Privacy Policy

1. Introduction

Eidolon ("we", "us", "our") is committed to handling personal data responsibly. This Privacy Policy explains what information we collect when you interact with our website at eidolona.top or enrol in one of our AI training programmes, how we use it, and what rights you have over it. This policy applies to all personal data processed by Eidolon in connection with our training services, operating from 3rd Floor, Plaza Sentral, Jalan Stesen Sentral 5, 50470 Kuala Lumpur, Malaysia.

We operate under the Personal Data Protection Act 2010 (PDPA) of Malaysia. If you have questions about this policy or how your data is handled, contact us at [email protected].

2. What Data We Collect

We collect personal data in the following ways:

• Enquiry form submissions: name, email address, phone number (optional), and message content.
• Programme enrolment: name, email address, employer name (if relevant), and payment information (processed by a third-party payment provider — we do not store card details).
• Website analytics: browsing behaviour, pages visited, and session duration via analytics cookies (only when you have consented).
• Email correspondence: any data contained in messages you send to us directly.

We do not collect special categories of personal data (health, biometric, or financial data beyond what is necessary for payment processing).

3. Legal Basis for Processing

We process your personal data on the following grounds:

• Consent: for analytics cookies and optional marketing communications, which you can withdraw at any time.
• Contract performance: to deliver programme services you have enrolled in, including communications about sessions, materials, and support.
• Legitimate interest: to respond to enquiries, improve our programmes based on feedback, and maintain records of our training activities.
• Legal obligation: to comply with Malaysian tax and financial record-keeping requirements.

4. How We Use Your Data

• To respond to your enquiry and provide programme information.
• To process enrolment and deliver the programme you have signed up for.
• To send you relevant communications about your programme (session reminders, materials, post-programme follow-up).
• To understand how people use our website and improve it (analytics, when consented).
• To comply with our legal and financial obligations.

We do not use your personal data for automated decision-making or profiling.

5. Data Retention

• Enquiry form data: retained for 12 months, then deleted unless a programme enrolment followed.
• Enrolment records: retained for 7 years to meet financial record-keeping requirements under Malaysian law.
• Analytics data: retained in aggregated, anonymised form. Raw session data is not retained beyond 14 months.
• Email correspondence: retained for 24 months, then reviewed and deleted unless there is an ongoing business relationship.

6. Data Sharing

We do not sell or rent your personal data. We may share data with:

• Payment processors: to facilitate secure payment for programme enrolment. These providers are contractually bound to process data only for payment purposes.
• Analytics providers: such as Google Analytics, only when you have consented to analytics cookies. Data shared is aggregated and does not identify you individually.
• Legal authorities: if required to do so by applicable Malaysian law or a valid court order.

We do not transfer personal data outside Malaysia to third countries without ensuring appropriate safeguards are in place.

7. Cookies

We use cookies to support basic site functionality and (with your consent) to understand how the site is used. Essential cookies are necessary for the site to work and cannot be disabled. Optional analytics and preference cookies are only active when you have accepted them via our cookie banner. For full details, see our Cookie Policy.

8. Your Rights Under the PDPA

Under the Malaysian Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Withdraw consent for processing based on consent (this does not affect processing carried out before withdrawal).
• Request that we stop processing your data for direct marketing purposes.
• Request deletion of your personal data, subject to our legal retention obligations.

To exercise any of these rights, email us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

10. Children's Privacy

Our programmes are designed for working professionals and individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, contact us at [email protected] and we will delete it promptly.

11. Security

We apply reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. These include encrypted storage of sensitive records and access controls limiting who can view personal data within our organisation. In the event of a data breach affecting your data, we will notify you in accordance with our obligations under Malaysian law.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website or services after any change constitutes acceptance of the revised policy. We will notify enrolled participants of material changes by email.

13. Contact

For privacy-related queries:

• Email: [email protected]
• Address: 3rd Floor, Plaza Sentral, Jalan Stesen Sentral 5, 50470 Kuala Lumpur, Malaysia