Privacy Policy

1. Who we are

This website, mystudy.com.my, is operated by MYSTUDY Education Consulting Sdn Bhd ("MyStudy", "we", "us"), an education consultancy established in Malaysia in 2004. We are the data user in respect of the personal data described here, as that term is used in the Personal Data Protection Act 2010 ("PDPA").

Registered office: 3-1-3, Cantonment Exchange, Jalan Sultan Azlan Shah (Jalan Ipoh), 51200 Kuala Lumpur, Malaysia.

2. What we collect

We collect different things depending on how far along you are. Browsing the site anonymously requires nothing from you.

2.1 When you book a consultation

Your name, email address, phone number, current education level, the destinations you are interested in, your intended intake or timeline, your preferred consultation format, how you heard about us, and anything you write in the enquiry box.

2.2 When you submit an application

Considerably more, because universities require it. This includes your full name, date of birth, gender, nationality, country of birth, home address, email and phone number, your secondary school and dates of attendance, your qualifications and results, the courses you are applying for, and your preferences for accommodation and airport pickup.

It also includes documents you upload: a copy of your NRIC or passport, academic certificates and transcripts, English proficiency results, and a CV where relevant. Identity documents are sensitive. We ask for them only because the institutions and immigration authorities you are applying to require them, and we do not use them for anything else.

2.3 Automatically, when you use the site

Your IP address, browser and device type, the pages you view, and the site that referred you. Analytics data of this kind is only collected if you accept analytics cookies. See our Cookie Policy.

2.4 What we do not collect

We do not ask for payment card details, bank account numbers or online banking credentials through this website, and we never will. Tuition and fees are paid directly to the institution or through arrangements agreed with you separately. If a website or message claiming to be MyStudy asks you to enter card or banking details, do not proceed, and please tell us.

3. Why we collect it

Under the PDPA we must tell you the purposes. They are:

• To advise you. Matching your grades, budget and career goals to suitable courses and institutions.
• To apply on your behalf. Preparing and submitting applications to universities, colleges and language schools, and following up on their decisions.
• To support your visa and travel. Assisting with student visa applications, accommodation and airport pickup where you have asked us to.
• To communicate with you. Responding to enquiries, confirming appointments, and sending you updates about your application.
• To invite you to events such as education fairs and information sessions, where you have agreed to hear from us.
• To improve the website, using aggregated analytics, if you have accepted analytics cookies.
• To meet legal and regulatory obligations in Malaysia and in the destination country.

Supplying your data is voluntary. But if you decline to give us the information a university or immigration authority requires, we will not be able to progress your application.

4. Who we share it with

We do not sell your personal data. We share it in these situations, and no others:

5. Sending your data overseas

Studying abroad means your data travels abroad. That is unavoidable, and you should understand where it goes.

When we submit an application to a university in Ireland, Spain, France, Canada, the United Kingdom, Australia or elsewhere, your data is transferred to that country and is then handled under that country's law and the institution's own privacy policy.

We also use service providers who store data outside Malaysia:

• Vercel hosts this website.
• Google (Apps Script and Google Sheets) receives consultation and application form submissions and stores them for our counsellors.
• Cloudinary stores the documents you upload with your application.
• Supabase stores the website's own content, such as articles and event listings, and our staff logins.
• Google Analytics supplies website usage statistics, only if you accept analytics cookies.
• Google reCAPTCHA protects our forms from automated abuse.

These providers act on our instructions and are not permitted to use your data for their own purposes.

6. How long we keep it

We keep your data only as long as we need it:

• Enquiries that do not become applications are kept up to 2 years from your last contact with us, in case you come back to us.
• Applications and supporting documents are kept up to 7 years after your programme ends or your application is withdrawn, so that we can respond to questions from institutions, immigration authorities or auditors.
• Records we are legally required to keep are held for the period the law requires.

After that we delete the data or render it anonymous. You can ask us to delete it earlier: see section 8.

7. How we protect it

This site is served over HTTPS and our forms are protected against automated abuse. Access to application records is limited to MyStudy counsellors and administrative staff who need it to do their job, and staff accounts are individually credentialled.

No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that is likely to cause you serious harm, we will tell you and the relevant authority.

8. Your rights under the PDPA

You have the right to:

• Access the personal data we hold about you, and be told how it is being used.
• Correct data that is inaccurate, incomplete or out of date.
• Withdraw your consent to our processing, at any time.
• Limit processing, including telling us to stop sending you marketing or event invitations.
• Ask us to delete data we no longer need.

To exercise any of these, email askme@mystudy.my. We will respond within 21 days, as the PDPA requires. We may ask you to verify your identity first, so that nobody else can obtain your records.

Withdrawing consent partway through an application will usually mean we cannot continue acting for you, and may mean an institution cannot process your application. We will tell you clearly if that is the case before acting on your request.

9. Students under 18

Many of our students are still in secondary school. If you are under 18, please go through this policy with a parent or guardian before submitting an application, and have them confirm they are happy for us to act for you. Where we are told an applicant is a minor, we will deal with the parent or guardian on matters of consent.

10. Cookies and analytics

We use a small number of cookies and similar technologies. Analytics cookies are not set unless you accept them. The full list, and how to change your mind, is in our Cookie Policy.

11. Changes to this policy

We will update this page when our practices change. The "last updated" date at the top always reflects the current version. If a change materially affects how we use data you have already given us, we will tell you directly rather than relying on you noticing the date.

12. Contact us

Related: PDPA Notice (Notis PDPA) · Cookie Policy · Terms of Use · Disclaimer