties. We do not share personal data with advertisers.

We may share data with service providers who assist us in delivering courses (for example, payment processors, email delivery services) under contractual data processing agreements. These providers are permitted to use data only as instructed by us.

4. Data Protection Measures

• Data transmitted between your browser and our servers is encrypted using TLS (HTTPS)
• Stored personal data is kept on secured servers with access controls limiting who can read or modify it
• Staff with access to personal data are subject to confidentiality obligations
• In the event of a data breach that is likely to affect your rights, we will notify affected individuals within a reasonable timeframe
• Our security practices are reviewed periodically and updated when risks change

5. Cookies

We use cookies to keep the site working, to understand how it is used, and — with your consent — for analytics and marketing purposes. Essential cookies cannot be disabled as they are required for the site to function.

For full details on what cookies we use and how to manage your preferences, see our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act 2010 and applicable principles, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Withdrawal of consent — withdraw consent for marketing communications at any time
• Objection — object to processing based on legitimate interest where this affects your rights
• Deletion — request deletion of data that is no longer necessary, subject to legal retention requirements

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you are dissatisfied with our response, you may raise a concern with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

8. Children's Privacy

Our courses are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

9. Policy Updates

We may update this policy from time to time. When we do, the revised date at the top of this page will change. For significant changes affecting how we use your data, we will notify enrolled learners by email. Continued use of our services after the effective date constitutes acceptance of the updated policy.