Privacy Policy

1. Our Commitment to Privacy

Northgild takes the privacy of participants and website visitors seriously. We collect only the information we need to operate our programmes, respond to enquiries, and improve the experience on our website. We do not sell personal data and we do not share it with third parties for marketing purposes.

This policy has been written to be clear and accessible. If any part is unclear, please contact us at [email protected] and we will respond within five business days.

2. Personal Data We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, and telephone number provided through our enquiry form or enrolment process.
• Programme participation data: Information related to which programmes you enrol in, attendance records, and completion status.
• Website usage data: Pages visited, time on page, and general browser information collected via analytics tools, where consent is given.
• Payment information: Where payment is processed, this is handled by a third-party payment processor. We do not store card details.

Legal basis (PDPA 2010): We process personal data on the basis of consent (for marketing communications and analytics), contractual necessity (for programme delivery), and legitimate interests (for enquiry management and internal records).

Retention: Enquiry data is retained for 12 months. Programme enrolment records are retained for 3 years after programme completion for administrative purposes.

3. How We Use Your Personal Data

• To respond to your enquiries and provide information about our programmes
• To confirm enrolment and communicate programme logistics
• To issue certificates of attendance where applicable
• To send programme-related updates with your consent
• To analyse aggregate (anonymised) website usage to improve our site
• To comply with legal obligations under Malaysian law

We do not use your personal data for automated decision-making or profiling.

4. Data Sharing and Third Parties

We do not sell or rent personal data. We may share data with trusted service providers only as necessary to operate:

• Website hosting and email service providers — for site operation and communication
• Analytics tools — where cookie consent is given (see Cookie Policy)
• Payment processors — where applicable, subject to their own privacy policies

All third-party providers used by Northgild are required to handle personal data in accordance with applicable law. We do not transfer personal data outside Malaysia without appropriate safeguards.

5. Data Protection Measures

• Data transmitted via our website uses TLS encryption (HTTPS)
• Access to personal data is limited to staff who require it for their role
• We review our data handling practices periodically
• In the event of a data breach affecting your personal information, we will notify you as required under Malaysian law

6. Cookies

We use cookies to remember your preferences and, where consent is given, to analyse site usage. For full details of how we use cookies and how to manage your preferences, please see our Cookie Policy.

7. Your Rights Under the PDPA 2010

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to correction: Request that inaccurate or incomplete data be corrected
• Right to withdraw consent: Withdraw consent for processing where consent is the basis
• Right to prevent processing for marketing: Opt out of direct marketing communications at any time
• Right to complain: Lodge a complaint with the Department of Personal Data Protection Malaysia (www.pdp.gov.my)

To exercise any of these rights, please write to [email protected]. We will acknowledge your request within 3 business days and respond fully within 21 days.

8. Third-Party Links

Our website may contain links to external sites. Northgild is not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external sites you visit.

9. Children's Privacy

Our programmes and website are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have done so, we will delete that data promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email to enrolled participants and via a notice on our website. The "Last Updated" date at the top of this page will reflect the most recent revision. Continued use of our website or services after changes constitutes acceptance of the updated policy.