Privacy Policy

1. Introduction

Tensorloom ("we", "us", "our") is an online school for AI development based at 68 Jalan Kemuja, 59000 Bangsar, Kuala Lumpur, Malaysia. This policy describes how we collect, use, store, and protect personal data in connection with our website at tensorlo.blog and our course enrolment and administration processes.

We process personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Questions about this policy should be directed to [email protected].

2. Data We Collect

We collect personal data through the following means:

• Enquiry and enrolment forms: name, email address, phone number (optional), and message content submitted through the contact form on our website.
• Readiness quiz: responses submitted through the entry-course readiness quiz, which may include coding background and experience level.
• Course participation: submitted assessment work (graded notebooks, lab reports, project files), attendance records, and instructor notes.
• Cookies and analytics: website usage data collected through cookies, including pages visited and session duration. See Section 5 and our Cookie Policy for detail.
• Employer cohort engagements: contact details for engineering leadership and cohort participants, scoping workshop notes, and code review records (limited to information relevant to the engagement).

We do not collect sensitive personal data (as defined under the PDPA) and do not request information about race, religion, health, or political opinion.

3. Legal Basis for Processing

• Consent: for marketing communications and analytics cookies, where you have opted in.
• Contract performance: to deliver course services following enrolment confirmation.
• Legitimate interests: to respond to enquiries, maintain course records, and improve our syllabi based on cohort feedback.
• Legal obligation: where required by Malaysian law, including tax and accounting records.

4. How We Use Your Data

• To respond to course enquiries and process enrolments.
• To administer assessments, provide feedback, and issue written completion records.
• To manage employer cohort engagements, including scheduling, code review notes, and documentation handover.
• To send course-related updates where you have requested them — you may opt out at any time.
• To analyse website usage in aggregate for site improvement (analytics cookies, where consented).
• To meet legal and accounting obligations.

We do not sell personal data to third parties. We do not use your data for automated profiling that produces legal or similarly significant effects.

5. Data Sharing

We may share personal data with:

• Service providers: third-party tools used to operate the website and deliver courses (hosting, email delivery, analytics). These providers process data only on our instruction and under data processing agreements.
• Analytics: aggregated, anonymised website usage data may be processed by Google Analytics if analytics cookies are accepted.
• Legal authorities: where required by Malaysian law or court order.

For employer cohort engagements, code review notes and scoping documents are shared only with the relevant employer organisation and the instructors involved in that engagement.

6. Data Retention

• Enquiry form submissions: retained for 12 months from submission, then deleted unless an enrolment follows.
• Enrolment and assessment records: retained for 5 years from course completion to support written completion records and audit requirements.
• Employer cohort records: retained for 3 years from engagement close, then deleted or returned to the employer as agreed at handover.
• Cookie and analytics data: retained for the period set by the relevant tool; typically 13 months for Google Analytics.

7. Data Protection Measures

• Data in transit is encrypted using TLS. Data at rest is stored on servers with access controls limited to authorised personnel.
• Access to enrolment and assessment records is restricted to the instructors and administrative staff directly involved.
• In the event of a data breach that creates a risk of harm, we will notify affected individuals and the relevant authority without undue delay.
• We conduct periodic reviews of our data handling practices.

8. Cookies

We use essential cookies required for the website to function, and optional analytics and preference cookies where you consent. You can manage cookie preferences at any time through our Cookie Policy page.

9. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights:

• Right of access: to request a copy of the personal data we hold about you.
• Right of correction: to request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: to withdraw consent for processing based on consent, at any time. Withdrawal does not affect processing already completed.
• Right to prevent processing for direct marketing: to opt out of marketing communications at any time.

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days. We may need to verify your identity before processing a request.

If you believe we have not handled your data in accordance with the PDPA, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

10. Third-Party Links

Our website may contain links to external sites, including course-related resources and cited research papers. We are not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy policy of any external site you visit.

11. Children

Our courses are intended for persons aged 18 and over. We do not knowingly collect personal data from persons under 18. If we become aware that we have collected data from a minor, we will delete it.

12. International Transfers

If personal data is transferred outside Malaysia — for example, to cloud service providers with servers outside the country — we ensure the transfer is conducted in accordance with PDPA requirements and that equivalent data protection standards apply.

13. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We will notify enrolled participants of material changes by email.

14. Contact

Data protection enquiries:

• Email: [email protected]
• Phone: +60 3 5628 9174
• Address: 68 Jalan Kemuja, 59000 Bangsar, Kuala Lumpur, Malaysia