1. Introduction
Owlspring ("we", "our", or "us") operates as an education provider based at 12 Lorong Mahsuri 2, 11900 Bayan Lepas, Pulau Pinang, Malaysia. We are committed to handling personal information responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
This Privacy Policy applies to information collected through our website, enquiry forms, and programme enrolment processes. It does not apply to third-party websites we may link to.
If you have questions about this policy, please write to us at [email protected].
2. Data We Collect
Information you provide directly
When you submit an enquiry or register interest in a programme, we may collect:
- Your name
- Email address
- Phone number (if provided)
- Your message or enquiry content
- The programme you have expressed interest in
Information collected automatically
When you visit our website, we or third-party services may collect:
- Browser type and version
- Pages visited and time spent
- Referring website
- General geographic region (country or city level)
- Device and operating system information
Legal basis for processing
- Consent — where you have agreed to receive communications or accept cookies
- Legitimate interest — to respond to your enquiries and improve our programmes
- Contract performance — to administer your programme enrolment
Data retention
Enquiry records are retained for up to 24 months. Enrolment and participation records may be retained for up to 7 years for administrative purposes. Analytics data is typically retained for 14 months before aggregation or deletion.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Responding to your enquiries about our programmes
- Processing and managing programme enrolments
- Sending programme-related communications (schedules, materials, reminders)
- Improving our website content and programme offerings
- Complying with legal and administrative obligations
Marketing communications
We may occasionally send information about upcoming programmes or events. You can opt out of these at any time by writing to [email protected] or using the unsubscribe link in any email we send.
Data sharing
We do not sell your personal data. We may share it with trusted service providers (such as email delivery or website analytics tools) who process it on our behalf, under appropriate data processing agreements. We may also disclose information where required by Malaysian law or a valid court order.
4. How We Protect Your Information
We take reasonable organisational and technical measures to protect your personal data against unauthorised access, alteration, disclosure, or loss. These include:
- Transmission of data via HTTPS (TLS encryption)
- Access controls limiting who can view personal data within our organisation
- Periodic review of data handling practices
- Use of reputable third-party services with their own security certifications
In the unlikely event of a data breach that affects your rights, we will notify you and, where required, the relevant authority, in accordance with applicable Malaysian law.
6. Your Rights
Under Malaysia's Personal Data Protection Act 2010, and where applicable, you have the right to:
Access
Request a copy of the personal data we hold about you.
Rectification
Ask us to correct inaccurate or incomplete data.
Erasure
Request deletion of your data, where there is no legal obligation to retain it.
Object
Object to certain types of processing, including direct marketing.
Withdraw Consent
Withdraw any consent you have given at any time, without affecting prior processing.
Portability
Request a structured, machine-readable copy of data you have provided to us.
To exercise any of these rights, please write to [email protected]. We will respond within 21 days. You also have the right to raise a concern with the Personal Data Protection Department Malaysia (JPDP) if you believe your data has been mishandled.
7. Third-Party Links
Our website may contain links to external websites for your reference. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of any third-party site you visit.
8. Children's Privacy
Our programmes are designed for adults, and our website is not intended for anyone under the age of 18. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted information to us, please contact us at [email protected] and we will promptly remove it.
9. Policy Updates
We may update this policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last Updated" date at the top of this page. For significant changes, we will provide a more prominent notice (such as a notice on the homepage or via email).
Continued use of our website after any changes constitutes your acceptance of the updated policy.
10. Contact Us
For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please reach us through any of the following: