Privacy Policy

1. Introduction

Copperdesk ("we", "us", "our") is a business school operating from 18 Lebuh Farquhar, 10200 George Town, Pulau Pinang, Malaysia. We are committed to handling the personal information of enquirers, participants and website visitors responsibly and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This policy explains what information we collect, how we use it, how long we keep it, and what rights you have in relation to it. If you have questions, contact us at [email protected].

2. Information We Collect

We collect personal information only when you provide it to us directly or when it is generated by your use of our website.

2.1 Information you provide

• Name and contact details (email address, phone number) submitted via our enquiry form
• Message content submitted through the form
• Correspondence by email or telephone
• Programme enrolment information (name, contact details, professional background) provided during the application process

2.2 Information collected automatically

• Website usage data via analytics cookies (if you have consented)
• IP address and browser type for security and statistical purposes
• Pages visited and time spent on site

2.3 Legal basis for processing

Under the PDPA, we process your data on the basis of your consent (when you submit our form or accept cookies), the performance of a contract (when you enrol in a programme), and our legitimate interest in operating a functional and secure website.

2.4 Data retention

Enquiry data is retained for 12 months after your last contact with us. Programme participant records are retained for 3 years from programme completion for administrative and record purposes, after which they are deleted or anonymised.

3. How We Use Your Information

• To respond to your programme enquiry or question
• To manage your enrolment and programme participation
• To send you information about your programme, including session dates and submission deadlines
• To improve our website and programmes using aggregated, anonymised analytics
• To comply with legal and regulatory obligations

We do not use your personal data for automated decision-making or profiling. We do not sell your data. We do not share it with third parties for their own marketing purposes.

3.1 Third-party services

We may use analytics services (such as Google Analytics) to understand website usage patterns. These services may set cookies subject to your consent. We may also use email service providers to manage programme communications. These providers act as data processors under written agreements and do not use your data for their own purposes.

4. Data Protection Measures

• Data is stored on access-controlled systems with restricted staff access
• Email communications containing personal data use standard transport encryption (TLS)
• Paper records are stored securely and disposed of by shredding
• In the event of a data breach affecting your personal information, we will notify you and the relevant Malaysian authority in accordance with PDPA requirements

5. Cookies

Our website uses essential cookies required for basic site function and, with your consent, analytics cookies to understand how visitors use the site. You can manage your cookie preferences at any time via our Cookie Policy page. Withdrawing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

6. Your Rights

Under the PDPA and general data protection principles, you have the following rights in relation to your personal data held by Copperdesk:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to ask us to correct inaccurate or incomplete data
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time
• Right to limit processing — to ask us to restrict use of your data in certain circumstances
• Right to erasure — to ask us to delete your data, subject to legal retention requirements
• Right to lodge a complaint — with the relevant supervisory authority; in Malaysia, the Department of Personal Data Protection (JPDP) under the Ministry of Communications and Multimedia

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. External Links

Our website may include links to external sites. We are not responsible for the privacy practices or content of those sites. We recommend reading their privacy policies before providing any personal information.

8. Minimum Age

Our programmes are designed for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently received information from a minor, please contact us and we will delete it promptly.

9. Policy Updates

We may update this policy periodically to reflect changes in our practices or legal requirements. Material changes will be posted on this page with an updated effective date. Continued use of our website or services after a change constitutes acceptance of the revised policy.

10. Contact for Data Matters