Privacy Policy

Padi Institute is committed to handling personal data responsibly and in compliance with the Personal Data Protection Act 2010 (Malaysia) (PDPA). This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it. It applies to data collected through our website and through our enrolment and enquiry processes.

1. Who We Are

Padi Institute is a registered private education provider operating from 82, Jalan Kelawai, 10250 George Town, Pulau Pinang, Malaysia. For data protection matters, we can be contacted at [email protected] or by telephone at +60 4-228 7641.

2. Personal Data We Collect

Data you provide directly

• Full name
• Email address
• Telephone number (where provided)
• Any information included in your enquiry or enrolment correspondence

Data collected automatically

• Cookie preferences and consent records (via browser localStorage)
• Website usage data, where analytics tools are active (see Cookie Policy)

We do not collect financial account details, government identification numbers, or sensitive personal data as defined under the PDPA.

3. Legal Basis for Processing

We process personal data on the following bases:

• Consent: Where you have submitted an enquiry form or agreed to receive communications from us.
• Contractual necessity: Where processing is required to manage your enrolment in a course.
• Legitimate interest: For internal administrative purposes and to respond to follow-up enquiries from past participants.

4. How We Use Your Data

• To respond to enquiries about our courses
• To process enrolments and manage participant records
• To send course materials, schedules, and follow-up correspondence
• To notify you of upcoming sessions if you have asked to be kept informed
• To comply with our legal obligations under Malaysian law

We do not use your personal data for automated decision-making, and we do not use it for profiling in the marketing sense. We do not sell personal data to any third party.

5. Data Sharing

We do not share personal data with financial product providers, insurance companies, or any third party with a commercial interest in our participants. Where we engage third-party service providers for website hosting or communications tools, those providers are engaged under appropriate data processing terms and do not have permission to use your data for any purpose other than providing the service to us.

We may share personal data where required to do so by Malaysian law or by a lawful order of a competent authority.

6. Data Retention

Enquiry data is retained for a period of twelve months from the date of the enquiry, or until you ask us to delete it, whichever is sooner. Enrolment records are retained for seven years from the date of the relevant course, in accordance with applicable Malaysian record-keeping requirements. Cookie consent records are retained in your browser's local storage and are managed by you through your browser settings or our Cookie Policy page.

7. Cookies

Our website uses cookies for essential functionality and, where consent has been given, for analytics purposes. Full details are set out in our Cookie Policy.

8. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS. Internal access to participant records is restricted to staff with a need to access them for their role. In the event of a data breach affecting your personal data, we will notify you and the relevant authority in accordance with our obligations under the PDPA.

9. Your Rights

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent for processing based on consent (this does not affect processing carried out before withdrawal)
• Request deletion of personal data we no longer have a legitimate reason to retain
• Object to processing where we rely on legitimate interest as the basis

To exercise any of these rights, write to us at [email protected]. We will respond within twenty-one days.

10. Third-Party Links

Our website may contain links to external resources and reading references. We are not responsible for the privacy practices of those websites and recommend that you review their policies independently.

11. Children

Padi Institute's courses are designed for adults aged forty and above. We do not knowingly collect personal data from individuals under the age of eighteen. If we become aware that we have inadvertently done so, we will delete the data promptly.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by updating the date at the top of this page. Continued use of our website or services after a change constitutes acceptance of the updated policy.

13. Contact for Privacy Matters

For any questions about this policy or about your personal data, contact us at:

• Email: [email protected]
• Telephone: +60 4-228 7641
• Post: 82, Jalan Kelawai, 10250 George Town, Pulau Pinang, Malaysia

If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), which is the supervisory authority for data protection matters in Malaysia.