Legal
Privacy Policy
Last updated: 25 July 2025
1. Introduction
Praxentia (No. 4, Jalan Bestari 3, Taman Nusa Bestari, 81300 Skudai, Johor, Malaysia) is committed to handling personal data responsibly. This policy describes what data we collect through our website and programme administration, why we collect it, how we use and protect it, and what rights you have in relation to it.
This policy applies to data collected via the website at praxenti.cyou, by email, and through programme enrolment. If you have questions not addressed here, contact us at [email protected].
2. What personal data we collect
2.1 Data you provide directly
- Contact form submissions: name, email address, phone number (optional), and the content of your message
- Programme enrolment: name, email address, phone number, current role and employer, years of experience, and information relevant to entry requirements
- Email correspondence: any personal data included in emails you send us
2.2 Data collected automatically
- Usage data: pages visited, time on page, referral source — collected via analytics tools if consent is given
- Technical data: IP address, browser type, device type — used for security and site performance
- Cookies: see our Cookie Policy for details
3. How and why we use your data
| Purpose | Legal basis (PDPA Malaysia) |
|---|---|
| Responding to your enquiry or contact form submission | Consent; legitimate interest |
| Programme administration and delivery | Contract performance |
| Sending programme schedules and updates to enrolled participants | Contract performance; legitimate interest |
| Maintaining records of programme completion for participants | Contract performance; legitimate interest |
| Analytics to understand site usage and improve content | Consent (analytics cookies) |
| Compliance with applicable Malaysian law | Legal obligation |
4. Data retention
- Contact form enquiries: 24 months from the date of submission
- Programme enrolment and participant records: 7 years from programme completion, to comply with Malaysian commercial record-keeping requirements
- Analytics data: as configured in the analytics tool, subject to consent withdrawal
- Email correspondence: retained for the period of the business relationship and up to 3 years after
5. Data sharing with third parties
We do not sell personal data. We may share data with the following categories of third party, only to the extent necessary:
- Analytics providers (e.g. Google Analytics): receive anonymised usage data if analytics cookies are accepted
- Email service providers: used to send programme communications; access is limited to what is required for delivery
- Host companies for site visits (diploma track only): participant names and company affiliations shared for visit logistics, under confidentiality agreement
- Legal or regulatory authorities: where required by Malaysian law
6. Data protection measures
- Website served over HTTPS; data in transit is encrypted
- Internal access to personal data is restricted to staff with a specific need
- Programme participant assessment documents stored on password-protected systems
- Paper records stored in locked files at our Skudai office
- In the event of a data breach affecting your personal data, we will notify you and the relevant authority in accordance with applicable Malaysian law
7. Cookies
We use cookies to understand how the site is used and to remember consent preferences. For full details of cookie types and how to manage them, see our Cookie Policy.
8. Your rights under Malaysian law
Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights in relation to personal data we hold about you:
- Right of access: request a copy of personal data we hold about you
- Right to correct: request correction of inaccurate or incomplete data
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting lawfulness of prior processing
- Right to limit processing: request that we limit how we use your data in certain circumstances
- Right to object: object to processing based on legitimate interest
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you are not satisfied with our response, you may refer the matter to the Department of Personal Data Protection Malaysia.
9. Third-party links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reading their privacy policies before submitting personal data to them.
10. Children
Our programmes are designed for working adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have done so, contact us and we will delete the data promptly.
11. Changes to this policy
We may update this policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page. Continued use of the site after changes are posted constitutes acceptance of the updated policy.
12. Contact for data enquiries
For questions about this policy or to exercise your data rights: