Privacy Policy
Last Updated: 15 May 2025
Tunas AI ("we", "us", "our") operates an online AI development school based at Jalan Pinang 45, 50450 Kuala Lumpur, Malaysia. This Privacy Policy explains how we collect, use, and protect personal data when you interact with our website and services. It applies to all users of our website at tunasaim.biz and to enrolled learners on any of our course tracks.
Our data practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA). If you have questions about this policy, please contact us at [email protected].
1. Data We Collect
We collect the following categories of personal data:
- Contact information: full name, email address, and phone number provided through enquiry or enrolment forms.
- Payment information: processed through third-party payment services; we do not store card details.
- Course participation data: attendance records, project submissions, and communication within the course platform.
- Technical data: IP address, browser type, pages visited, and session duration collected through cookies and analytics tools.
Legal Basis for Processing
- Contact form submissions: consent
- Enrolment and course delivery: contractual necessity
- Analytics and website improvement: legitimate interest
Retention Periods
Enquiry data is retained for 12 months unless an enrolment follows, in which case it is retained for the duration of the course plus 3 years. Financial records are kept for 7 years as required by Malaysian tax law.
2. How We Use Your Data
- To respond to enquiries and manage enrolments
- To deliver course content, send session recordings, and provide instructor feedback
- To communicate schedule changes, updates to course materials, and administrative notices
- To process payments through third-party services
- To analyse website usage and improve the learner experience
We do not send marketing communications without explicit consent. If you have opted in, you may withdraw that consent at any time by emailing [email protected].
Third-Party Sharing
We share data with third-party services only to the extent necessary for operations: payment processing, cloud hosting, and website analytics. We do not sell personal data. Third parties are required to handle data in accordance with applicable law.
3. Data Protection Measures
- Data is transmitted over HTTPS with TLS encryption
- Access to personal data is limited to staff who need it to carry out their responsibilities
- Course platform access requires authenticated login
- In the event of a data breach affecting personal data, affected individuals will be notified within a reasonable period in accordance with PDPA obligations
4. Cookies
We use cookies for essential site functionality, analytics, and preference storage. You can manage cookie preferences through the banner shown on your first visit to this site. Full details are available in our Cookie Policy.
5. Your Rights
Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you
- Correction: request corrections to inaccurate or incomplete data
- Withdrawal of consent: withdraw consent for processing where consent was the legal basis
- Objection: object to processing for marketing purposes
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. Complaints may also be directed to the Department of Personal Data Protection Malaysia (pdp.gov.my).
6. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.
7. Children's Privacy
Our courses are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that such data has been collected, we will delete it promptly.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted to this page with an updated "Last Updated" date. Where changes are material, we will notify enrolled learners by email.
9. Contact
For privacy-related enquiries, contact the data controller: