Privacy Policy

1. Who We Are

Ilmu Nexus ("we", "us", "our") is an online AI development school operating from Kuala Lumpur, Malaysia. Our registered address is Jalan Sultan Ismail 96, 50250 Kuala Lumpur. We act as the data user in respect of the personal data we process in connection with our programmes and website at ilmunex.live.

You may contact our data privacy contact at any time:

• Email: [email protected]
• Phone: +60 16-738 4925
• Post: Jalan Sultan Ismail 96, 50250 Kuala Lumpur, Malaysia

2. Legal Framework

This policy is prepared in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. The PDPA governs the processing of personal data in commercial transactions and sets out the rights of individuals whose data is held by organisations.

Where we process data of individuals located in other jurisdictions, we also aim to meet applicable local standards on a best-efforts basis.

3. Personal Data We Collect

We collect only what is reasonably needed for the purposes described in this policy. This may include:

• Identity information — your name and preferred form of address
• Contact information — email address, phone number
• Enquiry content — the message you submit through our contact form
• Programme enrolment data — programme selected, payment records, enrolment dates
• Learning progress data — exercise submissions, project files, attendance in mentor sessions
• Technical data — IP address, browser type, pages visited, session duration, referring URL (collected automatically when you visit our website)
• Cookie data — preferences and analytics identifiers (see our Cookie Policy for details)

We do not knowingly collect sensitive personal data as defined under the PDPA (such as health information, political opinions, or religious beliefs) through ordinary use of our services.

4. How We Collect Your Data

Your data reaches us through the following channels:

• When you complete and submit our contact or enquiry form
• When you enrol in one of our programmes
• When you participate in mentor sessions or community spaces
• When you interact with our website (via cookies and server logs)
• When you correspond with us by email or phone

5. How We Use Your Data

We use your personal data for the following purposes:

• Responding to enquiries — to answer your questions and provide information about our programmes
• Programme delivery — to enrol you, track your learning progress, and provide mentor support
• Payments — to process programme fees and issue receipts
• Programme improvements — to understand how learners engage with our content and refine our offerings
• Communications — to send you updates relevant to your enrolment, and, with your consent, information about new programmes or community events
• Legal and compliance — to meet our obligations under Malaysian law and to protect our legitimate interests
• Website analytics — to understand how our website is used so we can improve it

We do not sell your personal data to third parties. We do not use your data to make automated decisions that significantly affect you without human review.

6. Legal Basis for Processing

Under the PDPA and related principles, we rely on the following bases for processing your personal data:

• Your consent — where you have provided it (for example, when subscribing to programme updates)
• Performance of a contract — where processing is needed to deliver the programme you have enrolled in
• Legitimate interests — for analytics, security, and service improvement, where those interests are not overridden by your rights
• Legal obligation — where we are required to process data to comply with applicable law

7. Sharing Your Data

We may share your personal data with:

• Service providers — companies that help us operate our platform (such as hosting providers, payment processors, and email delivery services), all of whom are bound by appropriate data protection obligations
• Mentors and facilitators — to the extent needed to deliver your programme (for example, sharing your name and project submissions with your assigned mentor)
• Regulatory authorities — where required by law or in response to a lawful request

We do not share your data with advertisers or unrelated third parties for marketing purposes.

8. Data Retention

We keep your personal data for as long as it is needed for the purpose it was collected, and no longer than is required by law or reasonable business practice. As a guide:

• Enquiry data (not resulting in enrolment): up to 12 months
• Programme enrolment and learning records: up to 7 years from the end of your last programme, to support any future certification queries
• Payment records: up to 7 years, in accordance with Malaysian financial record-keeping requirements
• Website analytics data: up to 26 months in aggregated or pseudonymous form

When data is no longer needed, we delete or anonymise it in a secure manner.

9. Your Rights Under the PDPA

The Personal Data Protection Act 2010 gives you the following rights in respect of your personal data held by Ilmu Nexus:

• Right of access — you may request a copy of the personal data we hold about you
• Right of correction — you may request that we correct any inaccurate or incomplete data
• Right to withdraw consent — where we process data based on your consent, you may withdraw that consent at any time; withdrawal will not affect the lawfulness of processing before withdrawal
• Right to limit processing — in certain circumstances you may ask us to stop using your data for specific purposes

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days. There is no charge for a reasonable request; we reserve the right to charge a modest administrative fee for excessive or repeated requests, as permitted under the PDPA.

10. Cookies

Our website uses cookies and similar technologies to help us understand how you use the site and to remember your preferences. You can manage your cookie preferences at any time through the cookie banner on our homepage or by consulting your browser settings.

For full details, please read our Cookie Policy.

11. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), access controls, and regular review of our practices.

No transmission over the internet is entirely secure. If you believe your data has been compromised in connection with our services, please contact us promptly.

12. International Transfers

Some of our service providers may operate outside Malaysia. Where personal data is transferred internationally, we take steps to ensure an adequate level of protection is in place, consistent with the requirements of the PDPA and applicable standards.

13. Children and Minors

Our programmes are designed for adults (18 years and above). We do not knowingly collect personal data from individuals under 18. If a parent or guardian believes we have inadvertently collected data relating to a minor, please contact us and we will promptly delete it.

14. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will post the revised policy on this page with an updated "Last updated" date. We encourage you to review this page periodically.

Continued use of our website or services after a change is posted constitutes acceptance of the updated policy.

15. How to Reach Us

If you have any questions about this policy, would like to exercise your rights, or have a concern about how we handle your data, please get in touch:

• Email: [email protected]
• Phone: +60 16-738 4925
• Address: Jalan Sultan Ismail 96, 50250 Kuala Lumpur, Malaysia

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (PDPD) if you believe your rights under the PDPA have not been respected.