This Privacy Policy (“Policy”) explains how Edumize Services Sdn. Bhd. (“Edumize”, “we”, “us”) collects, uses, discloses, stores, and protects personal data in accordance with the Personal Data Protection Act 2010 (Malaysia) (“PDPA”) and other applicable laws.

This Policy applies to personal data relating to:

• Students
  
• Parents or legal guardians
  
• Authorized Persons acting on behalf of a Student (including sub-agents, representatives, or intermediaries)
  

By accessing Edumize’s website, submitting any form, communicating electronically (including WhatsApp), or engaging Edumize’s services, the relevant data subject acknowledges and agrees to this Policy.

1. DEFINITIONS

• Personal Data means any information relating directly or indirectly to an identified or identifiable individual.
  
• Student means the individual whose education-related application or process is supported by Edumize.
  
• Authorized Person means any person acting on behalf of the Student, including parents, guardians, or sub-agents.
  
• Processing includes collecting, recording, holding, using, disclosing, or otherwise handling personal data.
  

2. PERSONAL DATA COLLECTED

Edumize may collect and process personal data including, but not limited to:

• Full name
• Passport and identification details
• Nationality and date of birth
• Contact information (address, phone number, email)
• Academic records and qualifications
• Visa and immigration-related information
• Medical or health-related information (where required for institutional, visa, or accommodation purposes)
• Payment-related information
• Communications exchanged via email, WhatsApp, forms, or other electronic channels

Personal data may be provided:

• Directly by the Student
  
• By a Parent or legal guardian
  
• By an Authorized Person acting on behalf of the Student
  

3. PURPOSES OF DATA PROCESSING

Personal data is processed for purposes including, without limitation:

• Application submission and coordination with universities or institutions
  
• Offer Letter (OL) processing
  
• Visa, embassy, NOC, and special requests processing
  
• Payment facilitation and verification
  
• Accommodation coordination
  
• Arrival and pre-arrival support
  
• Compliance with institutional, immigration, or regulatory requirements
  
• Internal record-keeping, audits, and dispute resolution
  
• Communication regarding applications, processes, updates, or operational matters
  

Where applicable, personal data may also be used for:

• Service improvement
  
• Operational notifications
  
• Informational or promotional communications (subject to applicable opt-out rights)
  

4. DISCLOSURE OF PERSONAL DATA

Personal data may be disclosed to:

• Universities, language institutes, and educational institutions
  
• Immigration authorities, embassies, and government bodies
  
• Accommodation providers and service partners
  
• Payment processors and financial institutions
  
• Sub-agents and Authorized Persons involved in the Student’s case
  
• Professional advisers, auditors, or legal counsel
  
• Regulatory or enforcement authorities where required by law
  

Edumize does not sell personal data to third parties.

5. CROSS-BORDER DATA TRANSFERS

Personal data may be transferred outside Malaysia where required for processing, including transfers to foreign universities, embassies, or service providers.

Such transfers are conducted in accordance with PDPA requirements and reasonable safeguards.

6. DATA RETENTION

Personal data is retained:

• For as long as necessary to fulfil the purposes stated in this Policy;
  
• For the duration of the Student’s engagement with Edumize; and
  
• Thereafter, for such period as required or permitted by law, regulatory requirements, audit needs, dispute resolution, enforcement of contractual rights, or internal record-keeping.
  

Edumize is not obligated to delete data immediately upon request where retention is required for legitimate purposes.

7. DATA SECURITY

Edumize implements reasonable technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction.

However, no system is completely secure, and Edumize does not guarantee absolute security of data transmitted electronically.

8. RIGHTS OF DATA SUBJECTS

Subject to PDPA and applicable laws, a data subject may request to:

• Access personal data held by Edumize
  
• Correct inaccurate or incomplete personal data
  
• Withdraw consent for processing
  

Important:
Withdrawal of consent or refusal to provide required personal data may result in:

• Suspension or termination of services;
  
• Inability to continue applications or processing;
  
• Loss of eligibility for commission-dependent services;
  
• Inability to fulfill contractual or legal obligations.
  

Such consequences shall not give rise to liability on the part of Edumize.

9. COMMUNICATIONS & ELECTRONIC RECORDS

Edumize may communicate and receive personal data via electronic channels including WhatsApp, email, and online forms.

Records of such communications may be retained and used for operational, evidentiary, audit, or dispute resolution purposes.

10. DATA PROVIDED BY AUTHORIZED PERSONS

Where personal data is provided by an Authorized Person:

• The Authorized Person represents that lawful authority and required consents have been obtained;
  
• Edumize shall not be responsible for internal disputes between the Student and the Authorized Person;
  
• Responsibility for accuracy and authorization rests with the Authorized Person.
  

11. COOKIES & WEBSITE DATA

Edumize’s website may use cookies or similar technologies to enhance user experience and analyze website usage.

Users may adjust browser settings to manage cookies; however, certain website functions may be affected.

12. AMENDMENTS

Edumize reserves the right to amend, update, or replace this Privacy Policy at any time.

The updated version shall be published on Edumize’s official website and shall take effect immediately upon publication.

Continued use of Edumize’s services constitutes acceptance of the updated Policy.

13. PREVAILING INTERPRETATION

In the event of any ambiguity or inconsistency:

• This Privacy Policy shall be interpreted consistently with Edumize’s Terms of Service and Refund Policy;
  
• Edumize’s interpretation shall prevail, subject to governing law.
  

14. GOVERNING LAW

This Privacy Policy shall be governed by and construed in accordance with the laws of Malaysia.