Privacy Policy

I. Data Controller

Alderwyn Brook is the data controller responsible for your personal data. We are registered and operating in Malaysia, with our principal place of business at Suite 9-3, Wisma Mont Kiara, 1 Jalan Kiara, 50480 Kuala Lumpur, Malaysia.

For all privacy-related enquiries, you may contact us by telephone at +60 3 6205 4839 or by email at [email protected].

II. Personal Data We Collect

When you interact with our website or submit an enquiry, we may collect the following categories of personal data:

• Your full name and preferred form of address
• Email address and telephone number
• The content of enquiry messages you submit through our contact form
• Basic technical data, including IP address, browser type, and pages visited
• Preferences expressed during programme enrolment or follow-up correspondence

We do not knowingly collect sensitive personal data such as financial account details, identity card numbers, or health information through our public-facing website forms.

III. How We Use Your Personal Data

We use the personal data collected for the following purposes:

• To respond to enquiries and provide information about our educational programmes
• To process enrolment and facilitate your participation in a programme
• To send administrative communications about your enrolled programme
• To improve the content, structure, and presentation of our programmes based on aggregate feedback
• To comply with applicable Malaysian legal and regulatory obligations

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

IV. Legal Basis for Processing

We rely on the following bases to process your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia:

• Your consent — provided when you submit an enquiry or complete an enrolment form
• Contractual necessity — to fulfil our obligations under a programme agreement
• Legitimate interests — for internal quality improvement and communications directly related to your experience
• Legal obligation — where applicable under Malaysian law

V. Data Sharing and Disclosure

Alderwyn Brook does not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

• With service providers who assist us in operating our website or delivering programmes, under appropriate data processing agreements
• Where we are legally required to disclose information by a court order or competent authority
• With your explicit consent in specific circumstances communicated to you at the time

Any third-party service providers we engage are required to maintain the confidentiality and security of the data they access on our behalf.

VI. Data Retention

We retain personal data for as long as is reasonably necessary to fulfil the purposes for which it was collected, or as required by applicable law. General enquiry data is typically retained for up to twelve months from the date of the last interaction. Programme participant records may be retained for a longer period for administrative and academic record purposes.

Upon expiry of the applicable retention period, data is deleted or anonymised in a manner that prevents re-identification.

VII. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Withdraw consent for data processing where consent is the lawful basis
• Request that we cease processing your data for direct marketing purposes

To exercise any of these rights, please contact us in writing at [email protected]. We aim to respond to all such requests within 21 days of receipt.

VIII. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to support its functioning and to collect basic analytical data. A full description of the cookies we use, their purpose, and how to manage your preferences is set out in our Cookie Policy.

IX. Security Measures

We take reasonable and appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include access controls, data minimisation practices, and regular review of our data handling procedures. However, no method of internet transmission is entirely secure, and we cannot provide an absolute guarantee of security for data transmitted to our website.

X. Links to Other Websites

Our website may contain links to external websites for reference or context. This Privacy Policy applies only to the Alderwyn Brook website. We encourage you to review the privacy policies of any external websites you visit, as we have no responsibility for their content or practices.

XI. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do so, we will revise the "Last Updated" date shown at the top of this page. We encourage you to review this page periodically to remain informed.

XII. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please reach us at: