Privacy Policy

1. Introduction

Gradient Hall operates online AI development courses and handles the personal data of people who enquire about or enrol in those courses. This policy describes what data we collect, how we use it, how we protect it, and what rights you have in relation to it.

This policy applies to all visitors to our website and to participants in our courses. It is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia. If you have questions about how your data is handled, write to [email protected].

2. What data we collect

We collect personal data in two ways: directly from you when you fill in the enquiry form or enrol in a course, and automatically through the website when you visit it.

Data you provide directly

• Name and email address (required for enquiries and enrolment)
• Phone number (optional, if provided in the enquiry form)
• Message content from the enquiry form
• Payment information processed through our payment provider (we do not store card details)

Data collected automatically

• Browser type and version, device type, operating system
• IP address and approximate location (country level)
• Pages visited, referral source, session duration
• Cookie data where consent has been given (see Section 6)

3. Legal basis for processing

Under the PDPA 2010, we process personal data on the following bases: consent (for marketing communications and analytics cookies), contract (to administer course enrolment and deliver programme materials), and legitimate interest (to respond to enquiries and maintain security of our systems). You may withdraw consent at any time without affecting prior processing.

4. How we use your data

• Responding to enquiries you submit through the website
• Administering enrolment and delivering course sessions, recordings and materials
• Sending information about upcoming cohorts or changes to programmes you are enrolled in (not general marketing without consent)
• Maintaining records for administrative and tax purposes
• Improving the website and courses based on aggregate, anonymised usage data

We do not sell personal data. We do not share it with third parties for their marketing purposes.

5. Data retention

Enquiry data is retained for 12 months and then deleted unless a course enrolment followed, in which case records are retained for the duration of the course plus three years for administrative purposes. Payment records are retained for seven years as required by Malaysian tax law. You may request deletion of your data earlier; see Section 8.

6. Cookies

We use essential cookies to make the site function, and optional analytics and preference cookies where you have consented. Full details are in our Cookie Policy. You can manage your cookie preferences at any time through that page.

7. Data protection measures

Personal data is stored on servers within the Southeast Asia region with access controls limiting who can view it. Data in transit is encrypted using TLS. We review access logs periodically and restrict access to personal data to people who need it to do their work. In the event of a data breach affecting your personal data, we will notify you without undue delay as required by law.

8. Your rights

Under the PDPA 2010, you have the right to access personal data we hold about you, to correct inaccurate data, and to withdraw consent for processing based on consent. You may also request deletion of your data where we have no legal basis to continue holding it. To exercise any of these rights, write to [email protected] with the subject line "Data Request". We will respond within 21 days.

9. Third-party links

Our website may link to external resources, including papers and documentation on third-party platforms. We are not responsible for the privacy practices of those sites. We recommend reviewing their privacy policies before submitting personal data to them.

10. Children's privacy

Our courses are designed for working professionals and are not intended for people under 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have done so, we will delete it promptly.

11. Changes to this policy

If we make material changes to this policy, we will update the "Last updated" date at the top of the page and, where appropriate, inform enrolled participants by email. Continued use of our website after changes have been published constitutes acceptance of the updated policy.

12. Contact

For questions about this policy or to exercise your data rights:

• Email: [email protected]
• Address: Gradient Hall, 61 Jalan Ampang, 50450 Kuala Lumpur, Malaysia