Privacy Policy

Last Updated: 3 June 2026  |  Applies to: mylup.digital

1. Who We Are

MyLup Digital operates the website at mylup.digital. Our registered office is at 2, Jalan BS 9/10, Taman Bukit Serdang, 43300 Seri Kembangan, Selangor, Malaysia. We can be contacted at [email protected] or +60 3-8957 7500.

This Privacy Policy explains how we collect, use, store, and disclose personal data when you visit our website or use our online training platform. It has been prepared in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Personal Data We Collect

We collect personal data through the following means:

  • Contact form submissions: name, email address, phone number, and the content of your message.
  • Automatically collected data: IP address, browser type and version, pages visited, time and date of visit, referring URL, and device type.
  • Cookie data: preferences and session identifiers stored in browser cookies as described in our Cookie Policy.

We do not collect sensitive personal data as defined under the PDPA, such as health information, financial account details, or identification numbers, through this website.

3. Purposes of Processing

Personal data collected through this website is used for the following purposes:

  • Responding to enquiries submitted through the contact form.
  • Providing information about our training platform and its content.
  • Improving the website based on how visitors interact with it.
  • Complying with applicable legal obligations under Malaysian law.
  • Maintaining the security and integrity of our systems.

We do not use personal data for unsolicited marketing without your consent. We do not sell, rent, or trade personal data to third parties for their own marketing purposes.

4. Legal Basis for Processing

Under the Personal Data Protection Act 2010, we process personal data on the following grounds:

  • Your consent, given when you submit the contact form and accept this Privacy Policy.
  • Our legitimate interests in operating and improving our website and training platform.
  • Compliance with legal obligations applicable to our business in Malaysia.

5. Data Sharing and Disclosure

We may share your personal data with the following categories of recipients:

  • Service providers who assist in operating our website, such as hosting providers and analytics services, under data processing agreements that restrict their use of your data.
  • Regulatory authorities or law enforcement agencies where disclosure is required by law or court order.

We do not transfer personal data outside of Malaysia unless adequate safeguards are in place as required by the PDPA. Where transfers occur, we ensure that the recipient provides a comparable standard of protection.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy or as required by law. Contact form data is retained for a period of up to 24 months from the date of submission, after which it is securely deleted unless ongoing correspondence requires longer retention.

Automatically collected technical data is typically retained for up to 14 months in analytics systems before aggregation or deletion.

7. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete personal data.
  • Withdraw consent to processing where consent is the basis for processing.
  • Request information about how your personal data is being used.

To exercise any of these rights, please contact us in writing at [email protected]. We will respond within a reasonable time and in accordance with the PDPA's requirements. We may need to verify your identity before processing your request.

8. Cookies

Our website uses cookies to support core functionality and to understand how visitors use the site. You can manage your cookie preferences through the consent tool that appears when you first visit the website. For full details on the cookies we use, please refer to our Cookie Policy.

9. Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures include secure server configurations, access controls, and regular review of our data handling practices.

No method of transmission over the internet is completely secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last revised. Continued use of the website after any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

For questions about this Privacy Policy, contact us at [email protected].