Privacy Policy
Your privacy matters to us. This comprehensive policy explains how Castrivandelo collects, uses, protects, and manages your personal information in accordance with Malaysian privacy laws and international standards.
Information Collection and Use
At Castrivandelo, we collect various types of information to provide and improve our virtualization and containerization education services. We gather personal information when you register for courses, create an account, subscribe to our newsletters, or interact with our learning platform. This includes your name, email address, phone number, educational background, and professional experience relevant to IT infrastructure.
We collect this information through various means including direct input during registration, automated collection through our learning management system, and optional surveys to improve our educational offerings. All data collection serves specific purposes related to delivering quality education in virtualization technologies like VMware, Docker, Kubernetes, and container orchestration.
Data Processing and Legal Basis
Under Malaysian Personal Data Protection Act 2010 and international privacy standards, we process your personal data based on legitimate interests and your explicit consent. When you enroll in our courses or use our services, you provide consent for processing necessary to deliver educational content and support your learning journey.
We process personal data only for specified, explicit, and legitimate purposes related to IT education and never use your information for unrelated commercial activities without your explicit consent.
Your information helps us customize learning experiences, track progress through certification programs, provide technical support, and communicate important updates about virtualization industry trends. We analyze learning patterns to identify areas where students commonly struggle, allowing us to improve course content and teaching methods.
For prospective students, we process contact information to provide course information, schedule consultations, and send relevant educational content about container technologies and virtualization concepts. This processing occurs only with your consent and you can withdraw consent at any time through your account settings or by contacting our privacy team.
Data Sharing and Third-Party Relationships
Castrivandelo does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share data only in specific circumstances essential to providing our educational services or when required by law. Our partnerships with technology companies and certification bodies may involve limited data sharing to verify completion of training programs.
All third-party relationships involve strict contractual agreements requiring them to maintain the same level of data protection we provide. These partners cannot use your data for their own purposes and must delete information when their services are no longer needed. We regularly audit these relationships to confirm compliance with privacy standards.
Your Privacy Rights and Control
You have comprehensive rights regarding your personal data, and we've designed easy ways for you to exercise these rights. Whether you want to review what information we have, correct inaccuracies, or completely remove your data from our systems, we provide straightforward processes to respect your privacy choices.
To exercise these rights, log into your account dashboard where you can manage most privacy settings directly. For complex requests or if you need assistance, contact our privacy team at info@Castrivandelo.sbs. We respond to all privacy requests within 30 days and provide detailed explanations of any actions taken.
Note: Some data may be retained for legitimate business purposes such as maintaining certification records or complying with legal requirements, even after deletion requests.
Data Security and Protection Measures
We implement comprehensive technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security framework follows industry best practices and undergoes regular security audits to maintain the highest protection standards for student information.
All data transmissions use TLS encryption, and we store information in encrypted databases with restricted access controls. Our staff receive regular privacy training and access personal data only when necessary for their job functions. We maintain detailed logs of data access and conduct regular security assessments to identify and address potential vulnerabilities.
Our learning management system uses multi-factor authentication, regular security patches, and automated monitoring for suspicious activities. We backup data regularly but ensure these backups maintain the same encryption and access controls as primary systems. In the unlikely event of a data breach, we have procedures to notify affected individuals and relevant authorities within required timeframes.
Data Retention and Deletion
We retain personal data only as long as necessary to fulfill the purposes for which it was collected or as required by Malaysian law and international regulations. Different types of information have different retention periods based on their purpose and legal requirements.
When retention periods expire, we securely delete data using industry-standard deletion methods that make recovery impossible. For certification-related records that must be maintained longer, we minimize data to only what's legally required and implement additional access restrictions.
International Data Transfers
As an educational platform serving students globally, we may transfer personal data outside Malaysia to provide our services effectively. All international transfers comply with Malaysian data protection laws and include appropriate safeguards to protect your privacy rights.
When we transfer data internationally, we use standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms. Our cloud infrastructure partners maintain certifications and comply with international privacy frameworks. We ensure that data transferred abroad receives protection equivalent to Malaysian privacy standards.
You have the right to be informed about international transfers affecting your data and can object to transfers that don't meet adequate protection standards.
Cookies and Tracking Technologies
Our website and learning platform use cookies and similar technologies to enhance your experience, remember your preferences, and analyze how you interact with our content. We use both essential cookies required for basic functionality and optional cookies that help us improve our services.
Essential cookies enable core website features like user authentication and course progress tracking. Analytics cookies help us understand which content is most valuable and where students encounter difficulties. Preference cookies remember your settings like language selection and course bookmarks. Marketing cookies, used only with your consent, help us provide relevant course recommendations.
You can control cookie settings through your browser preferences or our cookie management tool available on every page. Disabling certain cookies may affect website functionality, but you'll always be able to access essential educational content and services.
Privacy Policy Updates
We review and update this privacy policy regularly to reflect changes in our services, legal requirements, or privacy best practices. When we make significant changes that affect how we collect, use, or protect your personal data, we'll notify you through email and prominent website notices.
Minor updates that don't materially affect your rights may be posted without individual notification, but we'll always indicate the revision date at the top of this policy. We encourage you to review this policy periodically to stay informed about how we protect your privacy.
Current policy version effective: January 15, 2025. Previous version archived and available upon request.