1. Introduction
Hutan Data ("we", "our", or "us") is committed to handling personal information with care and transparency. This Privacy Policy applies to our website at hutandat and to all interactions associated with our AI development courses.
By using our website or submitting information through our contact or enrolment forms, you acknowledge that you have read and understood this policy. If you have any questions, you are welcome to reach us at [email protected] or by telephone at +60 3-2293 7416.
This policy is governed by the laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA).
2. Information We Collect
We may collect personal information in the following ways:
- Contact form submissions — name, email address, phone number, and message content when you write to us.
- Course enrolment — contact details, professional background, and payment information as required to process enrolment.
- Website usage data — browser type, pages visited, referring URLs, and approximate location, collected via cookies and analytics tools (see our Cookie Policy).
- Correspondence — email exchanges, feedback submitted, and records of enquiries you direct to us.
We do not knowingly collect personal information from individuals under the age of 18 without verifiable parental or guardian consent.
3. How We Use Your Information
Personal information is used only for purposes that are clear, limited, and relevant:
- Responding to enquiries and providing course information
- Processing and administering course enrolments and payments
- Delivering course materials, feedback, and progress records
- Sending transactional communications related to your enrolment
- Improving our website and course offerings based on aggregated, anonymised data
- Complying with legal and regulatory obligations under Malaysian law
We do not sell, rent, or trade your personal information with third parties for their own marketing purposes.
4. Legal Basis for Processing
Under the Personal Data Protection Act 2010, we rely on the following grounds to process your information:
- Consent — where you have actively provided information and agreed to its use, such as through our contact form.
- Contractual necessity — where processing is required to deliver a course you have enrolled in.
- Legitimate interests — for website analytics and internal record-keeping, balanced against your privacy rights.
- Legal obligation — where we are required to retain or disclose information by applicable law.
5. Sharing of Information
We share personal information only in limited, defined circumstances:
- Service providers — trusted vendors who assist with payment processing, email delivery, or analytics, subject to confidentiality agreements.
- Course mentors — for the Applied AI Systems Programme, mentor staff receive enrolment details necessary for their assigned groups.
- Legal requirements — where disclosure is required by a court order, regulatory authority, or applicable Malaysian law.
Any third party that processes data on our behalf is required to do so only on our instructions and in accordance with this policy.
6. Data Retention
We retain personal information for as long as reasonably necessary for the purposes described in this policy, or as required by applicable law. As a general guide:
- Contact form enquiries — up to 12 months after last contact
- Course enrolment records — up to 5 years following completion, for administrative and dispute purposes
- Payment records — as required under Malaysian financial regulations
- Website analytics — in aggregated, anonymised form for up to 24 months
After the applicable retention period, data is securely deleted or anonymised.
7. Your Rights
Under Malaysian data protection law, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Withdraw consent where processing is based on consent
- Request that we limit use of your information in certain circumstances
- Lodge a concern with us regarding how your data has been handled
To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe, generally within 14 working days.
8. Security Measures
We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or loss. These measures include access controls, secure data transmission, and periodic internal review of data handling practices.
No method of electronic storage or transmission is entirely without risk. If you believe a security incident has affected your information, please notify us promptly at [email protected].
9. Cookies
Our website uses cookies to support basic functionality and to gather anonymised usage data. For a full description of the cookies we use and how to manage them, please refer to our Cookie Policy.
10. Links to External Websites
Our website may contain links to external resources for reference purposes. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy notices of any external website you visit.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Updates will be published on this page with a revised review date. Where changes are material, we will take reasonable steps to bring them to your attention.
Continued use of our website following a policy update constitutes acknowledgement of the revised terms.
12. Contact Us
For any questions, requests, or concerns about this Privacy Policy or our data handling practices, please reach us through any of the following:
- Email: [email protected]
- Telephone: +60 3-2293 7416
- Post: Hutan Data, The Gardens, Mid Valley City, 59200 Kuala Lumpur, Malaysia