Key definitions
This section defines terms used in the policy to ensure clarity about data types, actors and operations. Definitions are written in plain professional language and reflect typical usage in data protection practice.
- Personal data means any information relating to an identified or identifiable individual, including contact details, profile information, course activity and payment details used to provide the service.
- Processing refers to any operation performed on personal data, such as collection, storage, retrieval, use, disclosure, anonymization and deletion necessary to run the platform and provide educational services.
- User means any individual who accesses or registers for BelajarHub services, including learners, instructors, mentors and enterprise contacts.
- Service refers to the BelajarHub platform available at BelajarHub.pro, including course delivery, assessments, coaching, and related account management features.
- Cookies are small text files placed on a device to support functionality, analytics and personalization. We use cookies to maintain sessions and to analyze usage patterns to improve offerings.
Data collection
We collect data necessary to deliver education services, manage accounts and comply with legal obligations. Collection is limited to information required for those purposes and retained only for a practical period.
Information you provide directly
When you create an account, enroll in courses, communicate with us, or purchase services, we collect data you provide to enable those activities and to personalize your learning experience.
- Account registration details: name, email address, chosen password and contact phone number when supplied.
- Profile and background: education history, job title, skills and career interests used to recommend courses.
- Course interactions: enrollment selections, submitted assignments, quiz results, feedback and certifications.
- Payment and billing: billing name, invoicing address and payment instrument details processed via our payment processors.
- Communications: messages you send to instructors or customer support, including attachments and transcripts.
- Optional professional services data: CV/resume and collection materials when submitted for coaching or job preparation services.
Automatically collected information
We automatically collect technical and usage data when you interact with the platform to manage service performance, security, and product improvement.
- Device and browser information such as device type, operating system, browser version and language preferences.
- Usage metrics including pages visited, time on page, course progress and feature usage events.
- Log data such as IP address, timestamps, and server logs used for diagnostics and security monitoring.
- Analytics identifiers stored in cookies or local storage used to aggregate usage patterns and improve content relevance.
- Performance data used to detect and mitigate errors, optimize load times and maintain platform stability.
- Location data inferred from IP address when necessary for fraud prevention and regional compliance checks.
Data received from third parties
We may receive data about users from third parties that support our services, for example identity verification providers, analytics vendors, or enterprise partners who manage accounts on behalf of learners.
- Identity and verification providers supplying confirmation of identity as required for certain professional programs.
- Payment processors and business institutions providing transaction confirmations and billing validation.
- Enterprise administrators furnishing employee enrollment data for corporate learning programs.
Purposes of processing
We process personal data for specific business and operational purposes necessary to provide, maintain and improve the platform as well as to meet legal obligations.
- To provide and administer user accounts, courses and certification services.
- To process transactions, issue invoices and manage billing relationships.
- To personalize course recommendations, learning paths and communications based on interests and progress.
- To communicate updates, support requests and important account or service notices.
- To analyze platform performance, detect abuse, and improve service features using aggregated analytics.
- To comply with legal obligations, respond to lawful requests and enforce our terms of service.
- To facilitate professional services such as coaching, mentorship and collection review when you opt in.
- To support research and development for educational content quality while minimizing identifiability in analytics outputs.
Legal bases for processing (where applicable)
Where required by law, we identify lawful bases for processing personal data. Depending on the context, processing may rely on contract performance, legitimate interests, consent or legal obligations.
- Performance of a contract: processing necessary to deliver the services you request, such as course enrollment and certificate issuance.
- Legitimate interests: processing for fraud prevention, platform security, analytics and service improvement, balanced against user privacy rights.
- Consent: where specific processing (e.g., marketing communications or optional profiling) requires explicit consent, we will request and record that consent.
- Legal obligation: processing necessary to comply with statutory or regulatory duties, such as tax or law enforcement requests.
Rights under GDPR-style frameworks
Although BelajarHub is based in Malaysia, we respect GDPR-style rights for users in relevant jurisdictions and provide clear mechanisms to exercise those rights where applicable.
- Right of access: you may request a copy of personal data we hold about you.
- Right to rectification: you may request corrections to inaccurate or incomplete data.
- Right to erasure: you may request deletion of personal data where there is no overriding legal or contractual reason to retain it.
- Right to restrict processing: you may ask us to limit how your data is processed in certain circumstances.
- Right to data portability: where technically feasible, you may request a machine-readable copy of certain personal data.
- Right to object: you may object to processing based on legitimate interests or direct marketing; we will assess and respond in line with applicable law.
Cookies and tracking
We use cookies and similar technologies to support core functionality, measure performance and deliver relevant content. The table below summarizes categories and management options.
Types include essential cookies for authentication and session management, analytics cookies for usage measurement, and preferences cookies for saving language or display settings. Third-party cookies may be used by analytics and advertising partners.
Essential cookies: required for login and course playback. Analytics cookies: used to collect aggregated usage statistics. Preference cookies: store user interface settings. Marketing cookies: used only with consent to support third-party promotions.
You can manage cookie settings via your browser or device settings and, where offered, through the cookie preference control on our website. Disabling non-essential cookies may affect certain features.
Detailed cookie policy
How we share data
We share data with trusted third parties that provide services on our behalf or where required by law. Sharing is limited to what is necessary and governed by contractual safeguards.
- Service providers: hosting, email delivery, payment processing and analytics vendors who act on our instructions.
- Enterprise customers: when you enroll through an employer-sponsored program, basic enrollment and progress data may be shared with that organisation.
- Legal and regulatory authorities: in response to lawful requests, subpoenas or compliance obligations.
- Professional partners: mentors, instructors or assessment bodies involved in delivering specific services when you opt into those programs.
- Affiliates and corporate restructuring: in the event of a merger, acquisition or reorganization, relevant data may be transferred subject to confidentiality protections.
- Aggregated and anonymized data: statistical outputs that do not identify individuals may be shared for research or reporting.
International data transfers
BelajarHub may transfer personal data to service providers and partners located in other countries to operate the platform and support services. Transfers are subject to appropriate safeguards and legal requirements to maintain data protection standards.
We rely on contractual safeguards such as standard contractual clauses, and where available, on transfers to jurisdictions with adequate protections. We also implement technical and organizational measures to reduce risk in cross-border processing.
Data retention
We retain personal data only as long as necessary to provide services, comply with legal obligations, resolve disputes and enforce our agreements. Retention periods vary by data type and processing purpose.
Account information is retained for the duration of the active account and for a reasonable period after deactivation to allow recovery, comply with business recordkeeping and to resolve disputes.
Communications and support messages are retained for operational purposes and to maintain service quality, typically for a limited period unless longer retention is required for legal reasons.
System logs and security-related records are retained for diagnostic, security and fraud detection purposes in line with internal policies and applicable law.
When personal data is no longer required, we delete or anonymize it in a manner consistent with operational needs and legal obligations. Deletion schedules are documented and reviewed periodically.
Security of personal data
We implement technical, administrative and physical controls designed to protect personal data from unauthorized access, loss and misuse. Security practices are periodically reviewed and aligned with recognized standards to maintain a reliable operational posture.
- Data encryption in transit and at rest for sensitive records and credentials.
- Access controls and role-based permissions to limit staff access to personal data on a need-to-know basis.
- Regular security assessments, vulnerability scanning and incident response procedures.
User rights and how to exercise them
Users can exercise rights over their data by contacting our privacy team. We evaluate requests in line with applicable law and may require verification to protect account security.
- Right to access, obtain a copy of and receive information about the processing of your personal data.
- Right to correction or deletion of inaccurate or unnecessary personal data, subject to legal and contractual limits.
- Right to restrict processing, object to certain uses, and request portable copies of eligible personal data.
- Right to restrict processing: You can request restriction of processing where accuracy is contested or processing is unlawful and you prefer restriction rather than erasure.
- Right to data portability: You may request a structured, commonly used, machine-readable copy of personal data you provided to BelajarHub to transfer to another service provider.
- Right to withdraw consent: Where processing is based on consent, you may withdraw consent for future processing without affecting the lawfulness of prior processing.
- Right to object: You can object to processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests; BelajarHub will assess the objection in line with applicable law.
- Right to lodge a complaint: If you consider our handling of personal data to be non-compliant with applicable law, you may lodge a complaint with the relevant supervisory authority in Malaysia.
How to exercise your privacy rights
Requests to exercise privacy rights should be submitted via mail or email to the contact details listed below. To process requests promptly and securely we may ask for proof of identity and additional details to locate the relevant records. Requests are only processed for the individual making the request or an authorized representative with appropriate documentation.
We aim to respond to verified requests within 30 days of receipt. Complex requests or those requiring coordination with third parties may require additional time; we will notify you of any extended timeframe and the reason for the delay.
Marketing and communications
BelajarHub uses contact information to send course updates, recommendations and administrative notices where you have provided consent or where communications are necessary for service delivery. Marketing communications include promotional offers, event invitations and new course announcements. You control marketing preferences in your account settings and may opt out at any time.
To stop receiving promotional messages, use the unsubscribe link in any marketing email, update your communication preferences in your account, or contact our privacy team at [email protected]. Processing of unsubscribe requests may take up to 5 business days to take full effect.
Children and age requirements
BelajarHub does not knowingly collect personal data from children under 16 without verified parental consent. Our services are designed for learners aged 16 and above. If we become aware that we have collected personal data from a child under the age of 16 without consent, we will take steps to delete that information in accordance with applicable law.
Third-party links and services
BelajarHub may link to third-party sites, embed third-party content, and use third-party service providers for payments, analytics and hosting. These third parties have their own privacy practices; we recommend reviewing their privacy policies. BelajarHub is not responsible for third-party processing practices or content hosted outside BelajarHub.pro.
Policy updates
We review and update this privacy policy periodically to reflect legal, technical and operational changes. Material changes will be communicated by posting an updated policy on BelajarHub.pro and, where appropriate, by direct notification to users. Continued use of the service after changes indicates acceptance of the revised policy.