Privacy policy.

Who we are.

This site is operated by Zestplex Education Sdn Bhd (registration 202401026457 (1626845-V)), with offices at Wisma Cybercentral, Persiaran Multimedia, Cyberjaya, 63000 Selangor, Malaysia. We act as data controller for the information collected through this website and during our advisory engagements.

Information we collect.

• Enquiry data. Name, email, phone, destination interest, current stage in the application process, and free-text message you provide via our contact form.
• Advisory file data. Once you become a client, academic transcripts, identity documents, scholarship applications, visa paperwork and correspondence with universities.
• Usage data. Anonymous information about how visitors navigate the site (pages viewed, broad geographic region, device type). Collected only with your cookie consent.

Why we collect it.

• To respond to your enquiry and provide the advisory services you request.
• To submit applications, scholarship documents and visa paperwork to third parties (universities, government bodies, panel physicians) on your behalf with your explicit consent for each transmission.
• To send service updates and event invitations — only where you have explicitly opted in.
• To meet our regulatory obligations under MoHE, MQA and partner-university audit requirements.

Who has access.

Only Zestplex employees and contractors who require access to provide the service you have requested. We do not sell personal data and we do not pass it to marketing partners. We share data with universities and immigration authorities only on a per-application basis with your explicit instruction.

How long we keep it.

• Unanswered enquiries: 12 months from the date of your last message.
• Client advisory files: 7 years from the date of your last application, in line with audit retention requirements.
• Marketing-consent records: held for as long as you remain subscribed, plus 24 months of removal evidence after you opt out.

Your rights under PDPA 2010.

The Personal Data Protection Act 2010 (Act 709) gives you the following rights, which Zestplex respects:

• The right to access the personal data we hold about you.
• The right to correct inaccurate or incomplete data.
• The right to limit how we process your data.
• The right to withdraw consent for marketing communications at any time.
• The right to lodge a complaint with the Department of Personal Data Protection (JPDP).

To exercise any of these rights, email our data protection lead at [email protected] with a copy of your IC for identity verification.

Security.

Personal data is stored on Malaysian-hosted servers with TLS 1.3 encryption in transit. Client files (transcripts, identity documents) are stored in a dedicated encrypted document management platform with named-user access logs. Backups are kept on encrypted off-site media for 90 days.

Cookies.

See our cookie policy for full details on what we set and why.

Changes to this policy.

We review this policy each January and after any material change in how we handle data. The "last updated" date at the top reflects the most recent revision.

Get in touch about privacy.

Email [email protected] or call +60 3-8312 4670. Address postal correspondence to: Data Protection, Zestplex Education Sdn Bhd, Wisma Cybercentral, Suite 12-3, Persiaran Multimedia, Cyberjaya, 63000 Selangor, Malaysia.