Privacy Policy

1. Introduction

Codemuse ("we", "us", "our") is an online school for AI development based in Kota Kinabalu, Sabah, Malaysia. This Privacy Policy explains how we collect, use, store, and protect personal information provided by visitors to this website and by people who enrol in our programmes.

We take the handling of personal data seriously. This policy is written in plain language so you can understand exactly what we do with information you share with us. If you have questions that aren't answered here, you can reach us at [email protected].

By using this website or submitting an enquiry or enrolment form, you confirm that you have read and understood this policy.

2. What Personal Data We Collect

We collect only the information needed to respond to enquiries and administer programme enrolments. This includes:

• Full name — provided when you submit an enquiry or enrol
• Email address — required for communication and programme access
• Phone number — optional, provided at your discretion
• Message content — any text you include in enquiry or contact forms
• Technical data — IP address, browser type, and pages visited, collected automatically via server logs and analytics tools
• Cookie data — as described in our Cookie Policy

We do not collect sensitive personal data such as national identity numbers, financial account details, or health information.

3. How We Collect Data

• Directly from you when you complete a contact or enquiry form on this website
• When you email us or call us with an enquiry
• Automatically through cookies and server logs when you visit this website
• Through analytics tools (such as Google Analytics, if enabled) that record anonymised usage data

4. Legal Basis for Processing

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, we process your personal data on the following grounds:

• Consent — where you have submitted a form or agreed to cookies
• Contractual necessity — where processing is needed to deliver a programme you have enrolled in
• Legitimate interests — for responding to enquiries and improving our website, provided these interests are not overridden by your rights
• Legal obligation — where we are required to retain records under applicable Malaysian law

5. How We Use Your Data

• To respond to enquiries and provide information about our programmes
• To administer enrolment and deliver programme content to enrolled learners
• To send administrative communications related to your programme (session details, schedule changes, feedback requests)
• To improve the content and structure of our website and programmes based on aggregated usage data
• To comply with legal and regulatory obligations

We do not use your personal data for automated decision-making or profiling, and we do not send marketing communications without your explicit consent.

6. Data Sharing and Third Parties

We do not sell, rent, or trade personal data. We may share data in the following limited circumstances:

• Service providers — such as email delivery platforms or video conferencing tools used to operate our programmes. These providers process data only on our instructions and under data processing agreements
• Analytics providers — anonymised traffic data may be processed by Google Analytics or equivalent tools to help us understand website usage
• Legal requirements — we may disclose data if required to do so by Malaysian law or in response to a valid legal process

Any third-party service providers we use are selected with care and are required to handle data responsibly.

7. Data Retention

We retain personal data for as long as necessary for the purpose for which it was collected:

• Enquiry data — retained for up to 12 months from the date of last contact if no enrolment follows
• Programme enrolment records — retained for up to 5 years after programme completion, as required for record-keeping purposes
• Website analytics data — retained in aggregated, anonymised form for up to 26 months
• Cookie consent records — retained for 12 months

After the applicable retention period, data is securely deleted or anonymised.

8. Data Protection Measures

We take reasonable technical and organisational steps to protect personal data against unauthorised access, loss, or disclosure. These include:

• HTTPS encryption for all data transmitted via this website
• Access controls limiting who within our team can view personal data
• Use of reputable third-party platforms with their own security measures
• Regular review of data handling practices

In the event of a data breach that is likely to result in significant harm to affected individuals, we will notify the relevant parties in accordance with the requirements of the PDPA 2010.

9. Cookies

This website uses cookies to support basic site functionality and, where consent is given, to analyse how the site is used. You can manage cookie preferences at any time through our Cookie Policy page. Essential cookies cannot be disabled as they are required for the site to function correctly.

10. Your Rights Under the PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to the personal data we hold about you:

• Right of access — you may request a copy of the personal data we hold about you
• Right to correction — you may request that inaccurate or incomplete data be corrected
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to limit processing — you may request that we stop using your data for certain purposes
• Right to complain — you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your data rights have been infringed

To exercise any of these rights, please email [email protected]. We will respond within 21 days.

11. Third-Party Links

This website may contain links to external websites, such as tool documentation or reference resources. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any external site you visit.

12. Children's Privacy

Our programmes are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete it promptly.

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, the revised date at the top of this page will be updated. Significant changes will be communicated to enrolled learners by email where practicable. Continued use of this website following an update constitutes acceptance of the revised policy.