Privacy Policy

Last updated: 22 September 2026.

Identity and Role of the Data Controller

bookzenix operates this website as the data controller under the Personal Data Protection Act 2010 of Malaysia. We determine the purposes and means of processing personal data collected through our Course Programming services and related online activities.

Scope of the Notice

This notice applies to all visitors, registered users, course participants, and any individuals whose personal data we process in connection with our commercial website, blog, and educational offerings targeted at users in Malaysia.

Categories of Personal Data and Sources

We collect personal data directly from you via forms, account registration, course enrolment, and the contact form. Categories include identification details, contact information, educational background, payment records, and usage data from site interactions. We may also receive data from third-party analytics providers or marketing partners with your consent.

Purpose-by-Purpose Explanation of Processing and Legal Basis

Personal data is processed to deliver Course Programming content, manage enrolments, process payments, respond to enquiries via the contact form, send service updates, improve website functionality, and comply with legal obligations. Each purpose relies on consent, contractual necessity, or legitimate interests under Malaysian law.

Whether Providing Data Is Required

Supplying certain personal data is necessary to access courses or use the contact form. Failure to provide required information may prevent enrolment, transaction completion, or response to your queries.

Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance user experience and analyse traffic. Please refer to our separate Cookie Policy for detailed information on types used and your control options, which is accessible via the site-wide cookie banner.

Processors, Service-Provider Categories, Recipients, and Disclosures Required by Law

Trusted service providers such as hosting companies, payment processors, and email platforms act as data processors under contract. We may disclose data to regulatory authorities when legally required or to protect our rights and users.

International Transfers and Safeguards

Some processors may be located outside Malaysia. In such cases we ensure appropriate safeguards including contractual clauses that meet Personal Data Protection Act standards before any transfer occurs.

Retention Periods or Criteria

We retain personal data only as long as necessary for the stated purposes, typically up to seven years for financial records or until consent is withdrawn for marketing purposes, after which data is securely deleted or anonymised.

Security and Data-Minimisation Practices

Reasonable technical and organisational measures protect your data against unauthorised access. We collect only the minimum information required and regularly review our practices to reduce risks.

Data-Subject Rights and Exercising Them

You may request access, correction, deletion, or restriction of your personal data by contacting us through the contact form on the Contacts page or by writing to [email protected]. We will respond within the timeframes prescribed by Malaysian law.

Right to Withdraw Consent and Object to Direct Marketing or Profiling

Where processing is based on consent you may withdraw it at any time. You can also object to direct marketing or profiling by using the unsubscribe link in emails or notifying us via [email protected].

Right to Complain to the Competent Supervisory Authority

If you are dissatisfied with our response you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia at the relevant authority office.

Children or Age Restrictions

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors without verified parental consent.

Automated Decision-Making and Profiling

We do not engage in solely automated decision-making that produces legal effects. Limited profiling may occur for course recommendations based on your expressed preferences, but you can opt out at any time.

Policy Changes and Effective Date

We may update this policy periodically. Changes become effective upon posting the revised version with a new last-updated date. Continued use of the site after updates constitutes acceptance of the revised terms.