Privacy Policy

This Privacy Policy explains how Auditbase Academy Sdn Bhd (Registration No. 202201018356 (1462175-D)), referred to below as "Auditbase Academy", "we" or "us", handles personal data collected through the website auditbase.help and in the course of providing English language tuition. We process personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).

1. Data we collect

We collect only what we need to run lessons and support you:

• Enquiry details — name, email address, phone number and the learning goal you describe when you submit our contact form.
• Enrolment details — billing name and address, chosen programme, lesson schedule and, for junior students, a parent or guardian's name and consent.
• Learning records — level assessments, lesson notes, attendance and progress reports created by your tutor.
• Technical data — limited cookie data as described in our Cookie Policy.

We do not ask for, and ask you not to send, sensitive personal data such as health information or identity card numbers, except where a certificate legally requires your full name as per your identification document.

2. How we use it

• To respond to enquiries and arrange taster lessons;
• To deliver lessons, match tutors, prepare study plans and issue certificates;
• To process payments and maintain accounting records required by Malaysian law;
• To send service messages about your bookings (schedule changes, renewals, reports);
• With your separate consent, to send occasional study tips or offers — every such email contains an unsubscribe link.

3. Legal basis and consent

We rely on your consent (given when you submit a form), the performance of our contract with you, and our legal obligations as a registered Malaysian company. For students under 18, consent must be given by a parent or guardian.

4. Who can see your data

Your data is visible to the tutors assigned to you and our student-care staff. We share data with third parties only where necessary to operate: payment processors, our video-classroom provider and cloud hosting services, each bound by their own data protection obligations. Some of these providers store data outside Malaysia; where that happens we choose providers with recognised security certifications. We never sell or rent personal data.

5. Retention

Enquiry data that does not lead to enrolment is deleted within 12 months. Student records are kept for the duration of study plus 7 years, matching Malaysian record-keeping requirements for tax and accounting. Certificates and the register needed to verify them are retained indefinitely.

6. Security

Access to student records is limited by role, protected by unique credentials and logged. Data is transmitted over encrypted connections. No system is perfectly secure, but we review our safeguards regularly and correct weaknesses promptly.

7. Your rights

Under the PDPA you may request access to your personal data, ask us to correct it, withdraw consent to marketing at any time, and ask us to stop processing your data (which may mean we can no longer provide lessons). Write to [email protected] or post to Suite 3A-05, Block D2, Solaris Dutamas, 1 Jalan Dutamas 1, 50480 Kuala Lumpur, Malaysia. We respond within 21 days.

8. Changes to this policy

If we change this policy in any meaningful way, we will note the new date at the top of this page and, for material changes, notify active students by email before the change takes effect.

9. Contact

Questions about privacy can be directed to our data protection contact at [email protected] or by phone on +60 3-6420 7185.