Legal

Privacy Policy

Last Updated: 14 April 2025

Hikmat Academy ("we", "us", "our") is committed to protecting the personal data of our participants, prospective participants, and website visitors. This policy explains what data we collect, how we use it, and what rights you have. It applies to data processed in connection with our educational programmes and our website at hikmatacpw.pro.

This policy is governed by the laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA). Questions about this policy may be directed to [email protected].

1. Data We Collect

We collect personal data that you provide directly to us, including your name, email address, telephone number, and any information you share through our contact form or in correspondence. We also collect data when you enrol in a programme, including payment records and attendance information.

We collect technical data automatically when you visit our website, including your IP address, browser type, pages visited, and the time and date of your visit. This is collected through cookies and standard web server logs.

We do not collect sensitive personal data (such as health information, financial account details, or identity card numbers) unless you provide this voluntarily in the course of a seminar discussion. Such information shared in the seminar context is treated with the same confidentiality standards described below.

Legal basis: We process enquiry and contact data on the basis of your consent. We process enrolment and payment data on the basis of contract performance. We process website analytics data on the basis of our legitimate interest in understanding how our site is used.

Retention: Contact enquiry data is retained for 12 months. Enrolment and payment records are retained for 7 years in accordance with Malaysian accounting requirements. Website log data is retained for 90 days.

2. How We Use Your Data

We use your contact information to respond to enquiries, confirm enrolments, distribute pre-session reading materials, and communicate about programme logistics. We use payment and attendance information to manage programme delivery and issue receipts.

We may use your email address to notify you when a new cohort opens, if you have indicated interest in a programme and a cohort was not available at the time. You may opt out of such notifications at any time by contacting us at [email protected].

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data to make automated decisions about you. We do not profile participants for any purpose other than programme administration.

We may disclose your data if required to do so by Malaysian law, court order, or at the direction of a competent regulatory authority.

We use website analytics to understand which pages are visited and how visitors navigate the site. This data is aggregated and not used to identify individual visitors.

3. Data Protection Measures

Personal data collected through our website contact form is transmitted over encrypted connections (HTTPS). Enrolment records and payment data are stored in password-protected systems with access restricted to staff with a need to access them.

Seminar discussions are conducted under a confidentiality obligation. Faculty members and staff do not discuss the content of seminar discussions, the identity of participants, or any circumstances shared by participants outside of the programme context.

In the event of a data breach that is likely to result in a risk to your rights, we will notify you and the relevant authority within a reasonable timeframe under applicable Malaysian requirements.

We conduct an annual review of our data handling procedures to ensure they remain appropriate.

4. Cookies

We use cookies to operate the website and, where you have consented, to collect analytics data about site usage. Essential cookies are required for the site to function. Analytics and preference cookies are optional and are only set if you accept them through the cookie consent prompt on our homepage.

You can manage your cookie preferences at any time through our Cookie Policy page, which includes toggle controls for each category.

5. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to access personal data we hold about you, to request correction of inaccurate data, and to withdraw consent for processing based on consent. You may also request that we cease processing your data for direct marketing purposes.

To exercise any of these rights, write to us at [email protected] or by post to our address below. We will respond within 21 days.

If you believe we have not handled your personal data appropriately, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

6. Third-Party Links

Our website may contain links to external sites, including the JPDP website and reference materials. We are not responsible for the privacy practices of those sites and recommend that you read their privacy policies before providing any personal data to them.

7. Age Restriction

Our programmes are intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with data, please contact us at [email protected] so we can remove it.

8. Changes to This Policy

We review this policy annually and may update it from time to time. Material changes will be communicated by email to enrolled participants and noted at the top of this page with a revised "Last Updated" date. Continued use of our site or participation in a programme after a policy update constitutes acceptance of the revised terms.

9. Contact the Data Controller

Hikmat Academy

85, Jalan Sultan Ismail, 50250 Kuala Lumpur, Wilayah Persekutuan, Malaysia

Email: [email protected]

Phone: +60 3-2148 6739

Office hours: Monday–Friday 9:00 am – 5:30 pm; Saturday 8:30 am – 1:00 pm MYT