Privacy Policy
Last Updated
This Privacy Policy was last updated on 02 October 2026.
Identity and Role of the Data Controller
edufluxly acts as the data controller for the personal data collected through this website. We are responsible for determining the purposes and means of processing your personal data in accordance with the Personal Data Protection Act 2010 of Malaysia.
Scope of This Notice
This notice applies to all visitors to our website who interact with our informational content on insurance programming. It covers individuals located in Malaysia and elsewhere who access our non-commercial resources, including blog posts and contact forms.
Categories of Personal Data Collected
We obtain personal data directly from you when you submit the contact form or interact with the site. Categories include contact details such as name and email address provided voluntarily, technical data like IP address and browser type collected automatically, and any information you include in messages sent via the form. We do not collect data from third parties or public sources.
Purposes of Processing and Legal Bases
Data is processed to respond to enquiries submitted through the contact form under the legal basis of legitimate interests. Blog interactions are processed to improve site content based on consent where applicable. Technical data supports site functionality under legitimate interests. Each purpose is explained separately to ensure transparency about how information supports our informational services.
Requirement to Provide Data
Providing personal data through the contact form is optional. If you choose not to supply required fields, we may be unable to respond to your enquiry. No consequences arise beyond the inability to receive a reply.
Cookies and Similar Technologies
Our site uses cookies for basic functionality and analytics. Please refer to our separate Cookie Policy for detailed information on types, purposes, and management options.
Processors, Recipients and Legal Disclosures
We engage service providers such as hosting and email delivery platforms to process data on our behalf. These processors are bound by contractual obligations. We may disclose data if required by Malaysian law or regulatory authorities.
International Transfers
Some service providers may be located outside Malaysia. Transfers occur only with appropriate safeguards including contractual clauses that meet PDPA requirements.
Retention Periods
Contact form data is retained for up to two years after the last interaction unless a longer period is required by law. Technical logs are kept for twelve months. Criteria for retention include legal obligations and operational needs.
Security and Data Minimisation
We implement reasonable technical and organisational measures to protect personal data against unauthorised access. Data collection is limited to what is necessary for the stated purposes.
Your Data Subject Rights
Under the PDPA you may request access, correction, or deletion of your personal data. To exercise these rights contact us using the details on our Contacts page or via [email protected].
Withdrawing Consent and Objecting to Marketing
Where processing relies on consent you may withdraw it at any time by notifying us. You can object to any direct marketing by using the unsubscribe options or contacting 03-2058 3000.
Complaints to the Supervisory Authority
If you are dissatisfied with our response you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia.
Children and Age Restrictions
Our site is not directed at individuals under the age of eighteen. We do not knowingly collect personal data from minors.
Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that produces legal effects concerning individuals.
Changes to This Policy
We may update this Privacy Policy periodically. The effective date appears at the top of the page. Continued use of the site after changes indicates acceptance of the revised terms.