Privacy Policy

1. Introduction

Weightsmith operates from 4 Jalan Merdeka Raya, 75000 Melaka, Malaysia. We run online AI development tracks for working adults. This Privacy Policy describes how we collect, use, store and protect personal information provided to us through enrolment, enquiry and website use.

We are the data controller for personal information collected through this website and our course administration systems. We process data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

Questions about this policy can be directed to [email protected].

2. Personal Data We Collect

We collect the following categories of personal data:

• Contact information: Full name, email address and telephone number provided when you submit an enquiry form or enrol in a track.
• Enrolment information: Track selected, cohort dates, payment records and assessment submissions.
• Technical data: IP address, browser type, pages visited and session duration, collected via website analytics tools.
• Communications: Messages sent through our contact form, cohort channel messages and email correspondence.

We do not collect sensitive personal data such as national identity numbers, financial account credentials or health information.

Legal Basis for Processing

• Contract performance: processing necessary to administer your enrolment and deliver the track you have paid for.
• Consent: where you have explicitly agreed to receive communications or the use of optional cookies.
• Legitimate interest: improving our website, operating cohort channels and preventing fraud.

Retention Periods

Enrolment records and completion data are retained for seven years from the date of enrolment for administrative and dispute-resolution purposes. Enquiry form data where no enrolment follows is deleted after twelve months. Website analytics data is retained for twenty-four months.

3. How We Use Personal Data

• Managing cohort placement and communicating logistics before and during a track.
• Providing access to cohort channels, recorded sessions and course materials.
• Issuing written records of course completion.
• Responding to enquiries submitted through the contact form.
• Analysing website usage to improve content and performance.
• Sending administrative updates relevant to your enrolled track.

Data Sharing

We do not sell personal data to third parties. We do not share personal data with advertising networks. Limited sharing occurs with: (a) payment processors for transaction handling; (b) cloud infrastructure providers who store our systems under data processing agreements; (c) analytics services operating under data processing terms. We do not transfer personal data outside Malaysia except where the receiving jurisdiction has equivalent data protection standards.

4. Data Protection Measures

• Personal data is stored on encrypted servers. Data in transit between your browser and our systems uses TLS encryption.
• Access to participant data is restricted to staff with a role-specific need. Access logs are maintained.
• In the event of a data breach affecting personal data, we will notify affected individuals within 72 hours of becoming aware, in accordance with our obligations under the PDPA.
• We review security practices periodically and update them when vulnerabilities are identified.

5. Cookies

This website uses cookies to maintain session preferences and collect aggregated usage statistics. Essential cookies are necessary for the website to function. Optional analytics and preference cookies are only placed with your consent, which you can provide or withdraw through the cookie banner displayed on your first visit.

Full details of the cookies we use, their purpose and how to manage them are in our Cookie Policy.

6. Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights with respect to your personal data held by Weightsmith:

• Right of access: you may request a copy of the personal data we hold about you.
• Right of correction: you may request correction of inaccurate or incomplete personal data.
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing conducted prior to withdrawal.
• Right to cease processing: you may request that we cease or limit processing of your personal data for certain purposes.
• Right to complain: if you believe we have not handled your data lawfully, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

To exercise any of these rights, write to [email protected]. We will respond within thirty days.

7. Third-Party Links

This website may contain links to external resources, documentation or tools. We are not responsible for the privacy practices of those sites and do not endorse them by linking to them. Review the privacy policy of any third-party site before providing personal information to it.

8. Children's Privacy

Our tracks and services are directed at adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data to us, contact [email protected] and we will delete the information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify enrolled participants by email and update the "Last Updated" date at the top of this page. Continued use of our services after changes are notified constitutes acceptance of the updated policy.

10. Contact for Data Enquiries

For all data protection questions, correction requests or complaints: