Privacy Policy

Bestari Tech ("we", "us", "our") is committed to handling your personal data with care. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights in relation to it.

This policy applies to personal data collected through our website at bestarimed.world, our enquiry and enrolment processes, and course administration. It applies to learners, prospective learners, and visitors to our site.

We operate under Malaysian law, including the Personal Data Protection Act 2010 (PDPA). If you have questions about this policy, contact us at [email protected].

We collect only the data needed to operate our courses and respond to enquiries. This includes:

• Contact information: name, email address, phone number (if provided)
• Enquiry and message content: the text of messages you send us
• Enrolment information: course selection, payment confirmation reference
• Course submissions: exercises and project files you submit for tutor review
• Website usage data: pages visited, browser type, approximate location (via analytics cookies, if consented)

We collect this data through our website contact form, email correspondence, and course submission processes. We do not collect sensitive personal data (such as health or financial records) as part of our standard operations.

Legal basis: We process contact and enquiry data on the basis of legitimate interest in responding to your query. We process enrolment and course data on the basis of contract performance. Analytics data is processed on the basis of your cookie consent.

Retention: Enquiry records are kept for 12 months. Enrolment and course records are kept for five years for administrative purposes. Analytics data is retained according to the third-party provider's standard policy.

We use your personal data to:

• Respond to enquiries about our courses
• Process and administer your course enrolment
• Deliver course material and tutor feedback
• Issue completion records at the end of a course
• Send you administrative communications related to your enrolment (such as schedule changes or course updates)
• Improve our website and course content using anonymised analytics

We do not use your data for automated decision-making or profiling. We do not sell your data to third parties. We do not send marketing emails without your explicit consent.

If you subscribe to updates from Bestari Tech, you may opt out at any time by contacting us at [email protected].

We share your personal data only in the following circumstances:

• Tutors and course administrators: your course submissions and contact details are accessible to the relevant tutor and our administrative team
• Analytics services: anonymised website usage data may be processed by a third-party analytics provider, subject to your cookie consent
• Legal requirements: we may disclose data if required by law or in response to a valid legal request

We do not share personal data with advertising networks, data brokers, or unrelated commercial partners.

We take appropriate technical and organisational measures to protect your personal data, including:

• Encrypted connections (HTTPS) across our website
• Access controls limiting who within our team can view personal data
• Secure storage of submitted course work and enrolment records
• Regular review of our data handling practices

In the event of a data breach that is likely to affect your rights and interests, we will notify you and the relevant authority within the timeframe required under applicable law.

Our website uses cookies. Essential cookies are required for the site to function; optional cookies (analytics, preferences) are only placed with your consent. You can manage your cookie preferences at any time via our Cookie Policy page.

Under the Malaysian Personal Data Protection Act 2010 and applicable data protection principles, you have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request that inaccurate data be corrected
• Withdrawal of consent: withdraw consent to processing where consent is the legal basis
• Limit processing: request that we limit how we use your data in certain circumstances
• Deletion: request erasure of your data where it is no longer needed for the purposes it was collected

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you are not satisfied with our response, you may contact the Department of Personal Data Protection Malaysia (JPDP).