Privacy policy

The Data & AI Academy portal is operated by Your Partner Technologies, a training practice in Kuala Lumpur, Malaysia (business registration number 202401023226 (1569075-K); registered address 15-03A, One Jelatek Condominium, Jalan Jelatek, Kementah, 54200 Kuala Lumpur W.P. Kuala Lumpur, Malaysia). Your Partner Technologies decides how and why your personal data is processed, and is the data user for the purposes of the Personal Data Protection Act 2010.

Questions about this policy, or about your data, go to our Data Protection Contact at sales@yourpartnertechnologies.com.

We collect only what the portal needs to run your account, your registrations and your certificate. Specifically:

Free Learning — reading the book's topics and taking the free skill diagnostic — is different: it needs no account, and we collect nothing. The diagnostic's questions and your answers are held only in your own browser and are never sent to us.

• Account details — your name, email address and a password. The password is stored only as a one-way hash; we cannot read it.
• Profile details — the country you tell us you are in. This decides the currency you are charged in (see the Terms of service).
• Registrations — which offerings you have registered for, their status, and attendance and completion as recorded by the trainer.
• Orders — what you paid, in which currency, when, by which method type (for example "card"), and the payment reference our payment processor gives us, whether for a registration, a Knowledge Check result-document unlock or a support payment. We never receive or store your card number.
• Free Assessment Check attempts — if you take one, the 200 questions served to you, the answers you gave, when you started and finished, your score, whether you passed and your grade, and the result ID. This needs an account; it is not the diagnostic (see above).
• Interest registrations — if you register your interest in a training format: the training and format, the email address you give (required), and, if you choose to give them, your full name, mobile number and date of birth; the fee you paid or that it was waived, and whether the trainer has told you about a date. You tick, before registering, that the trainer may contact you.
• Interview assessment attempts — if you take one, the questions served to you, your answers, when you started and finished, and your score. If you take an organisation's screening test, your name and email address, the role, your score and the time you took are also shared with that organisation — you confirm this before you start. This needs an account.
• Consents — which version of the Terms of service and this policy you accepted, and when.
• Certificates — if one is issued, your name as it appears on the certificate, the training and format, the completion, issue and expiry dates, the certificate identifier, any renewal you pay for, and whether you have chosen to be listed in public name search (see section 6).
• Audit entries — a record of significant actions on your account (such as sign-in, a change of password, a registration or a refund), with a time stamp, kept so we can investigate problems and show what happened.
• Messages — anything you send us by email, so we can reply.

We process your personal data for the following purposes. In each case the processing is necessary to perform our agreement with you, to meet a legal obligation, or is done with your consent, which you give when you create an account and accept this policy.

• To create and run your account, and to let you sign in securely.
• To take and confirm your registration for an offering, and to deliver the training to you.
• To take payment, issue receipts, process refunds and keep the financial records the law requires.
• To decide which currency and price apply to you, based on your profile country.
• To record completion and, where earned, to issue and verify your Certificate of Completion.
• To run a Free Assessment Check you take, score it, give you a verifiable result and — if you passed — a graded certificate, and, if you pay to unlock it, to show you the printable Certificate of Achievement.
• To record the interest you register in a training format, so the trainer can plan the training, and to contact you about it when it is scheduled.
• To run an interview assessment you take, score it and show you the model answers; and, for an organisation's screening test, to give that organisation your result after you have confirmed that you agree.
• To send you the messages the service needs — confirmations, reminders, changes to an offering, receipts and notices about your account. These are not marketing.
• To answer your questions and resolve complaints.
• To keep the portal secure, prevent misuse and investigate problems.
• To comply with the law, including tax and consumer-protection law.

We do not send marketing messages unless you have separately opted in to receive them. If you do opt in, every marketing email carries a way to opt out, and you can also opt out by writing to sales@yourpartnertechnologies.com. Opting out of marketing does not stop the service messages described above, which you need in order to attend what you have registered for.

We do not sell personal data, and we do not share it for anyone else's marketing. We disclose personal data only as follows:

• Stripe — our payment processor. When you pay, you enter your payment details directly with Stripe, which processes the payment under its own privacy policy. We receive confirmation of payment, not your card details.
• DigitalOcean — our hosting provider. The servers and database on which the portal and its data run are hosted by DigitalOcean in New York, United States.
• Email provider — none at present: the portal does not currently send email through any provider. If that changes, we will name the provider here before any personal data is shared with it.
• The trainer of an offering you registered for — your name and email address, so that attendance and completion can be recorded and you can be admitted to the sessions.
• The trainer of a training you registered interest in, and our administrators — the details you gave when registering interest (email address, and your name, mobile number and date of birth if you gave them), so they can plan the training and email you about its schedule. They are not shared with anyone else, and the trainer sees only the people interested in their own trainings.
• An organisation whose screening test you take — your name, email address, the role, your score and the time taken, and only after you have confirmed, before starting, that the result is shared with that organisation. The organisation decides what to do with it under its own privacy practices; it sees only its own candidates' results.
• HRD Corp or your employer — only where you ask us to provide evidence of your attendance or completion, for example to support a training claim, and only what is needed for that purpose. HRD Corp claims are for Malaysian citizens and are normally made through an employer registered with HRD Corp.
• Authorities — where the law requires us to disclose, for example to a court, a regulator or a law-enforcement agency acting within its powers.

If you are issued a Certificate of Completion, anyone who has its certificate identifier, or the link to it, can confirm on this portal that the certificate is genuine. Verification by identifier or link always works. The verification page shows the name on the certificate, the training and its format, the completion date, the issue date, the expiry date and the certificate's current status. If a certificate has been revoked, the page says so.

The portal also offers a public search by name. That search returns only holders who have chosen to be listed in it. Being listed is optional and is off unless you turn it on from your account. When you turn it on we record that choice, with the wording you agreed to and the time. You can withdraw it at any time from your account, and the withdrawal takes effect immediately for name search; the identifier and link continue to work.

A Free Assessment Check result has its own verification page, reached only by its own ID or its link — it is never returned by the name search above. It shows the name on the result, the score, whether it passed, the grade and the date, and says plainly that it is not a Certificate of Completion and not the Academy's earned credential.

Whether reached by identifier, link or name search, a verification page never shows your email address, your country, your contact details or any identity-document details. Dates on it are calendar dates in Malaysia time (Asia/Kuala_Lumpur).

If you have a concern about how your certificate or Free Assessment Check result can be verified, write to sales@yourpartnertechnologies.com.

The portal is hosted by DigitalOcean on servers in New York, United States. Your personal data is therefore stored and processed outside Malaysia, and our payment processor may also process data outside Malaysia.

Where a transfer outside Malaysia takes place we will rely on one of the grounds permitted by section 129 of the Personal Data Protection Act 2010 (as amended) — such as your consent, the transfer being necessary to perform our agreement with you, or the recipient being bound to protect the data to a standard at least equivalent to the Act — and we will put appropriate contractual and technical safeguards in place.

We take practical steps to protect your personal data against loss, misuse, unauthorised access, alteration and disclosure, in keeping with the Security Principle. These include:

• Encryption of data in transit between your browser and the portal (HTTPS).
• Passwords stored only as salted one-way hashes, never in a readable form.
• Card and bank details handled by Stripe, never by the portal.
• Access controls, so that staff and trainers see only what their role needs.
• An audit log of significant actions on accounts and records.
• Providers chosen and contracted to protect the data they process for us.

If a personal data breach occurs that is likely to cause you significant harm, we will notify the Personal Data Protection Commissioner and affected individuals as the Personal Data Protection Act 2010 (as amended in 2024) requires, and we will tell you what happened, what data was involved and what we are doing about it.

We keep personal data only for as long as it is needed for the purposes above, and then delete or anonymise it, in keeping with the Retention Principle. The periods we apply are:

• Account and profile details — for as long as your account is open, and for 30 days after you close it so a closed account can be restored if closing it was a mistake.
• Registration and completion records — for as long as the certificate they support can be verified, and for seven years after it was issued or expired.
• Orders and payment records — for seven years, the period Malaysian tax law requires financial records to be kept.
• Consent records — for as long as the account exists and for six years afterwards (the limitation period), so we can show what you agreed to.
• Audit entries — for two years, a period sufficient to investigate security incidents and disputes.
• Messages you send us — until your query is resolved and for twelve months afterwards.

In keeping with the Data Integrity Principle, we rely on you to keep your name, email address and country accurate, and you can change them in your account area at any time. Your name should be entered as you want it to appear on a certificate. If you notice an error in a record we hold, tell us and we will correct it.

Under the Personal Data Protection Act 2010 (as amended) you have the following rights. To exercise any of them, write to our Data Protection Contact at sales@yourpartnertechnologies.com. We may ask you to confirm your identity first, and we will respond within the time the Act allows.

• Access — to ask for a copy of the personal data we hold about you. The Act permits a modest fee for this; we will tell you before charging one.
• Correction — to have inaccurate, incomplete, misleading or out-of-date data corrected.
• Withdrawal of consent — to withdraw consent to processing that relies on it, by written notice. Because some processing is needed to run your account and registrations, withdrawing consent may mean we can no longer provide the service; we will tell you if that is so.
• Preventing processing likely to cause distress — to require us to stop processing that is causing, or is likely to cause, unwarranted and substantial damage or distress.
• Marketing — to require us to stop using your data for direct marketing.
• Complaint — if you are not satisfied with our response, you may complain to the Personal Data Protection Commissioner of Malaysia (Jabatan Perlindungan Data Peribadi).

The portal uses a small number of cookies and browser storage entries, all of which are needed for it to work or to remember a preference. None is used for advertising, and we do not use third-party tracking or analytics cookies.

• Session cookie — keeps you signed in as you move between pages. It is deleted when you sign out or when the session expires.
• Theme preference — remembers whether you chose the light or dark appearance. It contains no personal data.
• Payment — when you pay, Stripe may set its own cookies on its checkout page to detect fraud and complete the payment; these are governed by Stripe's privacy policy.

The portal is intended for adults. We do not knowingly collect personal data from anyone under 18 and our Terms of service require you to be at least 18 to create an account. If you believe someone under 18 has created an account, tell us at sales@yourpartnertechnologies.com and we will delete the account.

We may change this policy — for example, when we confirm our hosting provider, add a training or need to reflect a change in the law. The current version, its version number and its effective date are shown on this page. If a change materially affects how we use your data, we will tell you by email or when you next sign in, and where the law requires it we will ask for your consent again.

Your Partner Technologies (business registration number 202401023226 (1569075-K)), 15-03A, One Jelatek Condominium, Jalan Jelatek, Kementah, 54200 Kuala Lumpur W.P. Kuala Lumpur, Malaysia.

Data protection: Data Protection Contact. Email: sales@yourpartnertechnologies.com.

Effective date of this version: 2 October 2026. Version: 2026-10-02.