Privacy Policy

Bayu Tech ("we", "us", "our") is committed to handling personal data responsibly. This policy explains what information we collect from people who use our website or enquire about or enrol in our courses, how we use it, and what rights you have in relation to it. We operate under Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have questions about this policy or how your data is handled, contact us at [email protected].

1. Data Controller

The data controller for personal data collected through this website and through course enrolment is:

Bayu Tech
Jalan Imbi 88, 55100 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 18-364 9572

2. What Data We Collect

We collect personal data in the following circumstances:

Through the contact form on our website

• Full name
• Email address
• Phone number (optional)
• Message content

During course enrolment

• Full name and contact details
• Payment information (processed through our payment partner; we do not store card data)
• Course progress and submission data

Automatically through website usage

• Browser type and operating system
• Pages visited and time spent
• Referring URL
• IP address (anonymised for analytics)

3. Legal Basis for Processing

Under the PDPA 2010, we process your personal data on the following bases:

• Consent — when you submit the contact form or accept our cookie policy
• Contract performance — when you enrol in a course and we need your data to deliver it
• Legitimate interest — for website analytics to improve our services, where your rights are not overridden

4. How We Use Your Data

• To respond to enquiries sent through the contact form
• To administer course enrolment, access, and completion
• To send schedule, clinic, and cohort-related communications
• To process payments through our payment provider
• To understand how the website is used and improve it
• To comply with legal and regulatory obligations

We do not use your data for automated decision-making or profiling.

5. Data Sharing

We do not sell personal data to third parties. We share data only in the following limited circumstances:

• Payment processing — with our payment provider to complete enrolment transactions
• Analytics — with analytics providers (using anonymised or aggregated data only)
• Legal obligation — if required by law or a court order in Malaysia

Any third-party processors are contractually required to handle data only for the purposes we specify.

6. Data Retention

• Contact form enquiries: retained for 12 months, then deleted
• Enrolment and course records: retained for 3 years after completion for administrative and compliance purposes
• Payment records: retained as required by Malaysian financial regulations (typically 7 years)
• Website analytics: retained in anonymised form for 26 months

7. Data Protection Measures

We take reasonable steps to protect your personal data, including:

• HTTPS encryption on all web pages
• Access controls limiting who can view personal data
• Secure, password-protected systems for course administration
• Regular review of data practices by our team

In the event of a data breach that creates risk to affected individuals, we will notify the relevant parties as required under the PDPA 2010.

8. Cookies

We use cookies to keep the site functioning and to understand how it is used. Functional cookies are necessary for the site to work. Analytics and preference cookies are optional and require your consent. You can manage your cookie preferences at any time through our Cookie Policy page.

9. Your Rights

Under the PDPA 2010 and applicable Malaysian law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent where processing is based on consent
• Object to processing for purposes not related to your contract with us
• Request deletion of data we no longer have a lawful reason to retain
• Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe we have handled your data incorrectly

To exercise any of these rights, email us at [email protected]. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and this policy does not apply to them. We encourage you to read the privacy policies of any external sites you visit.

11. Children's Privacy

Our courses are intended for persons aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, contact us and we will take steps to remove it.

12. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with a revised "Last Updated" date. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

13. Contact

For any data-related enquiries or to exercise your rights:

Bayu Tech
Email: [email protected]
Address: Jalan Imbi 88, 55100 Kuala Lumpur, Malaysia
Phone: +60 18-364 9572