Privacy Policy

Last updated: 29 September 2026

Identity and Role of the Data Controller

lessonvizo operates this non-commercial informational website focused on course programming topics. We act as the data controller under Malaysia's Personal Data Protection Act 2010 (PDPA) for any personal data collected through the site. Our role includes determining the purposes and means of processing visitor information to provide educational resources and maintain site functionality.

Scope of the Notice and the People It Covers

This privacy notice applies to all visitors accessing the website from Malaysia or elsewhere, including individuals who submit inquiries via the contact form, read blog articles, or interact with the cookie banner. It covers personal data of users who are at least 18 years old, as the site does not target minors.

Categories of Personal Data and Sources

We collect data such as name, email address, and message content when users voluntarily submit the contact form. Cookie preferences and basic usage data like IP address or browser type may be gathered automatically through the cookie banner and site analytics. Sources include direct input from visitors and technical logs generated during site access. No data is obtained from third-party brokers or public records.

Purpose-by-Purpose Explanation of Processing and Legal Basis

Processing occurs for several distinct purposes. First, responding to contact form submissions relies on consent as the legal basis to handle inquiries about course programming topics. Second, maintaining the blog and site content uses legitimate interests to deliver informational resources. Third, cookie management for essential functions is based on legitimate interests to ensure basic website operation, while non-essential cookies require consent. Each purpose is limited to what is necessary for the site's non-commercial informational role.

Whether Providing Data Is Required and Consequences

Providing personal data through the contact form is entirely voluntary. Users who choose not to supply details will simply be unable to receive a response to their inquiry, but they can still access all blog posts and other public content without restriction. No mandatory fields exist beyond what is needed for the specific interaction chosen by the visitor.

Cookies and Similar Technologies

The site employs cookies and similar tracking technologies as indicated by the site-wide cookie banner. Essential cookies support core functions such as form submission, while optional ones may track usage for improvement. A separate Cookie Policy provides full details on types, durations, and management options; visitors should review that document for complete information.

Processors, Service-Provider Categories, Recipients, and Disclosures Required by Law

Personal data may be shared with service providers acting as processors, such as hosting providers or email delivery services necessary for site operation. Categories include technical infrastructure support and analytics tools. Disclosures occur only when required by Malaysian law, such as in response to valid legal requests from authorities, and never for commercial sale or unrelated marketing.

International Transfers and Safeguards

Some processors may be located outside Malaysia, resulting in international transfers of personal data. In such cases, lessonvizo ensures appropriate safeguards consistent with PDPA requirements, including contractual protections that maintain equivalent levels of data protection for transferred information.

Specific Retention Periods or Criteria

Contact form data is retained only as long as needed to address the inquiry, typically up to 12 months, after which it is securely deleted. Usage logs and cookie data follow shorter periods aligned with their purpose, such as 30 days for analytics unless consent is withdrawn earlier. Retention criteria always prioritize data minimisation and legal compliance.

Security and Data-Minimisation Practices

Reasonable technical and organisational measures protect personal data against unauthorised access or loss, including encryption for form submissions and restricted internal access. Data minimisation is applied by collecting only information directly relevant to each purpose, avoiding unnecessary details wherever possible.

All Applicable Data-Subject Rights and Practical Exercise Method

Under the PDPA, individuals may request access, correction, or deletion of their personal data. To exercise these rights, contact [email protected] or use the details at Suite 33-01, 33rd Floor, Menara Keck Seng, 203 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia and +603-2116 5778. Requests are handled within the timelines specified by Malaysian regulations, and verification of identity may be required to protect data security.

Right to Withdraw Consent and Object to Direct Marketing or Profiling

Where processing relies on consent, such as for optional cookies, users may withdraw it at any time via the cookie banner or by contacting us. The site does not engage in direct marketing or profiling activities, so no specific objection mechanism for those purposes applies, though general contact options remain available for any concerns.

Right to Complain to the Competent Supervisory Authority

Visitors who believe their data protection rights have been infringed may lodge a complaint with the Personal Data Protection Commissioner in Malaysia. Contact details for the authority are available on official government resources, and we encourage attempting resolution directly with lessonvizo first using [email protected].

Children or Age Restrictions

The website and its blog content are intended for adult audiences interested in course programming. We do not knowingly collect personal data from individuals under 18 years of age. If such data is discovered, it will be deleted promptly upon notification.

Automated Decision-Making and Profiling

No automated decision-making or profiling occurs on this site. All processing involves manual review where personal data is involved, such as responding to contact inquiries, ensuring human oversight at every step.

Policy Changes and Effective Date

This policy may be updated periodically to reflect changes in law or site operations. The last updated date appears at the top of the page. Continued use of the site after updates constitutes acceptance of the revised terms, and significant changes will be highlighted via the cookie banner or site notices.