1. Introduction

AI Agency Sdn Bhd ("AI Agency™," "we," "us," or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Services.

This Policy is in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection regulations. By using our Services, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you voluntarily provide to us, including:

•       Full name and contact details (email address, phone number)

•       Payment information (processed securely by third-party payment providers)

•       Account login credentials

•       Profile information and business details

•       Communications, feedback, and survey responses

2.2 Information Collected Automatically

When you access our website or platform, we may automatically collect:

•       IP address and device identifiers

•       Browser type, version, and operating system

•       Pages visited, time spent, and clickstream data

•       Cookies and similar tracking technologies

•       Referral URLs and traffic sources

2.3 Information from Third Parties

We may receive information about you from third-party sources such as social media platforms, payment processors, and marketing partners, consistent with their respective privacy policies.

3. How We Use Your Information

We use the information we collect for the following purposes:

•       To create and manage your account and deliver the Services

•       To process payments and send transaction confirmations

•       To communicate with you about your enrolment, updates, and support

•       To send marketing communications, promotions, and course updates (with your consent)

•       To personalise your learning experience and improve our platform

•       To analyse usage trends and conduct research to enhance our Services

•       To comply with legal obligations and enforce our Terms of Use

•       To prevent fraud, abuse, and unauthorised access to our platform

4. Legal Basis for Processing (PDPA Malaysia)

Under the Personal Data Protection Act 2010, we process your personal data based on:

•       Your consent, provided at the point of data collection

•       The performance of a contract, where processing is necessary to deliver the Services you have purchased

•       Legitimate interests, where processing is reasonably necessary for our business operations

•       Compliance with a legal obligation

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device. We use:

•       Essential cookies: Required for the platform to function correctly

•       Analytics cookies: Help us understand how visitors interact with our site (e.g., Google Analytics)

•       Marketing cookies: Used to deliver relevant advertisements and track campaign performance

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our Services.

6. Sharing of Your Information

We do not sell your personal data to third parties. We may share your information with:

•       Service providers: Third-party vendors who assist us in delivering our Services (e.g., payment processors, email platforms, hosting providers, CRM tools such as GoHighLevel)

•       Business partners: Affiliated entities for joint promotional activities, with your consent

•       Legal authorities: Where required by law, court order, or to protect the rights and safety of our users or the public

•       Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction

All third parties are required to handle your personal data in compliance with applicable data protection laws.

7. International Data Transfers

As we serve a global student base and use international third-party service providers, your personal data may be transferred to and processed in countries outside of Malaysia. We take appropriate steps to ensure such transfers comply with applicable data protection requirements and that your data remains protected.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including providing the Services, resolving disputes, and complying with legal obligations. When your data is no longer required, we will securely delete or anonymise it.

Account data is generally retained for the duration of your active account plus a period of up to 7 years for legal and tax compliance purposes.

9. Your Rights

Under the PDPA and other applicable laws, you have the following rights regarding your personal data:

•       Right of Access: Request a copy of the personal data we hold about you

•       Right of Correction: Request correction of inaccurate or incomplete data

•       Right to Withdraw Consent: Withdraw your consent for data processing at any time, where consent is the legal basis

•       Right to Opt-Out of Marketing: Unsubscribe from marketing communications at any time by clicking 'unsubscribe' in any email or contacting us directly

•       Right to Complaint: Lodge a complaint with the relevant data protection authority

To exercise any of these rights, please contact us at legal@aiagency.com. We will respond to your request within 21 days.

10. Data Security

We implement industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. These measures include SSL/TLS encryption, secure server infrastructure, access controls, and regular security reviews.

While we take reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

11. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18 without verified parental consent, we will take steps to delete that information promptly.

12. Third-Party Links

Our website may contain links to third-party websites, social media platforms, and external tools. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party services you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the revised policy on our website with an updated effective date, and where appropriate, by email. Your continued use of the Services after the changes take effect constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer at:

AI Agency Sdn Bhd

Email: legal@aiagency.com

Website: www.aiagency.com

© 2026 AI Agency™. All rights reserved.