Legal

Privacy Policy

Last updated: 10 June 2025 · Effective: 10 June 2025

1. Introduction

Gradientredf (referred to as "we", "us", or "our") operates the website at gradientredf.biz and delivers the AI development programmes described on that site. We take the privacy of our learners, enquirers and website visitors seriously. This policy describes what data we collect, how we use it, how long we keep it, and what rights you have over it.

This policy applies to all personal data collected through our website, contact form, and programme administration. It is written in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and related regulations.

If you have questions about this policy, contact us at [email protected].

2. Data we collect and how we collect it

Contact form data: When you submit the enquiry form on this website, we collect your name, email address, and optionally your phone number and message content. This data is collected to respond to your enquiry.

Programme enrolment data: When you enrol in a programme, we collect the name and contact details you provide during the enrolment process, along with payment records as required for our financial administration.

Submission data: Assignment submissions and assessment responses you submit as part of a programme are stored for the purpose of providing feedback and maintaining your enrolment record.

Website usage data: We may collect anonymised data about how visitors use our website (pages visited, time spent, device type) through analytics cookies, if you have consented to analytics cookies.

Legal basis for processing:

Contact form responses: your consent given by submitting the form
Programme enrolment and delivery: performance of the contract between us
Financial records: legal obligation under Malaysian accounting and tax law
Analytics: your consent given through the cookie consent tool

Retention periods: Enquiry data is kept for 12 months from the date of last contact. Enrolment and assessment data is kept for 3 years from the end of the programme. Financial records are kept for 7 years as required by Malaysian law.

3. How we use your data

We use the data we collect for the following purposes only:

To respond to your enquiry about a programme
To administer your enrolment, provide access to course materials, and deliver the programme you enrolled in
To provide feedback on assignments and assessments
To send programme-related communications (session schedules, materials, administrative notices)
To maintain financial and legal records required under Malaysian law
To understand how the website is used, if you have consented to analytics cookies

We do not use your data for unsolicited marketing. We do not sell your data to any third party. We do not use your submission data to train any AI model.

4. Data sharing

We share your data only in the following circumstances:

Payment processing: Payment details are processed by our payment provider (FPX-compatible bank gateway). We do not store full payment card details.
Programme mentors and reviewers: In the Regional Cohort Residency, your project materials are shared with your assigned mentor and with external design reviewers, for the purpose of providing feedback.
Legal requirement: We may disclose data if required to do so by Malaysian law, court order or regulatory authority.

We do not share data with advertisers, marketing agencies or data brokers.

5. Data protection measures

We implement the following technical and organisational measures to protect your personal data:

HTTPS encryption for all data transmitted to and from this website
Access to personal data is restricted to staff members who need it for their role
Programme submission data is stored on servers located in Malaysia or Singapore
Passwords and access credentials are not stored in plain text

In the event of a data breach that is likely to result in risk to your rights, we will notify affected individuals and, where required, the relevant regulatory authority, within 72 hours of becoming aware of the breach.

6. Cookies

This website uses cookies. Essential cookies are required for the website to function. Analytics and preference cookies are optional and require your consent.

You can manage your cookie preferences at any time using the cookie preference tool. See our Cookie Policy for a full explanation of the cookies used and how to manage them.

7. Your rights under Malaysian law and general data protection principles

You have the following rights in relation to your personal data held by us:

Right of access: You may request a copy of the personal data we hold about you.
Right to correction: You may request that we correct inaccurate personal data.
Right to withdraw consent: Where we process data based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
Right to limit processing: In certain circumstances, you may ask us to stop using your data for particular purposes.
Right to object: You may object to processing based on legitimate interests, unless we have compelling grounds to continue.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. There is no fee for a reasonable first request.

If you believe we have not handled your data appropriately, you may file a complaint with the Department of Personal Data Protection Malaysia (JPDP) at pdp.gov.my.

8. Third-party links

This website may contain links to third-party websites, including payment gateways, reference materials and external review resources. We are not responsible for the privacy practices of those websites. We recommend reading the privacy policy of any third-party site you visit.

9. Children and minors

Our programmes are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have collected data from a minor without appropriate parental consent, we will delete that data promptly.

10. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where we have your contact details, notify you by email. Continued use of the website or our programmes after changes are posted constitutes acceptance of the updated policy.

11. Data controller and contact

The data controller for the purposes of the Personal Data Protection Act 2010 (Malaysia) is:

Gradientredf
Lot 4-12, Wisma Sanyan
Jalan Sanyan, 96000 Sibu
Sarawak, Malaysia
[email protected]
+60 84 316 927