15 October 2025

This Privacy Notice explains how Eluma Education (operated by Ampang International Education Group Sdn Bhd (“the Company”, “we”, “our”, or “us”) collects, uses, discloses, protects, and in general process your personal data in accordance with the Personal Data Protection Act 2010 (“PDPA”) of Malaysia.

 

1. Personal Data We Collect

We may collect among others, the following types of personal data:

• Name, email address, phone number
• Identification document (National ID, passport, driving licence)
• Utility Bills, or other documents related to the proof of address
• Bank details, or other payment methods used
• Source of Wealth and/or Source of Funds
• Billing and shipping address
• IP address, browser type, device information
• Any other information you provide via forms, surveys, or communications

Please note that Personal Data may in some cases consists of “sensitive personal data” which refers to information relating to your health, medical information, etc. For the purposes of this Notice, both personal data and sensitive personal data are included in any use of the term “personal data”.

Your personal data was or is to be collected from forms (electronic or otherwise) compiled voluntarily by you, including but not limited to emails, mobile applications, phone calls, referrals and all other documentation submitted by you to us, all other information that you may provide us from time to time, and from third parties.

You are responsible for ensuring that the information you provide us is accurate, complete, not misleading and is kept up to date.

 

2. Purpose of Collection

Your personal data is collected for the following purposes:

• To process orders and/or queries
• To onboard participants in our courses/programmes
• To deliver products/services
• To respond to inquiries and provide customer support
• To support our internal administration procedures
• To send promotional materials (with your consent)
• To improve our website and services
• To ensure security and fraud prevention measures
• To comply with any legal requirement and/or obligation
• For research and/or statistical purposes.

3. Disclosure of Personal Data

We may share your data, among others with:

• Payment processors and delivery partners
• Marketing service providers (only with your consent)
• Legal or regulatory authorities when required

Please rest assure that e will not sell or rent your personal data to third parties.

4. Data Protection

We take Data Protection very seriously therefore, we have in place appropriate internal security measures to protect your personal data from unauthorized access, disclosure, or misuse.

We also maintain a reasonable physical security procedure to manage and protect the use and storage of records containing personal data.

As we strive to protect your personal data, we limit the personnel that can access your data and the amount of data accessible by them. Only personnel that specifically requires your personal data may access it to carry out their business responsibilities. Our employees are fully trained on Data Privacy, and are at all times obliged to respect the confidentiality of and personal data held by us.

5. Your Rights

You have the right to:

• Right to Be Informed (Notice & Choice Principle): in this regard you must be told what data is being collected, the reasons why we are collecting, to whom this information may be disclosed to. Therefore, you have the right to decide whether to continue or not with this collection.
• Access and correct your personal data: We strive to ensure that your personal data with us are accurate, complete and up-to-date at all times. If at any point in time you believe that any of the personal data of yours that we hold is inaccurate, incomplete or not up-to-date, you should immediately inform us with the correct, complete and accurate data. We will use all reasonable efforts to correct the data within twenty-one (21) days from the date we receive your request for correction.
• Withdraw consent at any time: You may withdraw your consent at any time, especially for marketing or non-essential data processing. In order to do so kindly contact our Data Privacy Officer at dataprivacy@eluma.edu.my
• Right to Prevent Processing in Certain Cases: You can object to processing that causes distress or harm, or that is unlawful or excessive.
• Right to Data Integrity: Organizations must ensure your data is accurate, complete, and up to date.
• Right to Data Security: Your data must be protected against loss, misuse, unauthorized access, or disclosure.
• Retention Principle: Organizations must not retain personal data longer than necessary for the purpose it was collected. If the data is no longer needed, it must be deleted or anonymized.

To exercise any of your rights, contact us at: dataprivacy@eluma.edu.my

6. Data Privacy Officer

You can contact our data privacy officer via the following email dataprivacy@eluma.edu.my

 

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with the updated date.

By continuing to engage with us, you shall be deemed to have read, understood and accepted the statements and terms herein and have irrevocably consented to us processing your personal data.