Privacy Policy

1. Introduction

Nullabyte ("we", "us", "our") operates as an online school for AI development, based at 9 Lorong Abu Siti, 10400 George Town, Pulau Pinang, Malaysia. This Privacy Policy describes how we collect, use, store, and protect personal information provided to us through our website and in connection with our course enrolment and delivery processes.

This policy applies to all visitors to our website at nullabyt.blog and to all learners enrolled in any of our course tracks. By using the site or enrolling in a track, you acknowledge that you have read this policy.

For questions about this policy or about your personal data, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, and optionally phone number, submitted through our enquiry form or provided during enrolment.
• Course submission data: exercise files, code, and written work submitted by learners as part of assessed components.
• Communication records: messages sent to us via email or our contact form, and messages exchanged in the cohort channel.
• Usage data: standard server log data including IP address, browser type, pages visited, and timestamps, collected automatically when you access the site.
• Cookie data: cookie consent preference stored in your browser's localStorage. See Section 5 and our Cookie Policy for details.

Legal basis for processing (Malaysia PDPA 2010): We process contact information on the basis of your consent (submitted via the enquiry form) and to fulfil a contract (enrolment and course delivery). Usage data is processed on the basis of our legitimate interest in maintaining and improving the website. We comply with the Personal Data Protection Act 2010 (Malaysia).

Retention: Contact enquiry data is retained for 12 months if enrolment does not follow. Learner course data and submission records are retained for 36 months following the end of the relevant cohort period, after which they are deleted or anonymised.

3. How We Use Your Data

• To respond to enquiries and provide information about our course tracks.
• To process enrolment, manage cohort access, and deliver course materials.
• To carry out assessment and provide tutor feedback on submitted work.
• To issue written records of course completion to learners who have passed the relevant assessments.
• To send administrative communications about the cohort schedule, material updates, or changes to terms.
• To analyse aggregated, anonymised usage patterns for the purpose of improving the site and course materials. Individual learners are not identified in this analysis.

We do not use your personal data for unsolicited marketing. If you provide your email address via the enquiry form, we may send one follow-up message about enrolment if you have not responded. You may request that we stop at any time by emailing [email protected].

4. Data Sharing

We do not sell personal data. We share data only in the following limited circumstances:

• Tutors and mentors: Course submission data and cohort channel messages are accessible to the Nullabyte tutors and mentors assigned to your cohort for assessment and feedback purposes.
• Hosting and infrastructure providers: Our website and course platform are hosted on third-party servers. These providers process data only as instructed by us and under contractual data processing agreements.
• Analytics: We may use privacy-respecting analytics tools that process anonymised usage data. No personally identifiable data is shared with analytics providers.
• Legal obligation: We will disclose personal data if required to do so by applicable Malaysian law or a valid legal process.

5. Cookies

Our website uses cookies and similar technologies. We store your cookie consent preference in your browser's localStorage under the key cookieConsent. This is an essential function and does not require your consent to operate.

We may use analytics cookies if you consent to them via the cookie banner. For a full explanation of the cookies we use and how to manage your preferences, see our Cookie Policy.

6. Data Protection Measures

• Data in transit is encrypted using TLS. Data at rest is stored on servers with access controls restricting access to authorised personnel.
• Access to learner submission data is limited to the tutors assigned to the relevant cohort.
• We conduct periodic reviews of our data handling practices.
• In the event of a data breach that is likely to affect your rights, we will notify affected individuals and, where required by law, the relevant Malaysian authority, within the timeframes required under the Personal Data Protection Act 2010.

7. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.
• Right to limit processing: In certain circumstances, you may request that we restrict the use of your data.
• Right to erasure: You may request deletion of your personal data, subject to any legal obligations that require us to retain it.

To exercise any of these rights, email [email protected]. We will respond within 21 days. If you are not satisfied with our response, you may contact the Department of Personal Data Protection Malaysia (www.pdp.gov.my).

8. Third-Party Links

Our website and course materials may include links to external sites, including documentation, tool repositories, and cloud provider portals. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal data.

9. Children's Privacy

Our courses are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact [email protected] and we will delete the data promptly.

10. Updates to This Policy

We may update this policy from time to time. When we do, the revised policy will be published at this URL with an updated "Last Updated" date. For enrolled learners, we will send a notification email if changes materially affect how we handle your data. Continued use of the site after the effective date constitutes acceptance of the updated policy.