{"id":5044,"date":"2026-06-10T16:29:21","date_gmt":"2026-06-10T16:29:21","guid":{"rendered":"https:\/\/glacademy.edu.my\/privacy-policy\/"},"modified":"2026-06-10T16:31:31","modified_gmt":"2026-06-10T16:31:31","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/glacademy.edu.my\/zh-hans\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<!--\nSEO Title: Privacy Policy & PDPA Notice | GL Academy Kuala Lumpur\nMeta Description: How Global Leaders Academy (GL Education Group Sdn Bhd) collects, uses, discloses and protects your personal data, in line with Malaysia's Personal Data Protection Act 2010 (as amended). Your PDPA rights explained.\nFocus Keyword: GL Academy privacy policy PDPA\nSlug: privacy-policy\n-->\n<div class=\"gll\">\n  <section class=\"gll-hero\">\n    <div class=\"gll-hero__in\">\n      <span class=\"gll-eyebrow\">Legal \u00b7 PDPA<\/span>\n      <h1>Privacy Policy &amp; PDPA Notice<\/h1>\n      <p class=\"gll-hero__sub\">Global Leaders Academy \u00b7 GL Education Group Sdn Bhd (202401016011)<br>E-10-20 Plaza Mont Kiara, No. 2 Jalan Kiara, 50480 Kuala Lumpur, Malaysia<\/p>\n      <p class=\"gll-hero__meta\">This notice is issued in Bahasa Malaysia and English pursuant to Section 7 of the PDPA. This version supersedes all previous versions.<\/p>\n      <a class=\"gll-dl\" href=\"https:\/\/glacademy.edu.my\/wp-content\/uploads\/2026\/07\/GL-Academy-Privacy-Policy-PDPA.pdf\" target=\"_blank\" rel=\"noopener\">\n        <svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4\"\/><polyline points=\"7 10 12 15 17 10\"\/><line x1=\"12\" y1=\"15\" x2=\"12\" y2=\"3\"\/><\/svg>\n        Download PDF\n      <\/a>\n    <\/div>\n  <\/section>\n\n  <div class=\"gll-wrap gll-doc\">\n    <div class=\"gll-toc\">\n      <h2>Contents<\/h2>\n      <ol>\n        <li><a href=\"#p1\">Who we are<\/a><\/li>\n        <li><a href=\"#p2\">Personal data we collect<\/a><\/li>\n        <li><a href=\"#p3\">How we collect it<\/a><\/li>\n        <li><a href=\"#p4\">Why we use it<\/a><\/li>\n        <li><a href=\"#p5\">Consent &amp; legal basis<\/a><\/li>\n        <li><a href=\"#p6\">Disclosure to third parties<\/a><\/li>\n        <li><a href=\"#p7\">Cross-border transfers<\/a><\/li>\n        <li><a href=\"#p8\">Data retention<\/a><\/li>\n        <li><a href=\"#p9\">Security safeguards<\/a><\/li>\n        <li><a href=\"#p10\">Your rights under the PDPA<\/a><\/li>\n        <li><a href=\"#p11\">Marketing communications<\/a><\/li>\n        <li><a href=\"#p12\">Cookies &amp; website analytics<\/a><\/li>\n        <li><a href=\"#p13\">Children &amp; minors<\/a><\/li>\n        <li><a href=\"#p14\">Data breaches<\/a><\/li>\n        <li><a href=\"#p15\">Changes to this notice<\/a><\/li>\n        <li><a href=\"#p16\">Contact &amp; Data Protection Officer<\/a><\/li>\n      <\/ol>\n    <\/div>\n\n    <h2 id=\"p1\">1. Who we are<\/h2>\n    <p>This Privacy Policy and Personal Data Protection Notice (&ldquo;Notice&rdquo;) explains how GL Education Group Sdn Bhd (Company No. 202401016011), operating as Global Leaders Academy (&ldquo;GL Academy&rdquo;, &ldquo;we&rdquo;, &ldquo;us&rdquo; or &ldquo;our&rdquo;), collects, uses, discloses and protects your personal data. We are the data controller (data user) responsible for your personal data and are committed to handling it in accordance with the Personal Data Protection Act 2010 of Malaysia and its subsidiary regulations and amendments (collectively, the &ldquo;PDPA&rdquo;).<\/p>\n    <p>This Notice applies to students, prospective students, parents and guardians, website visitors, enquirers, and other individuals whose personal data we process.<\/p>\n\n    <h2 id=\"p2\">2. Personal data we collect<\/h2>\n    <p>Depending on your relationship with us, we may collect and process the following categories of personal data:<\/p>\n    <ul>\n      <li><strong>Identity &amp; contact data<\/strong> \u2014 full name, date of birth, gender, nationality, NRIC or passport number, photograph, address, telephone number and email address.<\/li>\n      <li><strong>Enrolment &amp; academic data<\/strong> \u2014 programme(s) enrolled, placement and assessment results, attendance, academic records, certificates and progress reports.<\/li>\n      <li><strong>Financial data<\/strong> \u2014 fees paid, payment method and transaction records. We do not store full payment-card numbers; card payments are processed by our payment service providers.<\/li>\n      <li><strong>Immigration data<\/strong> \u2014 passport details, visa and Student Pass information, and related documents, where you are an international student.<\/li>\n      <li><strong>Parent\/guardian data<\/strong> \u2014 the contact and identity details of a parent or guardian, where the student is a minor.<\/li>\n      <li><strong>Website &amp; technical data<\/strong> \u2014 IP address, browser type, device information, and pages visited (see Section 12 on cookies).<\/li>\n      <li><strong>Sensitive personal data<\/strong> \u2014 where relevant and with your explicit consent, health or medical information (e.g. allergies or conditions affecting participation). Under the PDPA as amended, sensitive personal data includes biometric data; we do not collect biometric data unless separately notified and consented.<\/li>\n    <\/ul>\n\n    <h2 id=\"p3\">3. How we collect it<\/h2>\n    <p>We collect personal data directly from you when you enquire, register, enrol, attend classes, sit assessments, make payments, apply for a Student Pass, or communicate with us; from a parent or guardian where the student is a minor; automatically when you use our website; and from third parties such as agents, partner institutions and government authorities where relevant to your enrolment.<\/p>\n\n    <h2 id=\"p4\">4. Why we use it<\/h2>\n    <p>We process personal data for the following purposes:<\/p>\n    <ul>\n      <li>To assess applications, administer enrolment, placement, classes and student services;<\/li>\n      <li>To maintain academic, attendance and assessment records and issue certificates;<\/li>\n      <li>To process fees and manage financial administration and taxation (including SST);<\/li>\n      <li>To communicate with students, parents and guardians about classes, schedules and important notices;<\/li>\n      <li>To sponsor and administer Student Pass applications and to comply with immigration reporting obligations;<\/li>\n      <li>To comply with our legal, regulatory and reporting obligations;<\/li>\n      <li>To ensure health, safety and security on our premises;<\/li>\n      <li>To send marketing and promotional communications, where you have consented (see Section 11); and<\/li>\n      <li>To operate, maintain and improve our website.<\/li>\n    <\/ul>\n\n    <h2 id=\"p5\">5. Consent and legal basis<\/h2>\n    <p>By providing your personal data and by enrolling with us, you consent to our processing of your personal data for the purposes set out in this Notice. Where we process sensitive personal data, we rely on your explicit consent. Where the student is a minor (below 18), consent is provided by the parent or legal guardian. Providing certain personal data is necessary for us to process your enrolment; if you do not provide it, we may be unable to enrol you or deliver our services.<\/p>\n\n    <h2 id=\"p6\">6. Disclosure to third parties<\/h2>\n    <p>We may disclose your personal data, on a need-to-know basis and subject to appropriate safeguards, to: government and regulatory authorities (including the Immigration Department of Malaysia, EMGS, the Ministry of Education, and the Royal Malaysian Customs Department); our service providers (such as IT, hosting, payment, and communications providers) acting as data processors on our behalf; partner institutions, examination boards and universities relevant to your programme or pathway; our professional advisers (auditors, lawyers); and any party to whom we are required to disclose by law. We do not sell your personal data, and we do not transfer it to unrelated third parties for their own commercial purposes without your consent.<\/p>\n\n    <h2 id=\"p7\">7. Cross-border transfers<\/h2>\n    <p>Some of our service providers or partner institutions may be located outside Malaysia. Where we transfer personal data outside Malaysia, we take reasonable steps to ensure the recipient affords a comparable level of protection and that the transfer complies with the PDPA and the Commissioner&rsquo;s cross-border transfer guidance.<\/p>\n\n    <h2 id=\"p8\">8. Data retention<\/h2>\n    <p>We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, tax, immigration and regulatory requirements. Financial and tax records are generally retained for at least seven (7) years in accordance with Malaysian law. When personal data is no longer required, we will securely destroy or permanently anonymise it.<\/p>\n\n    <h2 id=\"p9\">9. Security safeguards<\/h2>\n    <p>We apply reasonable physical, technical and organisational safeguards to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction \u2014 including access controls, secure storage, encryption in transit where appropriate, and staff confidentiality obligations. Where we engage data processors, we require them to implement appropriate security measures.<\/p>\n\n    <h2 id=\"p10\">10. Your rights under the PDPA<\/h2>\n    <p>Subject to the PDPA, you have the right to:<\/p>\n    <ul>\n      <li><strong>Access<\/strong> the personal data we hold about you;<\/li>\n      <li><strong>Correct<\/strong> personal data that is inaccurate, incomplete or out of date;<\/li>\n      <li><strong>Withdraw consent<\/strong> to our processing of your personal data (which may affect our ability to provide services);<\/li>\n      <li><strong>Limit processing<\/strong> of your personal data for certain purposes, including direct marketing;<\/li>\n      <li><strong>Data portability<\/strong> \u2014 to request the transmission of your personal data to another data controller, where technically feasible and permitted under the PDPA as amended; and<\/li>\n      <li>Enquire about our disclosure practices.<\/li>\n    <\/ul>\n    <p>To exercise any of these rights, please contact us using the details in Section 16. We may require verification of your identity and may charge a prescribed fee for a data access request as permitted by the PDPA. We will respond within the timeframes required by law.<\/p>\n\n    <h2 id=\"p11\">11. Marketing communications<\/h2>\n    <p>Where you have consented, we may send you information about our programmes, events and offers by email, telephone, SMS or messaging apps. You may opt out of marketing at any time by using the unsubscribe link in our emails or by contacting us at <a href=\"mailto:hello@glacademy.edu.my\">hello@glacademy.edu.my<\/a>. Opting out of marketing does not affect service-related communications necessary for your enrolment.<\/p>\n\n    <h2 id=\"p12\">12. Cookies and website analytics<\/h2>\n    <p>Our website, www.glacademy.edu.my, uses cookies and similar technologies to enable core functionality, remember your language preference, maintain performance and caching, and understand how visitors use the site through analytics. Some cookies are strictly necessary for the site to work; others are used for analytics and, where applicable, marketing. You can control or delete cookies through your browser settings; disabling certain cookies may affect site functionality. Where required, we will seek your consent for non-essential cookies via a cookie notice on the website.<\/p>\n\n    <h2 id=\"p13\">13. Children and minors<\/h2>\n    <p>Where a student is below 18 years of age, we collect and process their personal data with the consent of, and in communication with, the parent or legal guardian, who is responsible for exercising the student&rsquo;s rights under this Notice on their behalf.<\/p>\n\n    <h2 id=\"p14\">14. Data breaches<\/h2>\n    <p>We maintain procedures to detect, assess and respond to personal data breaches. Where a breach occurs that meets the notification thresholds under the PDPA as amended, we will notify the Personal Data Protection Commissioner, and affected individuals where required, within the prescribed timeframes.<\/p>\n\n    <h2 id=\"p15\">15. Changes to this notice<\/h2>\n    <p>We may update this Notice from time to time to reflect changes in our practices or the law. The current version is always available on our website, and continued use of our services or website following any update constitutes acceptance of the revised Notice.<\/p>\n\n    <h2 id=\"p16\">16. Contact &amp; Data Protection Officer<\/h2>\n    <p>For any question about this Notice, to exercise your rights, or to reach our Data Protection Officer, please contact us:<\/p>\n    <div class=\"gll-contact\">\n      <h2>Data Protection Officer, GL Academy<\/h2>\n      <p>GL Education Group Sdn Bhd (202401016011)<\/p>\n      <p>E-10-20 Plaza Mont Kiara, No. 2 Jalan Kiara, 50480 Kuala Lumpur, Malaysia<\/p>\n      <p>+603-6461-2232 \u00b7 <a href=\"mailto:hello@glacademy.edu.my\">hello@glacademy.edu.my<\/a><\/p>\n    <\/div>\n    <p style=\"font-size:13px;color:#8A93A2;margin-top:22px\">In the event of any inconsistency between the English version of this Notice and any translation, the English version shall prevail.<\/p>\n    <a class=\"gll-back\" href=\"https:\/\/glacademy.edu.my\/\">&larr; Back to home<\/a>\n  <\/div>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-5044","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/glacademy.edu.my\/zh-hans\/wp-json\/wp\/v2\/pages\/5044","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/glacademy.edu.my\/zh-hans\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/glacademy.edu.my\/zh-hans\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/glacademy.edu.my\/zh-hans\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/glacademy.edu.my\/zh-hans\/wp-json\/wp\/v2\/comments?post=5044"}],"version-history":[{"count":1,"href":"https:\/\/glacademy.edu.my\/zh-hans\/wp-json\/wp\/v2\/pages\/5044\/revisions"}],"predecessor-version":[{"id":5051,"href":"https:\/\/glacademy.edu.my\/zh-hans\/wp-json\/wp\/v2\/pages\/5044\/revisions\/5051"}],"wp:attachment":[{"href":"https:\/\/glacademy.edu.my\/zh-hans\/wp-json\/wp\/v2\/media?parent=5044"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}