Privacy Policy

1. Who We Are

Cerdik Code is an online AI development school based at Lebuh Light 27, 10200 George Town, Penang, Malaysia. We are the data controller for personal information collected through this website and our educational programmes. For data-related queries, contact us at [email protected].

2. Information We Collect

We collect the following categories of personal information:

• Contact information: full name, email address, and phone number provided via our enquiry form.
• Programme communications: messages and enquiries sent to our team, and content submitted as part of coursework.
• Usage data: basic analytics on how pages are visited, collected via cookies if you consent to analytics cookies.

We collect information only when you submit it voluntarily through our contact form or when you enrol in a programme. We do not purchase data lists or collect information from third-party sources without your knowledge.

Legal Basis for Processing

• Consent: for marketing communications and non-essential cookies, where you have given explicit consent.
• Contractual necessity: for programme administration and delivery after enrolment.
• Legitimate interest: for responding to enquiries and improving our services.

Retention Periods

Enquiry data is retained for 12 months unless you enrol in a programme. Enrolment and programme data is retained for 3 years after your last programme ends. You may request earlier deletion at any time (see Section 6).

3. How We Use Your Information

• Responding to enquiries about programmes
• Managing your enrolment and providing course access
• Delivering mentor feedback and cohort communications
• Issuing certificates on programme completion
• Sending programme updates where you have consented
• Analysing website usage to improve content and structure

We do not sell personal data to third parties and do not use it for advertising profiling.

4. Data Protection and Security

• Data is transmitted over HTTPS and stored on servers with access restrictions.
• Access to personal data is restricted to staff with a need to access it for their role.
• In the event of a data breach that is likely to affect your rights, we will notify you within 72 hours of becoming aware of it.
• Security practices are reviewed periodically and updated when relevant changes arise.

5. Cookies

We use cookies for basic site function, analytics (if consented), and preference storage. Essential cookies cannot be disabled as they are needed for the site to operate. Analytics and other optional cookies are only set after you accept them via our consent banner. For full details, see our Cookie Policy.

6. Your Rights Under Malaysian PDPA

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right of access: you may request a copy of the personal data we hold about you.
• Right to correction: you may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time. This does not affect the lawfulness of prior processing.
• Right to prevent processing: you may request that we stop using your data for direct marketing purposes.
• Right to lodge a complaint: you may raise a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external resources such as course tools or professional resources. We are not responsible for the privacy practices of external websites. We encourage you to review the privacy policy of any external site before providing personal information.

8. Children's Privacy

Our programmes are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected such data, please contact us so we can remove it.

9. Changes to This Policy

We may update this policy from time to time. When changes are made, the "Last Updated" date at the top of this page will be revised. We will notify enrolled students of any material changes by email. Continued use of our website after changes are posted constitutes acceptance of the updated policy.