Privacy Policy
Last updated: 28 September 2026
Identity and Role of the Data Controller
studyzonely operates this non-commercial informational website focused on Insurance Programming topics relevant to Malaysia. We act as the data controller under the Personal Data Protection Act 2010 (PDPA). Our role involves collecting and processing personal data solely to maintain the site, publish blog articles, and respond to enquiries through the contact form.
Scope of This Notice
This Privacy Policy applies to all visitors to the website who are located in Malaysia or whose data is processed in connection with our activities here. It covers individuals who browse pages, read blog posts, submit the contact form, or interact with the site-wide cookie banner. The notice does not apply to third-party websites linked from our content.
Categories of Personal Data and Sources
We collect name, email address, and any message content submitted via the contact form. Automatically collected data includes IP address, browser type, device information, and pages visited. Sources include direct input from visitors, server logs, and cookies placed with consent. No data is obtained from third-party brokers or public records.
Purposes of Processing and Legal Basis
We process contact-form data to reply to enquiries on the basis of legitimate interest in providing site services. Blog interaction data supports content improvement under the same basis. Cookie data for analytics is processed only with consent. Legal bases under PDPA include consent where required and legitimate interests for essential site operation. Each purpose is limited to what is necessary for the stated function.
Requirement to Provide Data and Consequences
Providing contact details through the form is optional. However, without them we cannot respond to your message. Refusing analytics cookies will not prevent access to the site but may limit our ability to improve content based on usage patterns. No mandatory fields exist beyond what is needed for basic functionality.
Cookies and Similar Technologies
The site uses essential cookies for the cookie banner functionality and optional analytics cookies. Details of cookie types, durations, and management options are described in our separate Cookie Policy, which visitors should review alongside this document. The banner allows choices at first visit and subsequent adjustments.
Processors, Recipients and Legal Disclosures
Service providers such as hosting companies and email delivery services may process data on our behalf under contractual safeguards. We disclose data only when required by Malaysian law, court order, or regulatory request from the Personal Data Protection Commissioner. No sale or rental of personal data occurs.
International Transfers
Some processors may be located outside Malaysia. Transfers take place only to jurisdictions with adequate protection or under appropriate safeguards such as contractual clauses that meet PDPA requirements. We assess recipient locations before any transfer.
Retention Periods
Contact-form data is retained for twelve months after the last correspondence. Server logs are kept for six months. Analytics data from cookies is retained for twenty-four months unless consent is withdrawn earlier. Retention follows criteria of necessity for the original purpose and legal obligations.
Security and Data-Minimisation Practices
We apply reasonable technical measures including encryption in transit, access controls, and regular reviews of data holdings. Data collection is limited to what is required for each purpose. No absolute guarantee against breaches is made, but incidents are handled promptly in line with PDPA notification rules.
Data Subject Rights and Exercise Methods
Visitors may request access, correction, deletion, or restriction of their personal data. Requests should be sent to [email protected] or by post to Level 28, GTower, 199 Jalan Tun Razak, 50400 Kuala Lumpur, Malaysia. We respond within the timeframe required by PDPA after verifying identity. A practical method is to use the contact form or email with clear subject line indicating the request type.
Withdrawal of Consent and Objection to Marketing
Where processing relies on consent, visitors may withdraw it at any time via the cookie banner or by contacting [email protected]. Objection to any direct marketing or profiling is respected; the site does not conduct profiling or send marketing communications.
Right to Complain to the Supervisory Authority
Complaints about our data handling may be lodged with the Personal Data Protection Commissioner of Malaysia. Contact details for the Commissioner are available on the official government portal. We encourage first contacting us at [email protected] or +6011-54575705 to resolve concerns directly.
Children and Age Restrictions
The website content targets adults interested in insurance programming topics. We do not knowingly collect personal data from individuals under eighteen years of age. Parents or guardians who believe their child has submitted data should contact us for removal.
Automated Decision-Making and Profiling
No automated decision-making or profiling that produces legal or significant effects occurs on this site. All decisions remain under human review where relevant.
Policy Changes and Effective Date
We may update this policy to reflect legal or operational changes. The last-updated date appears at the top of the page. Continued use of the site after updates constitutes acceptance of the revised terms. Visitors are encouraged to review the policy periodically.