Privacy Policy

This Privacy Policy explains how Pythoria ("we", "us", or "our") collects, uses, and handles information when you use our website at pythoriagat.biz or engage with our courses and programmes. We are based at 62 Jalan Macalister, 10400 George Town, Penang, Malaysia.

We take your privacy seriously. This document is written plainly so you can understand what happens with your information without needing to parse legal language.

1. Information We Collect

We collect information in two ways: information you give us directly, and information collected automatically when you visit our site.

Information you provide

• Your name, email address, and phone number when you submit our contact form
• Messages or questions you send us directly
• Payment details when you purchase a course (processed by our payment provider — we do not store card details ourselves)
• Any information you share in course discussions or by email

Information collected automatically

• Browser type, operating system, and device information
• IP address and general geographic location (country or city level)
• Pages visited, time spent, and navigation patterns on our site
• Referring URLs (which site or search led you here)
• Cookie data — see our Cookie Policy for details

2. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and provide course-related support
• To process enrolments and send you course materials
• To communicate updates about your course, upcoming sessions, or programme milestones
• To improve our website and course content based on how people use them
• To send occasional emails about new courses or school updates — you can opt out at any time
• To meet legal obligations under Malaysian law, including the Personal Data Protection Act 2010 (PDPA)

We do not sell your personal data. We do not share it with third parties for their own marketing purposes.

3. Legal Basis for Processing

We process your personal data under the following grounds:

• Consent — when you submit a contact form or sign up for course updates
• Contractual necessity — when processing is needed to deliver a course you have paid for
• Legitimate interests — for basic site analytics and improving our services, where these interests do not override your rights
• Legal obligation — where required by Malaysian law or regulation

4. Sharing Your Information

We may share your information with:

• Payment processors — to handle transactions securely
• Email service providers — to send course communications
• Analytics services — to understand how our site is used (data is aggregated and pseudonymised where possible)
• Authorities — if required by law or to protect rights and safety

All third parties we work with are required to handle your data in a manner consistent with this policy.

5. Data Retention

We keep your personal data for as long as needed to fulfil the purposes described in this policy, or as required by law. If you have taken a course with us, we retain relevant records for a reasonable period for administrative and support purposes. If you would like us to delete your data sooner, you are welcome to contact us.

6. Your Rights

Under the Malaysian Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for marketing communications at any time
• Request that we limit how we process your data in certain circumstances
• Ask us to delete your data, where no legal obligation requires us to keep it

To exercise any of these rights, please contact us at [email protected] or by phone at +60 4 228 9047. We aim to respond within 14 working days.

7. Cookies

Our website uses cookies and similar technologies. For a full explanation of what cookies we use and how to manage them, please read our Cookie Policy.

8. Security

We take reasonable technical and organisational steps to protect your personal data from loss, misuse, or unauthorised access. Our website uses HTTPS encryption. Payment data is handled by our payment processor and is not stored on our servers. No system is entirely without risk, but we review and update our security practices regularly.

9. International Transfers

Some of our service providers (such as analytics tools or email platforms) may process data outside of Malaysia. Where this occurs, we take steps to ensure that data is handled with a comparable level of protection.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If changes are significant, we will make a reasonable effort to notify enrolled learners by email. Continued use of our site or courses after an update means you accept the revised policy.

11. Contact

If you have any questions about this policy or how we handle your data, please get in touch: