Privacy Policy (PDPA 2010)

Last updated: 8 October 2026 · This Privacy Notice is a sample template for a demo website and should be reviewed by a qualified Malaysian lawyer before going live.

EasyFormHub Tuition (“we”, “us”, “our”) respects your privacy. This Privacy Notice explains how we collect, use, disclose and protect personal data in accordance with Malaysia’s Personal Data Protection Act 2010 (PDPA), as amended by the Personal Data Protection (Amendment) Act 2024, and its subsidiary regulations. A Bahasa Melayu version of this notice is available on request.

1. Who we are

EasyFormHub Tuition operates the website https://easyformhub.work and provides online tuition services in Malaysia. For any privacy matter, contact our Data Protection Officer at support@easyformhub.work.

2. Personal data we collect

• Identity and contact data: name, email address, phone/WhatsApp number, and the student’s level and school type.
• Account data: username, password (stored in hashed form), class enrolments, attendance and quiz results.
• Payment data: transaction reference, amount and payment method. Card and banking details are processed by our licensed payment gateway (e.g. Billplz or ToyyibPay) and are not stored on our servers.
• Tutor applicant data: CV, qualifications, teaching experience and availability.
• Technical data: IP address, browser type, device information and cookies (see section 8).
• Communications: messages you send us by form, email, WhatsApp or live chat.

3. Purposes of processing

We process personal data to:

1. create and manage student, parent and tutor accounts;
2. deliver live classes, replays, learning materials and progress reports;
3. process payments, issue receipts and handle refunds;
4. respond to enquiries and provide customer support;
5. send class reminders and service updates;
6. send marketing about our classes, only where you have given consent (you may opt out at any time);
7. improve our website and services using aggregated analytics; and
8. comply with legal and regulatory obligations.

4. Students under 18

Most of our students are minors. We collect a student’s personal data with the consent of a parent or legal guardian, who may exercise the rights in this notice on the student’s behalf.

5. Disclosure of personal data

We do not sell personal data. We only share it with: our tutors (limited to what is needed to teach); payment gateways; video-conferencing, hosting, email and analytics providers acting on our instructions; professional advisers; and authorities where required by law. All service providers are required to protect personal data.

6. Cross-border transfer

Some service providers (for example, cloud hosting or video platforms) may store data outside Malaysia. Where this happens, we take reasonable steps to ensure the data receives a level of protection comparable to the PDPA.

7. Security and retention

We use HTTPS encryption, access controls, a web application firewall and regular backups to protect personal data. We keep personal data only as long as needed for the purposes above or as required by law — for example, accounting records for 7 years — after which it is securely deleted or anonymised. If a personal data breach occurs that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and affected individuals as required by law.

8. Cookies

We use essential cookies to run the website and, with your consent, analytics and marketing cookies. You can manage your preferences at any time through the cookie banner or your browser settings.

9. Your rights

Under the PDPA you have the right to:

• access the personal data we hold about you and request a copy;
• correct personal data that is inaccurate, incomplete or out of date;
• withdraw consent or limit the processing of your personal data, including for direct marketing;
• request that your personal data be transmitted to another data controller where technically feasible (data portability).

To exercise these rights, email support@easyformhub.work. We will respond within 21 days. A reasonable fee may apply for data access requests as permitted by law.

10. Is providing data obligatory?

Data marked as required on our forms is necessary to provide our services. If you do not provide it, we may be unable to enrol you in classes or process payments.

11. Changes to this notice

We may update this notice from time to time. The latest version will always be posted on this page with the updated date.

12. Contact

EasyFormHub Tuition — Data Protection Officer · Email: support@easyformhub.work · Business address: [to be added]