// Legal

Privacy Policy

This policy explains how Cerdas Systems collects, uses, and protects personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last updated: January 2026

1. Data Controller

The data controller for personal information collected through this website and our services is:

Cerdas Systems
45 Jalan Teknologi, 81400 Senai, Johor, Malaysia
Telephone: +60 7-598 2637
Email: [email protected]

2. Information We Collect

We collect personal information in the following circumstances:

  • Enquiry forms: Name, organisation name, email address, phone number, and the content of your message when you contact us through our website.
  • Programme registration: Participant names, job titles, department, contact details, and dietary or accessibility requirements where applicable.
  • Pre-workshop questionnaires: Business context information, department structures, and current technology usage shared in preparation for our programmes.
  • Website usage data: Browser type, pages visited, time on site, and general geographic region collected via analytics tools (subject to your cookie preferences).
  • Communications: Emails and correspondence sent to us directly.

We do not collect sensitive personal data (such as identity card numbers, health information, or financial account details) unless explicitly required for a specific service and with your clear consent.

3. How We Use Your Information

We use the information we collect to:

  • Respond to your enquiries and manage service delivery;
  • Prepare and customise training programmes for your organisation;
  • Send you programme-related communications such as confirmation details, resource materials, and follow-up support;
  • Issue invoices and manage accounts;
  • Comply with applicable laws and regulations, including Malaysian PDPA requirements;
  • Improve our website and services based on aggregated usage data; and
  • Send occasional updates about our services, where you have indicated consent.

We do not use your personal information for automated decision-making or profiling that produces significant effects on individuals.

Under the Personal Data Protection Act 2010, we process personal data on the following bases:

  • Consent: Where you have submitted an enquiry form or agreed to receive marketing communications.
  • Contractual necessity: Where processing is necessary to deliver a programme or service you have engaged us for.
  • Legitimate interests: For general service improvement, internal analytics, and managing our business communications, where these interests do not override your rights.
  • Legal obligation: Where processing is required to comply with Malaysian law.

5. Sharing Your Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

We may share your information with:

  • Service providers: Third parties who assist us in operating our website or delivering our services (such as email platforms, website hosting, or analytics providers), under confidentiality obligations.
  • HRD Corp / HRDF: Where a programme is funded or claimable through HRD Corp, we may need to share relevant participant information as required by their administrative processes.
  • Legal requirements: Regulatory bodies or law enforcement where required by law or to protect the rights, property, or safety of Cerdas Systems, its clients, or others.

All third parties we work with are required to handle personal data in a manner consistent with applicable privacy laws.

6. Data Retention

We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by Malaysian law.

  • Enquiry and contact records: up to 3 years from the date of last contact.
  • Programme participant records: up to 7 years for financial and compliance purposes.
  • Website analytics data: as configured in the relevant analytics platform (typically 14 months).

After the applicable retention period, personal data is securely deleted or anonymised.

7. Your Rights

Under the Personal Data Protection Act 2010, you have the right to:

  • Request access to the personal data we hold about you;
  • Request correction of inaccurate or incomplete data;
  • Withdraw consent to marketing communications at any time;
  • Request that we cease processing your data in certain circumstances; and
  • Lodge a complaint with the relevant authority if you believe your data has been handled incorrectly.

To exercise any of these rights, please contact us at [email protected] or in writing to our address above. We aim to respond within 21 days.

8. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. These include restricted access controls, secure data storage, and regular review of our data handling practices.

While we strive to protect the information you share with us, no method of transmission over the internet or electronic storage is entirely secure. We cannot guarantee absolute security, and we encourage you to contact us promptly if you have any concerns about the safety of your information.

9. Cookies

Our website uses cookies and similar tracking technologies. Your cookie preferences are managed through the consent tool presented when you first visit the site. For full details, please refer to our Cookie Policy.

10. Children's Privacy

Our services are directed at business professionals and organisations, not individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has submitted personal information through our website, please contact us and we will take steps to remove it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after any updates constitutes your acknowledgement of the revised policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

Cerdas Systems
45 Jalan Teknologi, 81400 Senai, Johor, Malaysia
Telephone: +60 7-598 2637
Email: [email protected]

Business Hours: Monday – Friday, 9:00 AM – 6:00 PM; Saturday, 9:00 AM – 1:00 PM (Malaysia Time).