Effective Date: 12 September 2025
Last Updated: 12 September 2025
Introduction
Welcome to Studypal.my ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational platform and services.
Information We Collect
Personal Information
We may collect the following types of personal information:
- Contact Information: Name, email address, phone number, mailing address
- Educational Information: Academic records, qualifications, course preferences, institution preferences
- Profile Information: Date of birth, nationality, identification numbers (where required for applications)
- Assessment Data: Results from our student characteristic tests and career assessments
- Communication Records: Messages, inquiries, and correspondence with our education consultants
- Application Data: University and course applications submitted through our platform
Technical Information
We automatically collect certain technical information:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent on platform, click patterns, search queries
- Cookies and Similar Technologies: Information stored through cookies, web beacons, and similar tracking technologies
How We Use Your Information
Educational Services
- Providing personalized course and university recommendations
- Processing applications to educational institutions
- Conducting student characteristic assessments
- Facilitating communication with education consultants
- Matching students with suitable programs and institutions
Platform Operations
- Creating and managing user accounts
- Improving our platform functionality and user experience
- Providing customer support and responding to inquiries
- Sending important updates about your applications or account
Communication
- Sending educational newsletters and updates (with your consent)
- Notifying you about new courses, universities, or opportunities
- Providing information about educational events and workshops
Information Sharing and Disclosure
Educational Institutions
We share your application information with universities and colleges you choose to apply to through our platform. This includes academic records, qualifications, personal information required for applications, and supporting documents you provide.
Service Providers
We may share information with trusted third-party service providers who assist us in technical infrastructure, payment processing, communication services, and analytics.
Legal Requirements
We may disclose your information when required by law or to comply with legal obligations, protect our rights and property, ensure user safety and platform security, or respond to lawful requests from authorities.
Data Security
We implement appropriate technical and organizational security measures to protect your personal information:
- Encryption: Sensitive data is encrypted in transit and at rest
- Access Controls: Limited access to personal information on a need-to-know basis
- Regular Updates: Security systems are regularly updated and monitored
- Staff Training: Our team receives regular privacy and security training
Your Rights and Choices
Access and Control
You have the right to:
- Access your personal information we hold
- Update or correct inaccurate information
- Request deletion of your personal information (subject to legal requirements)
- Withdraw consent for marketing communications
- Request a copy of your data in a portable format
Data Retention
We retain your personal information for as long as necessary to provide our educational services, maintain your account and application history, comply with legal obligations, and resolve disputes. Educational records and application data may be retained for extended periods to maintain academic history and support ongoing educational opportunities.
International Data Transfers
As we work with educational institutions globally, your information may be transferred to and processed in countries outside Malaysia. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.
Children's Privacy
Our services are intended for individuals who are at least 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify users of significant changes through email notifications, prominent notices on our platform, and updated "Last Modified" date.
Governing Law
This Privacy Policy is governed by the laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA). Any disputes arising from this policy will be subject to the jurisdiction of Malaysian courts.