Privacy Policy

This policy explains how GrowCraft Education Sdn. Bhd. (Company Reg. No. 202301067412 (1521408-D)), operating the website growcraft.my, handles personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. Counselling students toward the right course requires trust, and trust starts with being clear about data.

1. The data we collect

Depending on how you use our services, we may collect:

• Identity and contact details — name, email address, phone number, and, where relevant to an application, IC or passport details;
• Academic records — examination results, transcripts and certificates you provide for counselling or applications;
• Financial context — household income band and funding preferences, collected only where needed for scholarship or bursary matching;
• Communication records — enquiry form submissions, emails and notes from counselling sessions;
• Technical data — browser type, device category and pages visited on this site, collected through cookies described in our Cookie Policy.

2. Why we collect it

We process personal data to respond to enquiries, run counselling sessions, prepare and submit course and scholarship applications on your instruction, assist with student visa files, and improve this website. We do not sell personal data, and we do not use student academic records for any purpose other than the guidance you asked for.

3. Who we share it with

Data is shared only where the service requires it: with the universities and colleges you apply to, with scholarship bodies assessing your eligibility, with visa authorities where you instruct us to assist with an application, and with IT providers who host our systems under confidentiality obligations. Each recipient receives only what its role requires.

4. Cross-border transfers

Applications to institutions in Australia, the United Kingdom, New Zealand or Ireland necessarily involve transferring your data to those countries. We transfer only the data the receiving institution requires for admission or visa purposes, and only after you have chosen to apply.

5. How long we keep it

Enquiry records are kept for 24 months from last contact. Application files are kept for the duration of your studies plus 24 months, in case of deferrals, transfers or scholarship renewals. You may request earlier deletion at any time, subject to legal retention obligations.

6. Security

Personal data is stored on access-controlled systems, with academic and financial documents encrypted at rest. Access within GrowCraft is limited to the counsellors working on your file. We review access rights quarterly.

7. Your rights under the PDPA

You may request access to your personal data, correction of inaccurate data, and withdrawal of consent to further processing. Requests can be sent to [email protected] or posted to our registered address. We respond within 21 days as required by the Act.

8. Minors

Many of our students are under 18. Where a student is a minor, we ask that enquiry forms be submitted by, or with the knowledge of, a parent or guardian, and we involve the guardian in any decision that carries financial commitment.

9. Changes to this policy

We revise this policy when our practices or the law change. The revision date at the top of this page reflects the current version. Material changes will be flagged on this page for 30 days.

10. Contact

Questions about this policy or our data handling can be directed to GrowCraft Education Sdn. Bhd., B-07-11, Block B, PJ Trade Centre, No. 8, Jalan PJU 8/8A, Damansara Perdana, 47820 Petaling Jaya, Selangor, Malaysia, or by email to [email protected].