Legal
Privacy Policy
Last updated: 12 April 2025
Effective date: 12 April 2025
1. Introduction
Glassmoor ("we", "us", "our") is the operator of the educational programmes described on this website and is the data controller for personal information collected through our website and programme registration processes.
This policy explains what personal data we collect, why we collect it, how it is used, and what rights you have over it. It applies to all visitors to this website and to participants who register for any Glassmoor programme.
Our operations are based in Kuala Lumpur, Malaysia. We handle personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. Where relevant, we also observe good practice aligned with internationally recognised privacy principles.
2. What Personal Data We Collect
We collect only the personal data that is reasonably necessary for the purposes described below:
- Contact form submissions: Full name, email address, and optionally a phone number and message. This is submitted voluntarily when you contact us via the website.
- Programme registration: Name, email address, and phone number when you register or enquire about a Glassmoor programme.
- Website usage data: General browsing data collected via cookies and analytics tools, where you have consented. This may include page views, session duration, and device type — no personally identifying information is included in analytics data.
We do not collect financial information, government identification numbers, or sensitive personal data as defined under the PDPA.
Legal basis for processing
- Consent — for marketing communications and analytics cookies
- Contract performance — for programme enrolment and administration
- Legitimate interest — for responding to enquiries and programme coordination
Retention periods
Contact form data is retained for up to 12 months. Programme participant records are retained for up to 3 years for administrative and record-keeping purposes. Analytics data is retained according to the applicable third-party service settings, typically 14–26 months.
3. How We Use Your Personal Data
- To respond to your enquiry or message
- To process programme enrolment and manage your place in a session
- To send you programme schedule information and relevant logistical details
- To notify you of future programme intakes, where you have opted in to receive such information
- To improve the website and programme delivery through aggregated, non-identifying analytics data
We do not sell personal data. We do not share personal data with third parties for their own marketing purposes. We do not use personal data to make automated decisions about individuals.
Third-party service providers
We use Google Analytics (where consent is given) to understand general website usage patterns. Where applicable, website hosting and email services may process data on our behalf under appropriate data processing arrangements.
4. How We Protect Your Data
- Website traffic is served over HTTPS (TLS encryption)
- Access to participant records is restricted to programme staff only
- Physical records (where applicable) are kept in a secured office environment
- In the event of a data breach affecting your personal data, we will notify you and the relevant authority as required under the PDPA
5. Cookies
This website uses cookies for essential functionality and, where you consent, for analytics. Essential cookies support the basic operation of the website and cannot be disabled. Analytics cookies (such as Google Analytics) are only placed where you have accepted them via the consent notice displayed on your first visit.
For full details on the types of cookies used and how to manage your preferences, see our Cookie Policy.
6. Your Rights
Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request that inaccurate or incomplete data is corrected
- Erasure — request deletion of your personal data, subject to any legal retention obligations
- Withdraw consent — withdraw any consent you have previously given at any time
- Object to processing — object to how your data is being used in specific circumstances
- Complaint — lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have not been observed
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.
7. Third-Party Links
This website may contain links to external resources or other organisations. Once you leave this website, we have no control over how those sites collect or process personal data. We recommend reviewing the privacy policy of any third-party site you visit.
8. Age Restriction
Glassmoor programmes are designed for adults. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that personal data has been collected from a minor, we will delete it promptly. If you believe a minor has submitted personal data through our website, please contact us at [email protected].
9. Updates to This Policy
We may update this policy from time to time. When changes are material, we will note the updated date at the top of this page. Continued use of the website after any update constitutes your acknowledgement of the revised policy. We encourage you to review this page periodically.
10. Contact for Data Enquiries
For any questions or requests related to your personal data, contact us:
Data Controller: Glassmoor
Address: 19 Jalan Imbi, 55100 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3 2143 8567
Supervisory authority for data protection in Malaysia: Department of Personal Data Protection (JPDP) — pdp.gov.my