Cambright International Language Centre
- Introduction
Cambright International Language Centre (“Cambright”, “we”, “our”, “us”) is committed to protecting the privacy and personal data of our students, parents, partners, and website visitors in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
This Privacy Policy explains how we collect, process, store, disclose, and protect your personal data when you interact with us—whether through our website, online forms, enrolment processes, or any other communication channels.
By using our website or submitting your personal information to us, you acknowledge and consent to the terms of this Privacy Policy.
- Definition of Personal Data
Under the PDPA, “personal data” refers to any information that can identify an individual directly or indirectly. This includes but is not limited to:
- Full name, identification number (passport or IC), date of birth, nationality, gender;
- Contact details (address, email, phone number);
- Educational background, qualifications, and English proficiency records;
- Financial details, bank or payment information;
- Photographs, CCTV recordings, or attendance logs within our premises;
- Any other information collected through our services or website.
- The Data We Collect
We may collect your personal data through various means, including:
- Online registration and application forms;
- Course enrolment and payment transactions;
- Placement tests, academic assessments, and class participation records;
- Email or phone communications with our team;
- Cookies and analytics tools on our website;
- Marketing events, surveys, or student feedback forms.
We may also collect data from third-party sources, such as partner institutions, recruitment agencies, or education platforms, only when you have given prior consent.
- Purpose of Data Collection
Your personal data may be used for the following lawful purposes:
- To process student applications, registrations, and enrolments.
- To manage academic progress, attendance, and certification records.
- To issue invoices, process payments, and maintain financial accounts.
- To communicate class schedules, policy updates, or administrative notices.
- To comply with Malaysian laws, government, or immigration regulations.
- To promote Cambright’s educational services, events, or offers (with your consent).
- To ensure campus security, including CCTV monitoring and access control.
- To improve customer service and user experience through surveys and analytics.
Cambright will not process your personal data for any unrelated purpose without obtaining your consent.
- Disclosure of Personal Data
Cambright will not sell, rent, or trade your personal data. However, disclosure may occur in the following limited circumstances:
- To government authorities (e.g., Ministry of Education, Immigration Department) for regulatory compliance;
- To partner universities, examination boards, or educational agencies for student progression or testing purposes;
- To service providers (e.g., IT support, payment processors, courier companies) acting on our behalf;
- To legal advisors, auditors, or insurers when necessary for legitimate business or legal reasons.
All third-party recipients are required to comply with PDPA and maintain data confidentiality.
- Cross-Border Data Transfer
If your personal data needs to be transferred outside Malaysia (e.g., to a partner university abroad), we will take reasonable steps to ensure the recipient country provides adequate data protection consistent with PDPA requirements.
- Security of Data
Cambright employs appropriate technical and organizational security measures to protect your personal data from unauthorized access, misuse, loss, or alteration.
These measures include:
- Restricted access to personal records by authorized staff only;
- Secure storage on password-protected servers and cloud platforms;
- Regular data backups and system audits;
- Staff confidentiality agreements and training on data handling.
However, while we take precautions, no online transmission or data system is entirely immune from risks. You use our website at your own discretion.
- Data Retention
- We retain personal data for as long as necessary to fulfill the purposes stated above, or as required by law.
- When data is no longer required, it will be securely destroyed, anonymized, or deleted.
- Accuracy and Data Integrity
- We take reasonable steps to ensure that the personal data we hold is accurate, complete, and up to date.
- You are encouraged to notify us of any changes to your personal information.
- Your Rights Under PDPA
Under the Malaysian PDPA, you have the following rights:
- Access: To request access to your personal data held by us.
- Correction: To update or correct any inaccurate information.
- Withdrawal of Consent: To withdraw consent for the use or disclosure of your personal data (subject to contractual or legal limitations).
- Requests may be made in writing to support@cambright.edu.my, and we may require proof of identity before processing them.
- Marketing Communications
- With your explicit consent, we may send you updates, newsletters, or promotional materials about our courses and programs.
- You may opt out of receiving such communications at any time by following the unsubscribe link in our emails or contacting us directly.
- Use of Cookies
- Our website uses cookies to improve functionality and enhance user experience.
- Cookies collect anonymous data such as traffic patterns and device usage.
- You may disable cookies in your browser settings, but some parts of the site may not function optimally.
- CCTV and On-Premise Data
- Cambright premises are equipped with CCTV cameras for the safety and security of students, staff, and visitors.
- Recordings are stored securely and may only be accessed by authorized personnel or disclosed to law enforcement where legally required.
- Changes to This Policy
- Cambright reserves the right to amend this Privacy Policy from time to time to reflect changes in laws or internal practices.
- The latest version will always be available on our website with the updated effective date.
