Notis Privasi

Kemas kini terakhir: [tarikh]

Notis ini menerangkan data peribadi yang dikumpul oleh [nama pemilik kelas] ("kami") melalui ilm, mengikut Akta Perlindungan Data Peribadi 2010 (pindaan 2024).

Data yang kami kumpul

Nama penuh, ID Pelajar, nombor telefon dan kata laluan (disimpan dalam bentuk hash, kami tidak boleh membacanya).
Invois, resit bayaran yang anda muat naik, dan kemajuan menonton rakaman.
Langganan notifikasi peranti, jika anda membenarkannya.

Sebab kami kumpul

Untuk mendaftar dan mengurus akaun anda, memberi akses kepada kelas dan rakaman, mengeluarkan invois dan mengesahkan bayaran, serta menghantar peringatan kelas dan yuran melalui notifikasi atau WhatsApp.

Di mana data disimpan

Pangkalan data dan fail disimpan oleh Supabase di Singapura. Laman web dihoskan oleh Vercel (syarikat Amerika Syarikat) dan dihantar dari pelayannya di seluruh dunia; pemprosesan di pelayan (notifikasi, tindakan pentadbir) berlaku di Singapura. Cloudflare Turnstile memeriksa borang daftar dan log masuk untuk menghalang bot. Rakaman dimainkan melalui YouTube. Klip di laman utama dimainkan melalui TikTok, hanya selepas anda menekannya.

Berapa lama

Selagi akaun anda aktif, dan [tempoh] selepas akaun ditutup untuk rekod kewangan. Selepas itu data dipadam.

Hak anda

Anda boleh meminta salinan data anda, membetulkannya, menarik balik persetujuan, atau meminta akaun dipadam. Hubungi kami di [e-mel] atau WhatsApp [nombor]. Kami akan membalas dalam 21 hari.

Jika berlaku kebocoran data

Kami akan memaklumkan Pesuruhjaya Perlindungan Data Peribadi dalam 72 jam, dan memaklumkan anda secepat mungkin jika anda terjejas.

Privacy Notice

Last updated: [date]

This notice explains the personal data [class owner's name] ("we") collects through ilm, under Malaysia's Personal Data Protection Act 2010 (as amended in 2024).

What we collect

Your full name, Student ID, phone number and password (stored as a hash, which we can't read).
Invoices, the payment receipts you upload, and how far you've watched each recording.
A device notification subscription, if you allow notifications.

Why

To register and run your account, give you access to classes and recordings, issue invoices and confirm payments, and send class and fee reminders by notification or WhatsApp.

Where it's kept

The database and files are held by Supabase in Singapore. The website is hosted by Vercel (a US company) and delivered from its servers around the world; server-side processing (notifications, admin actions) happens in Singapore. Cloudflare Turnstile checks the sign-up and login forms for bots. Recordings play through YouTube. Clips on the home page play through TikTok, only once you tap one.

How long

For as long as your account is open, and [period] after it closes for financial records. Then it's deleted.

Your rights

You can ask for a copy of your data, correct it, withdraw consent, or ask for your account to be deleted. Contact us at [email] or WhatsApp [number]. We reply within 21 days.

If there's a data breach

We'll notify the Personal Data Protection Commissioner within 72 hours, and tell you as soon as we can if you're affected.

النسخة العربية قيد الإعداد. النص أعلاه باللغة الإنجليزية.