Castrivandelo Logo
Virtualization Excellence

Privacy Policy

Your privacy matters to us. This comprehensive policy explains how Castrivandelo collects, uses, protects, and manages your personal information in accordance with Malaysian privacy laws and international standards.

Information Collection and Use

At Castrivandelo, we collect various types of information to provide and improve our virtualization and containerization education services. We gather personal information when you register for courses, create an account, subscribe to our newsletters, or interact with our learning platform. This includes your name, email address, phone number, educational background, and professional experience relevant to IT infrastructure.

Personal Data Categories
Contact information including full name, email address, and phone number for course enrollment and communication
Professional background details such as current job role, experience level, and technical skills assessment
Educational preferences including learning pace, preferred study times, and course interests
Technical information about your device, browser type, IP address, and platform usage patterns
Payment information processed through secure third-party payment processors for course fees

We collect this information through various means including direct input during registration, automated collection through our learning management system, and optional surveys to improve our educational offerings. All data collection serves specific purposes related to delivering quality education in virtualization technologies like VMware, Docker, Kubernetes, and container orchestration.

Data Processing and Legal Basis

Under Malaysian Personal Data Protection Act 2010 and international privacy standards, we process your personal data based on legitimate interests and your explicit consent. When you enroll in our courses or use our services, you provide consent for processing necessary to deliver educational content and support your learning journey.

We process personal data only for specified, explicit, and legitimate purposes related to IT education and never use your information for unrelated commercial activities without your explicit consent.

Processing Activities

Your information helps us customize learning experiences, track progress through certification programs, provide technical support, and communicate important updates about virtualization industry trends. We analyze learning patterns to identify areas where students commonly struggle, allowing us to improve course content and teaching methods.

For prospective students, we process contact information to provide course information, schedule consultations, and send relevant educational content about container technologies and virtualization concepts. This processing occurs only with your consent and you can withdraw consent at any time through your account settings or by contacting our privacy team.

Data Sharing and Third-Party Relationships

Castrivandelo does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share data only in specific circumstances essential to providing our educational services or when required by law. Our partnerships with technology companies and certification bodies may involve limited data sharing to verify completion of training programs.

Authorized Data Sharing
Educational technology partners who provide learning management system infrastructure and course delivery platforms
Payment processors handling secure transaction processing for course enrollments and certification fees
Certification authorities when students complete programs and require official recognition of their achievements
Cloud service providers hosting our educational content and student progress data in secure environments
Analytics services helping us understand learning effectiveness and platform performance

All third-party relationships involve strict contractual agreements requiring them to maintain the same level of data protection we provide. These partners cannot use your data for their own purposes and must delete information when their services are no longer needed. We regularly audit these relationships to confirm compliance with privacy standards.

Your Privacy Rights and Control

You have comprehensive rights regarding your personal data, and we've designed easy ways for you to exercise these rights. Whether you want to review what information we have, correct inaccuracies, or completely remove your data from our systems, we provide straightforward processes to respect your privacy choices.

Your Rights Include
Access to view all personal data we store about you, including learning progress and account history
Rectification to correct any inaccurate or incomplete information in your profile or records
Erasure (right to be forgotten) to request deletion of your personal data when no longer needed
Portability to receive your data in a machine-readable format for transfer to other services
Restriction of processing to limit how we use your data while maintaining your account
Objection to certain types of data processing, particularly for direct marketing purposes

To exercise these rights, log into your account dashboard where you can manage most privacy settings directly. For complex requests or if you need assistance, contact our privacy team at info@Castrivandelo.sbs. We respond to all privacy requests within 30 days and provide detailed explanations of any actions taken.

Note: Some data may be retained for legitimate business purposes such as maintaining certification records or complying with legal requirements, even after deletion requests.

Data Security and Protection Measures

We implement comprehensive technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security framework follows industry best practices and undergoes regular security audits to maintain the highest protection standards for student information.

Security Implementations

All data transmissions use TLS encryption, and we store information in encrypted databases with restricted access controls. Our staff receive regular privacy training and access personal data only when necessary for their job functions. We maintain detailed logs of data access and conduct regular security assessments to identify and address potential vulnerabilities.

Our learning management system uses multi-factor authentication, regular security patches, and automated monitoring for suspicious activities. We backup data regularly but ensure these backups maintain the same encryption and access controls as primary systems. In the unlikely event of a data breach, we have procedures to notify affected individuals and relevant authorities within required timeframes.

Data Retention and Deletion

We retain personal data only as long as necessary to fulfill the purposes for which it was collected or as required by Malaysian law and international regulations. Different types of information have different retention periods based on their purpose and legal requirements.

Retention Periods
Student account information retained for 7 years after last activity to maintain certification records
Course completion data and certificates maintained permanently for verification purposes
Marketing communications data deleted within 2 years of unsubscribing or account closure
Technical logs and analytics data purged after 24 months unless needed for security investigations
Payment transaction records kept for 7 years to comply with financial regulations

When retention periods expire, we securely delete data using industry-standard deletion methods that make recovery impossible. For certification-related records that must be maintained longer, we minimize data to only what's legally required and implement additional access restrictions.

International Data Transfers

As an educational platform serving students globally, we may transfer personal data outside Malaysia to provide our services effectively. All international transfers comply with Malaysian data protection laws and include appropriate safeguards to protect your privacy rights.

When we transfer data internationally, we use standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms. Our cloud infrastructure partners maintain certifications and comply with international privacy frameworks. We ensure that data transferred abroad receives protection equivalent to Malaysian privacy standards.

You have the right to be informed about international transfers affecting your data and can object to transfers that don't meet adequate protection standards.

Cookies and Tracking Technologies

Our website and learning platform use cookies and similar technologies to enhance your experience, remember your preferences, and analyze how you interact with our content. We use both essential cookies required for basic functionality and optional cookies that help us improve our services.

Cookie Categories

Essential cookies enable core website features like user authentication and course progress tracking. Analytics cookies help us understand which content is most valuable and where students encounter difficulties. Preference cookies remember your settings like language selection and course bookmarks. Marketing cookies, used only with your consent, help us provide relevant course recommendations.

You can control cookie settings through your browser preferences or our cookie management tool available on every page. Disabling certain cookies may affect website functionality, but you'll always be able to access essential educational content and services.

Privacy Policy Updates

We review and update this privacy policy regularly to reflect changes in our services, legal requirements, or privacy best practices. When we make significant changes that affect how we collect, use, or protect your personal data, we'll notify you through email and prominent website notices.

Minor updates that don't materially affect your rights may be posted without individual notification, but we'll always indicate the revision date at the top of this policy. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

Current policy version effective: January 15, 2025. Previous version archived and available upon request.

Privacy Questions and Contact

For privacy-related questions, data requests, or concerns about how we handle your personal information, please contact our dedicated privacy team.
Phone: +6089215700
Address: 22, Jalan USJ 4/9g, Usj 4, 47600 Subang Jaya, Selangor, Malaysia
We respond to all privacy inquiries within 30 days and provide updates if additional time is needed for complex requests.