Legal
Personal Data Protection Act Notice
This notice explains how KadoshAI complies with the Personal Data Protection Act 2010 (PDPA) of Malaysia in collecting, using and protecting your personal data.
1. Personal data we collect
When you contact us, register for a webinar, or submit a programme application, we collect personal data you provide directly: your name, email address, phone number, organisation, job role, and any message content you share. We may also collect non-personal analytics data about website usage.
2. Purpose of collection
We collect and process your personal data for the following purposes: responding to your enquiries, sending webinar join links and replay recordings, processing programme applications and enrolments, delivering contracted services, improving our content and services, and fulfilling legal or regulatory obligations.
3. Consent
By submitting your personal data through our forms, you consent to the collection, use and disclosure of your personal data for the purposes described in this notice. Marketing communications are sent only with your separate opt-in consent. You may withdraw consent for marketing at any time without affecting transactional communications necessary to deliver services you requested.
4. Disclosure to third parties
We do not sell your personal data. We may share your data with service providers who help us operate — such as webinar platforms, email delivery and cloud hosting — under contractual obligations to protect your data. We only share what is necessary to deliver the service you requested.
5. Data security
We take reasonable steps to protect your personal data against unauthorised access, alteration, disclosure or loss. Access to personal data is restricted to authorised personnel who need it to perform their duties. Our systems use encryption in transit and at rest.
6. Data retention
We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, to meet legal or regulatory requirements, or to respond to follow-up enquiries. After that, we securely delete or anonymise the data.
7. Your rights under PDPA
You have the right to request access to your personal data, request correction of inaccurate data, request deletion of your data (subject to legal retention obligations), and withdraw marketing consent at any time. To exercise any of these rights, contact us through the contact page.
8. Cross-border data transfer
Some of our service providers operate outside Malaysia. We only transfer personal data to countries with adequate data protection safeguards and contractual commitments that meet PDPA requirements.
9. Contact
For any questions about this PDPA notice or to exercise your data protection rights, contact us through the contact page.
Last updated: July 2026