Privacy Policy

This Privacy Policy was last updated on 28 September 2026.

Identity and Role of the Data Controller

smartedura operates this non-commercial informational website focused on course programming topics. Under the Personal Data Protection Act 2010 of Malaysia, smartedura acts as the data controller responsible for determining the purposes and means of processing any personal data collected through the site. All processing activities described in this policy are carried out from our base in Malaysia and comply with applicable Malaysian data protection requirements.

Scope of the Notice and the People It Covers

This notice applies to all visitors and users who access the website from within Malaysia or whose personal data is processed in connection with our course programming resources. It covers individuals who submit enquiries via the contact form, read blog articles, or interact with the site in any manner that results in the collection of personal data. The policy does not apply to external websites linked from our content, as those are governed by their own privacy practices.

Categories of Personal Data and Sources

We collect personal data directly from you when you use the contact form, including your name, email address, and any message content you provide. Automatically collected information includes IP addresses, browser type, device identifiers, and referring URLs obtained through standard web server logs. Blog interactions may generate data such as reading duration or article preferences if you engage with comments or subscriptions. No data is purchased from third parties; all information originates from your direct interactions or technical logs generated during site visits.

Purpose-by-Purpose Explanation of Processing and Legal Basis

Personal data is processed to respond to contact form submissions, allowing us to address questions about course programming materials. The legal basis is your consent provided when submitting the form. Data is also used to maintain and improve website functionality, with processing based on our legitimate interest in delivering reliable informational resources. Blog analytics help us understand reader interests in programming courses, again relying on legitimate interest. No processing occurs for marketing purposes without explicit consent.

Whether Providing Data Is Required and Consequences

Providing personal data through the contact form is entirely voluntary. If you choose not to supply required fields such as email address, we will be unable to respond to your enquiry. Automatic collection of technical data occurs whenever you visit the site; refusing this through browser settings may limit certain features but will not prevent access to core informational content on course programming.

Cookies and Similar Technologies

The site uses cookies and similar technologies to enhance user experience and gather basic usage statistics. Details about the types of cookies employed, their purposes, and how to manage preferences are set out in our separate Cookie Policy, which is accessible via the site-wide cookie banner and should be reviewed alongside this document.

Processors, Service Providers, Recipients and Disclosures Required by Law

Service providers such as web hosting companies and email delivery platforms may receive limited personal data solely to perform functions on our behalf. These providers are contractually bound to protect data and use it only for the specified purposes. We may disclose information if required by Malaysian law, court order, or to protect the rights and safety of smartedura or its visitors. No routine sharing occurs with unrelated third parties.

International Transfers and Safeguards

Most processing occurs within Malaysia. Where data is transferred outside the country, for example to cloud service providers, appropriate safeguards such as contractual clauses ensuring equivalent protection are applied in line with PDPA requirements. You may request further details about these safeguards by contacting us.

Specific Retention Periods or Criteria

Contact form data is retained for up to three years to allow follow-up and maintain records of enquiries. Technical logs are kept for twelve months for security and analytics purposes. Blog-related data is retained only as long as necessary for service improvement, typically no longer than two years. Data is deleted or anonymised once the retention period expires or the purpose is fulfilled.

Security and Data-Minimisation Practices

We implement reasonable technical and organisational measures including encryption for data in transit, access controls, and regular security reviews to protect personal data. Data collection is limited to what is necessary for the stated purposes. While these steps reduce risks, no system can guarantee absolute security against all threats.

Data Subject Rights and Practical Exercise Methods

Under the PDPA you have rights to access, correct, and in some cases delete your personal data. To exercise these rights, please submit a written request using the contact form on our Contacts page or email [email protected]. We will respond within the timeframes required by law after verifying your identity.

Right to Withdraw Consent and Object to Direct Marketing or Profiling

If processing is based on consent, you may withdraw it at any time by contacting [email protected]. The site does not engage in direct marketing or automated profiling. Should such activities be introduced in future, clear opt-out mechanisms will be provided.

Right to Complain to the Competent Supervisory Authority

If you believe your personal data has been handled in breach of the PDPA, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia. Contact details for the Commissioner are available on the official government portal.

Children and Age Restrictions

The website is intended for individuals aged eighteen and above. We do not knowingly collect personal data from children under eighteen. If we become aware that data from a minor has been collected without verified parental consent, it will be deleted promptly.

Automated Decision-Making and Profiling

No automated decision-making or profiling that produces legal or similarly significant effects is carried out on this site. All decisions regarding data processing involve human oversight.

Policy Changes and Effective Date

We may update this Privacy Policy periodically to reflect changes in law or site operations. The effective date of the current version is 28 September 2026. Continued use of the site after updates constitutes acceptance of the revised policy. Please review this page regularly for the most current information.