Privacy notice

Last updated: 28 October 2026

This notice explains how UVW Group Sdn. Bhd. processes your personal data in line with the Personal Data Protection Act 2010.

1. Data we collect

• Account: name, email and password (stored hashed; we cannot see it).
• Certificate: full name and, if your employer requires it, your IC number.
• Training: clips attempted, tap times, scores, follow-up answers and active time.
• Company: company and cohort name, if you join through a company programme.
• Payment: processed by Stripe. We receive the payment status and buyer email, not card numbers.
• Enquiries: the name, company, email and phone you enter in forms.
• Free users without an account: scores stay in your browser only.

2. Purposes

• Running the course, scoring, and issuing and verifying certificates.
• Reporting progress to the employer funding your programme.
• Processing payments, invoices and refunds.
• Answering enquiries and providing support.
• Improving the course using anonymous statistics.

We do not sell your data or use it for third-party advertising.

3. Disclosure

• Your employer, if you join with a company cohort code: name, progress, scores and certificate status.
• Anyone verifying your certificate by number or QR code: name, route, date and validity only.
• Service providers: Supabase (database, Singapore data centre), Vercel (hosting), Stripe (payments) and Resend (email). Data may be transferred outside Malaysia for these purposes.
• Authorities where required by law.

4. Retention

Training and certificate records are kept for the certificate's validity plus one year, then deleted or anonymised. Payment records are kept as long as tax law requires.

5. Your rights

You may ask to access, correct or delete your data, or withdraw consent, by contacting us. Deleting your account cancels your course access and certificate.

6. Security

Data is stored with role-based access control and scores are computed on the server. No system is completely secure; tell us immediately if you suspect your account has been misused.

7. Contact

Personal data enquiries: contact us as above.