Privacy Policy
Last updated: 08 June 2026
1. Who We Are
I Certification Sdn Bhd (Registration No. 202101032111 (1432411-X)) is the data controller responsible for your personal information. Contact us at info@icertification.com.my with any privacy questions.
2. What Data We Collect
We collect the following categories of personal data:
- Account information: name, email address, phone number, password (hashed).
- Registration data: programme selections, school or institution affiliation.
- Payment data: transaction reference numbers (we do not store full card details).
- Communications: messages submitted via our contact form.
- Technical data: IP address, browser type, pages visited, and cookies (where applicable).
3. How We Use Your Data
We use your data to:
- Create and manage your account.
- Process programme registrations and payments.
- Issue certificates and send event-related communications.
- Respond to enquiries submitted via our contact form.
- Send service updates (you can opt out of marketing at any time).
- Improve our website and services through anonymised analytics.
- Comply with legal obligations.
4. Legal Basis for Processing
Under the PDPA and applicable data-protection principles, we process data on the following bases:
- Contract: to fulfil our obligations when you register for a programme.
- Legitimate interests: to operate and improve our services.
- Legal obligation: to comply with Malaysian law.
- Consent: for optional marketing communications.
5. Sharing Your Data
We do not sell your personal data. We may share it with:
- Service providers: payment processors, email delivery services, and hosting providers who process data on our behalf.
- Authorities: when required to do so by law or court order.
- Event partners: only with your consent, where a programme is co-hosted with another organisation.
6. Cookies
Our website uses essential session cookies required for login and security (CSRF protection). We do not use advertising or tracking cookies without your consent. You can disable cookies in your browser settings, but some features may not work correctly.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Registration records are kept for a minimum of 3 years for legal and audit purposes. You may request deletion of your account at any time (see Your Rights below).
8. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction — including encrypted HTTPS connections, hashed passwords, and access controls.
9. Your Rights
Under the PDPA, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data (subject to legal retention requirements).
- Withdraw consent for marketing communications at any time.
- Object to processing based on legitimate interests.
To exercise any of these rights, contact us at info@icertification.com.my. We will respond within 30 days.
10. Children's Privacy
Our services are directed at individuals 18 and over. Participants under 18 must register with parental or guardian consent. We do not knowingly collect data from children under 13 without verifiable parental consent.
11. Third-Party Links
Our website may contain links to third-party sites. We are not responsible for their privacy practices. We encourage you to review the privacy policy of every site you visit.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or by email. Continued use of our services after the effective date constitutes acceptance of the updated policy.
13. Contact Us
For any privacy-related questions or requests: