Privacy policy

This policy explains how Paintlink Education Network Sdn. Bhd. ("Paintlink", "we") handles personal data on paintlink.pro and in our counselling work, in line with the Personal Data Protection Act 2010 (PDPA). We wrote it to be read, not skimmed past — if anything is unclear, ask us at [email protected].

1. What we collect, and when

When you send our enquiry form we receive the details you type: the student's name, email address, an optional phone number, the study level you're considering and whatever you tell us about your situation. During counselling you may go on to share academic results, budget expectations and identification documents needed for applications. We collect nothing behind your back: no purchased marketing lists, no data brokers.

Our web server also keeps routine technical logs — IP address, browser type, pages requested and timestamps — used for security monitoring and capacity planning, and deleted on rotation.

2. What we use it for

• Preparing your programme shortlist and answering the enquiry you sent;
• Submitting applications to universities you have chosen, with your knowledge each time;
• Checking scholarship and funding eligibility on your behalf;
• Contacting you about your own case — never bulk marketing you did not request;
• Meeting legal and accounting obligations that apply to a Malaysian company.

3. What we never do

We do not sell, rent or swap personal data. We do not pass your details to institutions you have not shortlisted. We do not run remarketing lists from enquiry data. A university receives your information only when you ask us to apply there, and receives only what the application requires.

4. Storage and retention

Enquiry and case records are held on access-controlled systems hosted in Malaysia and Singapore. Active case files are kept for the duration of counselling and enrolment. Closed files are retained for twenty-four months — families frequently return for a sibling's enrolment — then deleted, unless statutory record-keeping requires longer. You can shorten this at any time by asking us to erase your file.

5. Your PDPA rights

You may request a copy of the personal data we hold about you, ask us to correct it, withdraw consent to further processing, or require deletion where no legal duty prevents it. Write to [email protected] or to Unit 22-05, Menara UOA Bangsar, No. 5 Jalan Bangsar Utama 1, 59000 Kuala Lumpur. We respond within twenty-one days.

6. Third-party services

Our website loads fonts from Google Fonts and the cookie-consent library from the jsDelivr content delivery network; both providers receive standard technical request data (such as your IP address) when those files load. Neither receives your form contents. Cookie behaviour is described separately in our Cookie Policy.

7. Changes

If we change this policy we will post the new version here with a fresh effective date. Material changes affecting active cases are notified directly by email.