Personal Data Protection Policy
GSA is committed to complying with the Malaysian Personal Data Protection Act (PDPA) 2010, ensuring the privacy and protection of personal data processed by our centre for students, parents, staff, and visitors to our website and facilities. This Privacy Policy outlines our commitment to data privacy and informs you of our practices regarding the collection, use, and protection of personal data.
What is Personal Data ?
“Personal Data” refers to information, whether true or not, about an individual who can be identified from that data, or from that data and other information accessible to an organization. Common examples include names, NRIC numbers, contact numbers, and more.
Enquiries
Personal data may be collected directly from individuals or through the following sources:
- Enquiry Forms
- Application or Registration Forms
- Request Forms for various services
- Previous qualification documents and certificates
- Maintenance of student records
- School communications
- Processing applications for enrolment
- Third parties such as former educational institutions, law enforcement agencies, and other government bodies
- Publicly accessible information or data collected through GSA’s website cookies
- Personal Data Processed by the Centre
- Personal data processed by our Centreincludes, but is not limited to:
- Identification Number (NRIC)
- Passport number
- Address
- Contact numbers
- Personal email address
- Photos and images
- Nationality
- Student’s gender
- Date of birth
- Education qualifications
- Parents’ or guardians’ marital status
- Emergency contact details
- Billing and payment information
- Employment or occupation details
This data is essential for engaging with the Centre. Failure to provide necessary personal data may hinder our ability to proceed with your requests.
Some personal data collected may be considered ‘sensitive personal data’ under the PDPA, including but not limited to:
- Race
- Religion
- Health records
- Misconduct and disciplinary records
- Criminal offence records
- Family court orders
Sensitive personal data is handled with extra care and is used only for specific purposes. It will not be disclosed without consent unless necessary.
The purposes for collecting and processing personal data include, but are not limited to:
- Processing admission applications
- Managing and responding to enquiries
- Maintaining personal, academic, and non-academic records of students
- Monitoring fee and other payments
- Communicating important announcements to students
- Contacting students’ emergency contacts
- Disclosure of Personal Data
GSA maintains the confidentiality of personal data. However, personal data may be disclosed, with written consent, to third parties such as:
- The Ministry of Education or other relevant government bodies
- Professional or accreditation bodies
- Other institutions or companies affiliated with GSA
- This policy ensures that your personal data is handled responsibly and in accordance with the law, safeguarding your privacy and trust in GSA.
