Privacy Policy

cindras ("we", "us", "our") operates from Persiaran APEC 12, 63000 Cyberjaya, Selangor, Malaysia. This Privacy Policy explains how we collect, use, store, and protect personal data provided to us through this website and through our programme enrolment processes.

We handle personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and associated regulations. By using our website or enquiring about our programmes, you acknowledge this policy.

Questions about this policy may be directed to: [email protected]

We collect personal data through the following channels:

• Contact and enquiry forms on this website (name, email address, phone number, message content)
• Programme enrolment processes (name, email address, phone number, organisation name where applicable)
• Email correspondence with our team
• Cookies and analytics tools (see Section 5)

We do not collect sensitive personal data (as defined under PDPA 2010) unless explicitly required for service delivery and agreed to by you.

Legal Basis for Processing

We process personal data based on: your consent (when submitting forms or accepting cookies), contractual necessity (programme enrolment and delivery), and legitimate interests (communicating programme information to enquiring parties).

Retention Periods

Enquiry data is retained for up to 12 months. Enrolment and programme delivery records are retained for up to 5 years for administrative and legal purposes. Analytics data is retained according to the terms of the relevant third-party service.

Personal data collected through this website and enrolment processes is used for:

• Responding to programme enquiries and providing programme information
• Administering enrolment, delivering programme materials, and coordinating sessions
• Communicating updates relevant to programmes you have enrolled in
• Improving website content and user experience using aggregated analytics
• Meeting legal and administrative obligations

We do not sell personal data to third parties. We do not use personal data for automated decision-making that produces legal or similarly significant effects.

Third-Party Service Providers

We may share data with service providers who assist in website hosting, analytics, and communications. These providers are required to handle data in accordance with PDPA obligations and our instructions. Where analytics tools are used, data is aggregated and anonymised where possible.

We maintain technical and organisational measures appropriate to the nature of the data we hold:

• Website data is transmitted over encrypted connections (HTTPS)
• Access to personal data is limited to staff with a need to process it for legitimate purposes
• We review our data handling practices on a periodic basis
• Third-party service providers are selected with data security considerations in mind

In the event of a personal data breach affecting your data, we will notify affected individuals in accordance with our obligations under PDPA 2010 and notify the relevant authorities where required.

This website uses cookies to function correctly and to understand how visitors use the site. Cookies are small data files stored on your device by your browser.

• Essential cookies: Required for core site functionality. Cannot be disabled without affecting how the site works.
• Analytics cookies: Used to understand page views and visitor behaviour in aggregate. Optional.
• Preference cookies: Used to remember your consent preferences. Optional.

You can manage cookie preferences using the consent banner shown on first visit or by visiting our Cookie Policy page.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right of access: You may request a copy of personal data we hold about you.
• Right of correction: You may request corrections to inaccurate or incomplete personal data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. This does not affect processing carried out before withdrawal.
• Right to limit processing: You may request that we stop using your data for direct communications.
• Right to lodge a complaint: If you believe your data has been mishandled, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

To exercise any of these rights, contact us at: [email protected]. We will respond within 21 working days.

Data Controller: cindras

Address: Persiaran APEC 12, 63000 Cyberjaya, Selangor, Malaysia

Privacy enquiries: [email protected]

Phone: +60 19-635 7280

The relevant supervisory authority for data protection matters in Malaysia is the Department of Personal Data Protection (JPDP), under the Ministry of Digital.