1. Introduction
Modelcraft ("we", "us", "our") operates an online AI development school based at 21 Jalan Sri Semantan 1, Damansara Heights, 50490 Kuala Lumpur, Malaysia. This Privacy Policy explains how we collect, use, store and protect personal data in connection with the operation of our courses and website.
We take our obligations under Malaysia's Personal Data Protection Act 2010 (PDPA) seriously. By enquiring about or enrolling in a course, you acknowledge that you have read this policy.
Questions about data handling can be directed to: [email protected]
2. Data We Collect
We collect personal data in the following circumstances:
- Enquiry form: Name, email address, phone number (optional), and the content of your message.
- Enrolment: Name, email address, phone number, and any background information you provide in the pre-enrolment conversation.
- Course participation: Work submitted as part of course artefacts, messages sent through course cohort channels, and session attendance records.
- Website analytics: Anonymised usage data (pages visited, session duration) if analytics cookies are accepted. See our Cookie Policy for details.
We do not collect payment card details directly. Payment processing, where applicable, is handled by a third-party provider.
3. Legal Basis for Processing
- Contract: Processing your name and contact details to respond to an enquiry and to administer your enrolment.
- Consent: Analytics cookies, where you have explicitly accepted them.
- Legitimate interests: Maintaining records of course participation to support the quality of written review and feedback.
4. How We Use Your Data
- To respond to your enquiry.
- To confirm and administer your enrolment.
- To deliver course sessions, recordings, and written review.
- To communicate course updates, schedule changes, or material amendments.
- To improve our courses using anonymised aggregated feedback.
We do not use your personal data for advertising, profiling, or direct marketing without separate consent. We do not sell personal data to any third party.
5. Data Sharing
We share data with third parties only where necessary:
- Video conferencing and recording tools: Sessions are delivered and recorded using a hosted video platform. Session recordings are stored on access-controlled infrastructure.
- Payment processor: If you pay by card, your payment details are processed by a third-party provider under their own privacy policy. We receive only a transaction confirmation.
- Analytics provider: Anonymised website usage data may be shared with an analytics service if you have accepted analytics cookies.
All processors are required to handle data under terms consistent with this policy. Data is not transferred outside Malaysia except where the processor's infrastructure requires it and appropriate safeguards are in place.
6. Data Retention
- Enquiry data where no enrolment follows: deleted within 12 months of the last communication.
- Enrolment and course records: retained for 3 years after course completion for administrative and quality purposes, then deleted.
- Session recordings: retained for the duration of the course plus 6 months, then deleted unless a participant has requested an extension for their own reference.
- Analytics data: retained in anonymised form; not linked to identifiable individuals.
7. Data Security
We store personal data on access-controlled infrastructure. Course work and communications are not publicly accessible. Staff and instructors who access participant data do so only to the extent necessary to deliver the course.
In the event of a data breach that is likely to result in a risk to your rights, we will notify you and the relevant authority as required under Malaysian law.
8. Cookies
We use cookies for basic site functionality and, with your consent, for anonymised analytics. Full details are in our Cookie Policy.
9. Your Rights
Under Malaysia's PDPA, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Withdraw consent where processing is based on consent (e.g. analytics cookies).
- Request deletion of data we no longer have a legal basis to hold.
- Object to processing in certain circumstances.
To exercise any of these rights, email [email protected]. We will respond within 21 days.
10. Children's Privacy
Our courses are designed for working software developers and are not directed at individuals under the age of 18. We do not knowingly collect data from minors.
11. Third-Party Links
Our website may contain links to third-party sites (for example, to documentation or tools mentioned in course material). We are not responsible for the privacy practices of those sites and recommend reviewing their policies separately.
12. Changes to This Policy
We may update this policy from time to time. The date at the top of the page will reflect the most recent revision. Where changes are material, enrolled participants will be notified by email.
13. Contact
Data-related enquiries: [email protected]
Modelcraft
21 Jalan Sri Semantan 1, Damansara Heights, 50490 Kuala Lumpur, Malaysia
Phone: +60 3-2094 3718