Privacy Policy

GCCA  Academy Sdn Bhd Online Payment Privacy Policy

In order to operate the GCCA Academy Sdn. Bhd. online-payments system, the College may collect and store personal information you submit to it via this online-payments website or give to the College in any other way. Please read the following privacy policy to understand how the College uses and protects the information that you provide.

This online-payment system is provided and hosted by GCCA Academy Sdn. Bhd. and its third party suppliers. By submitting your personal information, you are consenting to the College holding and using it in accordance with this policy. The policy is subject to change and any changes to it in the future will be notified on this page. By continuing to use this payment site you are agreeing to such changes. We recommend that you check the privacy policy each time you visit this site.

1. Information that we collect from you and your use of this site

When you visit the payment website you may be asked to provide certain information about yourself including your child’s name, date of birth, name, contact, bank account, payment information and financial details before you are able to proceed with using the online-payment system.

We receive and save any information you enter on our website or give us in any other way. You provide most such information when you make a payment, or set-up a recurring card payment or direct debit mandate, or communicate with us for any other reason. This information may include your child’s name, date of birth, name, contact, bank account, payment information and financial details.

You can choose not to provide information, although it may be needed to make a payment.

2. How we use your information

2.1 Fulfilment

Personal data collected as part of the payment process will be held primarily to settle your order. This data will be retained by reputable third-party banking and distribution institutions who handle our customers card transactions and order fulfilment and may be used for any of the following purposes: accounting, billing and auditing, administrative and legal purposes, security and payment verification.

2.2 Analysis

We may also use and analyse the information we collect so that we can manage and improve the services on the website. Demographic and statistical information about user behaviour may be collected and used to analyse the popularity and effectiveness of the web site. Any disclosure of this information will be in aggregate form and will not identify individual users.

3. How we handle the data submitted by you

3.1 Personal Data Protection Act 2010

GCCA Academy Sdn. Bhd. is committed to comply with the Malaysian Personal Data Protection Act (PDPA) 2010 in protecting personal information that has been processed by the College. This Privacy Policy informs you about GCCA Academy Sdn. Bhd.’s policy and practices on data privacy matters before you provide your personal data to us.

3.2 Data Security

 

Please protect sensitive data at all times throughout your online transaction. Make sure that nobody can see over your shoulder when typing in personal information and close your browser when you have finished. The College and its third party suppliers have used their reasonable endeavours to ensure that access to information provided and the payments you make whilst using this site are secure. We work to protect the security of your information during transmission. 

You should be aware that the computer that you use to attach to the online-payments system (via a web browser) must also be secure, and include the latest operating system, software and anti-virus updates. The use of a shared computer to connect to the online-payments system could increase the risk that others will see your sensitive information.

 

3.3 Disclosure of your information

 

GCCA Academy Sdn. Bhd. will keep your personal data confidential unless you have given the written consent to such disclosure, or it is within the ambit of permitted disclosures under prevailing laws/guidelines or by order of a court. GCCA Academy Sdn. Bhd. may disclose your information to the categories of third parties as listed below (not restricted to):

  • The Department of Skill Development (JPK), other relevant public authorities such as government departments/agencies, statutory authorities and industry regulators;
  • Malaysian Immigration Department and its appointed agencies;
  • Foreign embassies and their appointed agencies;
  • The student’s sponsors including his/her parents/guardians;
  • Your authorised agents, executor, administrator or legal representative;
  • Third parties that provide the internships or attachment placements;
  • Professional or accreditation bodies like City & Guilds London Institute; third parties for further studies at University in partnership and collaboration; namely Southern Cross University in Australia and International Management Institute in Switzerland.
  • Examination boards;
  • Third Parties involved in a merger, acquisition or asset sale;
  • Third parties appointed by GCCA Academy Sdn Bhd. to provide services, such as but not limited to auditors, lawyers, contractors, printing companies, data processors, student recruitment agents, other authorised agents, legal representatives, technology providers (to support the development, implementation and maintenance of the online /virtual environment), training organizer, online classes and insurance companies;

 

Security of Your Data

The security of Your Personal Data is important to us. We ensure that the processing of your personal data is carried out in a secure environment to prevent loss, alteration and destruction and misuse of your personal data. Our standard protocols include:

  • Application security: traffic encryption, strongly hashed passwords, safeguards against vulnerabilities such as cross site scripting, phishing, and others.
  • Network security: firewalls and systems to detect suspicious behaviour, stop malicious attempts to gain access, or compromise the resilience of the service
  • Organisational security: access policies, audit logs and confidentiality agreements.
  • Physical security: preventing unauthorized access to infrastructure processing personal data.
  • Procedural security: IT management processes to minimize the risk of human errors or testing regimes to identify software weaknesses before releasing new features to our cloud services, or policies to ensure data is only processed on instruction from our customers.

 

When sensitive information (such as credit or debit card information) is transmitted to the Site or through the Site, we encrypt the information. When credit card details are collected, we simply pass them on to be processed as required. We never permanently store complete credit card details. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it.

Please help us keep our records updated by informing us of any changes to your email address and other contact details.

Retention of Your Data

Your data will be processed and stored as long as it is necessary for the purposes described in this Privacy Policy as well as for the purposes of ensuring the security and integrity of GCCA Academy Sdn. Bhd. information systems. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if We are required to retain Your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.

Right To Access And Data Subject’s Obligation

You have the right to access and correct your personal information held by the GCCA Academy Sdn. Bhd. under the Personal Data Protection Act. We will attempt to keep your records complete, accurate and up to date. If you have any reason to believe that your records with us are inaccurate, incomplete or not updated, please notify GCCA Academy Sdn. Bhd. in a timely manner. 

Although we only process your personal data for purposes as stated above, in the event that your personal data is being processed for other purposes (with your consent), you have the right to request us to stop such processing. However, if you choose not to provide and/or fail to supply us with such personal data (and/or decide not to give us consent to process your personal data, including explicit consent for sensitive personal data), We will not be able to perform the contract of enrolment or process your application for enrolment and payment with us or provide the necessary service to you. Consequently, if you decide not to provide the mandatory information to us, it may necessarily mean that the enrolment and payment may have to be terminated or that an offer of a place of enrolment and payment will not be made.

 

For complaints or queries about the privacy policy or data protection queries generally please contact:

Email: gcca@gcca.com.my

Last updated: 8 April 2022