Privacy Policy

1. Introduction

Promptly ("we", "us", "our") operates as an online education provider offering cohort-based AI development programmes from Lot 4-12, Pavilion Damansara Heights, Jalan Damanlela, 50490 Kuala Lumpur, Malaysia.

This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, contact us, or enrol in one of our programmes. It applies to data processed through our website and our enrolment and programme delivery systems.

We process personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and any other applicable legislation. By using our website or submitting your information through our contact form, you confirm that you have read and understood this policy.

2. What Data We Collect

We collect the following categories of personal data:

• Contact data: Name, email address, and phone number when submitted through our enquiry form.
• Enrolment data: Name, email address, background information, and payment details when you register for a programme.
• Programme data: Assignment submissions, code review records, and cohort participation information during and after a programme.
• Technical data: IP address, browser type, pages visited, and session duration collected via analytics cookies (when consented).
• Communication data: Records of emails, enquiries, and responses between you and Promptly.

Legal basis for processing:

• Contract performance — processing necessary to deliver the programme you enrolled in.
• Legitimate interest — responding to enquiries and improving our website.
• Consent — analytics and marketing cookies (where separately consented).

Retention: Contact and enrolment data is retained for up to 3 years after last interaction. Programme submissions and records are retained for up to 5 years. Analytics data is retained per the analytics provider's default retention settings.

3. How We Use Your Data

• To respond to enquiries submitted through our contact form.
• To process enrolment and deliver programme materials, assignments, and code review.
• To communicate cohort schedules, changes, and administrative matters.
• To maintain records of programme completion and issue completion documentation on request.
• To analyse anonymous usage patterns and improve site content (analytics cookies only).
• To comply with legal obligations under Malaysian law.

We do not sell personal data to third parties. We do not share personal data with third parties for their marketing purposes.

4. Data Sharing with Third Parties

We share data with third parties only where necessary for operations:

• Payment processors: For programme fee transactions. Payment processors operate under their own privacy and security standards.
• Analytics providers: Aggregated, anonymised usage data may be processed by analytics tools (e.g. Google Analytics) subject to your cookie consent.
• Email service providers: Used to send cohort communications and confirmation emails.
• Legal or regulatory authorities: Where required by Malaysian law or court order.

5. Data Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss. These include:

• Encrypted data transmission (HTTPS) for all web communications.
• Access controls limiting personal data to authorised staff involved in programme delivery.
• Secure cloud storage with access logging.

In the event of a data breach that affects your personal data, we will notify affected individuals and the relevant authority in accordance with PDPA 2010 requirements.

6. Cookies

We use essential cookies required for basic site function and, where consented, analytics and preference cookies. Essential cookies cannot be disabled. Optional cookies are activated only when you accept them through our cookie banner.

For full details on cookie categories, purposes, and management options, see our Cookie Policy.

7. Your Rights Under PDPA 2010

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Withdraw previously given consent at any time, without affecting the legality of earlier processing.
• Right to object: Object to processing of your data for marketing or analytics purposes.
• Right to limit processing: Request that we restrict processing in certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

For unresolved complaints, you may contact the Personal Data Protection Commissioner of Malaysia.

8. Third-Party Links

Our website may contain links to external sites — for example, open-source project repositories or documentation. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit.

9. Age Requirement

Promptly's programmes are intended for participants aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that a minor has submitted personal data, we will delete it promptly. Contact [email protected] if you have concerns.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When changes are material, we will update the "Last Updated" date above and, where appropriate, notify enrolled participants by email. Continued use of the site after updates constitutes acceptance of the revised policy.

11. Contact for Data Enquiries

For privacy-related questions, data access requests, or correction requests, contact us: