Privacy Policy | Suria Code

1. Introduction

Suria Code ("we", "us", "our") respects the privacy of every person who visits this website or enrols in our programmes. This policy explains what personal data we collect, how we use it, and what rights you have in relation to it. It applies to all personal data processed in connection with our website at suriacod.biz and our AI development programmes delivered from Jalan Bukit Bintang 71, 55100 Kuala Lumpur.

We process personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). If you have questions about this policy or how your data is handled, contact us at [email protected].

2. Data We Collect

2.1 Information you provide directly

Name and email address (via contact or enquiry form)
Phone number, if provided voluntarily
Message content submitted through forms
Payment-related details (processed by our payment provider — we do not store card data)

2.2 Information collected automatically

Browser type, device type, and operating system
Pages visited and time spent on pages (via analytics)
IP address (anonymised where technically feasible)
Cookies as described in our Cookie Policy

2.3 Legal basis for processing

Consent: for marketing communications and non-essential cookies
Contract: to deliver programme services to enrolled learners
Legitimate interest: for website analytics and security monitoring

3. How We Use Your Data

To respond to enquiries and manage enrolment
To deliver programme materials, clinics, and project feedback
To send programme-related updates (not third-party marketing)
To improve website content and user experience through analytics
To comply with legal and regulatory requirements

We do not sell, rent, or share personal data with third parties for their marketing purposes. Data is shared only with service providers who assist us in operating the website and delivering programmes (hosting, analytics, email tools), and only under data processing agreements that require them to protect your data.

4. Data Retention

Enquiry form data: retained for 12 months from submission
Enrolment and payment records: retained for 7 years (Malaysian tax and company law requirement)
Analytics data: retained in aggregated, anonymised form indefinitely
Marketing consent records: retained until consent is withdrawn

5. Data Protection Measures

We take reasonable technical and organisational steps to protect personal data against unauthorised access, loss, or disclosure. These include SSL/TLS encryption for data in transit, access controls limiting which team members can view personal data, and regular reviews of our data handling practices. In the event of a data breach affecting your rights and freedoms, we will notify you and the relevant authority as required under the PDPA.

6. Cookies

Our website uses cookies for essential site functionality, analytics, and optional preference storage. You can manage cookie preferences on the cookie banner displayed when you first visit, or at any time via our Cookie Policy page. Essential cookies cannot be disabled as they are necessary for the site to function.

7. Your Rights

Under the Personal Data Protection Act 2010 and general privacy principles, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of data where we have no legal basis to retain it
Object to processing based on legitimate interests
Withdraw consent for marketing communications at any time
Request a copy of your data in a portable format

To exercise any of these rights, write to us at [email protected]. We aim to respond within 21 days. If you are not satisfied with our response, you may refer the matter to the Department of Personal Data Protection Malaysia (JPDP).

8. Third-Party Links

Our website may contain links to external websites or services. We are not responsible for the privacy practices of third-party sites. We recommend reading the privacy policy of any site you visit through links on our pages.

9. Children's Privacy

Our programmes are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data about a minor, contact us at [email protected] and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. For significant changes, we will notify enrolled learners by email. Continued use of our website after an update constitutes acceptance of the revised policy.

11. Contact

Data controller: Suria Code Sdn. Bhd.
Address: Jalan Bukit Bintang 71, 55100 Kuala Lumpur, Malaysia
Privacy enquiries: [email protected]
Phone: +60 19-462 8351