Privacy Policy

1. Data We Collect

We collect personal data in the following ways:

Through the contact form

When you submit an enquiry on our website, we collect the information you provide: name, email address, and optionally a phone number and message. We use this to respond to your enquiry and, if you enrol, to administer your participation in a programme.

Through programme enrolment

When you enrol in a Bijak programme, we collect name, email, phone number (if provided), payment records, and programme-related data such as project submissions and attendance records.

Through cookies and analytics

Our website uses cookies to understand how visitors use it. This may include analytics data collected via third-party tools such as Google Analytics. See our Cookie Policy for details. You can manage cookie preferences through that page.

Legal basis for processing

We process personal data on the basis of: (a) your consent, where you have given it; (b) contractual necessity, where we need data to deliver a programme you have enrolled in; and (c) legitimate interests, where we have a reasonable purpose that doesn't override your rights.

2. How We Use Your Data

• To respond to your enquiries and provide information about our programmes.
• To administer your enrolment — session access, project submission, completion records.
• To process payments and maintain financial records as required by Malaysian law.
• To send programme-related communications — session reminders, materials, feedback.
• To improve our website and programme content through aggregated analytics.

We do not sell personal data. We do not use personal data for marketing purposes without your explicit consent. We do not share personal data with third parties except as described below.

3. Data Sharing

We may share personal data in the following limited circumstances:

• Payment processors: Payment data is handled by our payment provider, subject to their own security and privacy standards.
• Analytics providers: Aggregated, anonymised data may be processed by analytics tools (e.g., Google Analytics) to help us understand website usage.
• Legal requirements: We may disclose data if required to do so by Malaysian law or a valid court order.

4. Data Retention

We retain personal data for the following periods:

• Enquiry data (no enrolment): 6 months from last contact, then deleted.
• Programme enrolment records: 7 years, as required for financial and legal record-keeping under Malaysian law.
• Project submissions and programme notes: deleted 2 years after programme completion.
• Analytics data: processed in aggregated form; raw session data is not retained beyond 14 months.

5. Data Protection Measures

We take reasonable steps to protect personal data from unauthorised access, disclosure, or loss. These include encrypted storage for sensitive records, access controls limiting who within Bijak can view participant data, and secure transmission via HTTPS for all web interactions.

In the event of a data breach that poses a risk to individuals, we will notify affected parties and, where required, the relevant authority under the PDPA, within a reasonable timeframe.

6. Cookies

Our website uses cookies for site functionality and analytics. Essential cookies are necessary for the site to work. Analytics and preference cookies are optional and require your consent. You can review and manage your preferences at any time via our Cookie Policy page.

7. Your Rights

Under the PDPA (Malaysia), you have the following rights in relation to your personal data:

• Right to access — request a copy of personal data we hold about you.
• Right to correction — request that inaccurate or incomplete data is corrected.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
• Right to object — you may object to processing for direct marketing purposes.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit.

9. Children's Privacy

Our programmes are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data through our website, contact us and we will delete it promptly.

10. Policy Updates

We may update this policy from time to time. The date at the top of this page reflects when the current version was last revised. Continued use of our website or programmes after an update constitutes acceptance of the revised policy. For material changes, we will notify enrolled participants directly by email.

Contact for Privacy Matters

Bijak
22 Jalan Bayan Lepas, 11900 Bayan Lepas, Penang, Malaysia

Email: [email protected]