CDE Flash Card respects your privacy. This Privacy Policy explains how [REGISTERED COMPANY NAME], operating as CDE Flash Card ("CDE Flash Card", "we", "us" or "our"), collects, uses, stores, discloses and protects personal data when you use our website, application, account, subscriptions, customer support and related services.
CDE Flash Card accounts are intended to be created and managed by parents, legal guardians or other authorised adults. Children should use the learning content only under adult supervision and should not submit personal data directly to us.
The personal data we collect depends on how you use CDE Flash Card.
• Any other information you choose to provide through our forms or services
Payments may be processed by [PAYMENT PROVIDER NAME]. The payment provider may collect payment-card, bank, electronic-wallet, billing, fraud-prevention and transaction information under its own privacy policy. We generally receive limited details such as payment status, transaction reference, subscription type and payment date. We do not directly store complete payment-card details unless clearly stated at the point of collection.
• Device type, device identifiers, browser, operating system and language settings
We do not require a child to provide a full name, email address, telephone number, photograph, school information or precise location to access learning content. Parents and guardians should avoid submitting unnecessary child-identifying information. If we learn that personal data was submitted by a child without appropriate adult involvement, we will take reasonable steps to review and remove it where required.
We may collect personal data directly from you when you create an account, subscribe, make a payment, contact us, complete a form or use the service. We may also receive data automatically through our website or app and from service providers such as payment, authentication, hosting, analytics and customer-support providers.
• Send promotional communications where permitted and according to your preferences
We process personal data with your consent where consent is required, to provide services you request, to meet legal obligations and for legitimate operational purposes permitted by applicable law. You may withdraw consent for future processing where the processing depends on consent, but withdrawal does not affect processing already carried out lawfully and may limit our ability to provide certain services.
We may use cookies, software development kits, pixels, local storage and similar technologies to keep users signed in, remember preferences, maintain security, measure performance, diagnose problems and understand how the service is used.
Essential technologies support core functions. Analytics, functionality or marketing technologies will be used in accordance with applicable requirements and any controls made available to you. You may adjust browser or device settings, although disabling certain technologies may affect service functionality.
We do not sell or rent personal data. We may disclose personal data when reasonably necessary to the following recipients:
• Authorities, regulators or law-enforcement bodies where disclosure is legally required
• A buyer, investor or successor in connection with a proposed or completed business transaction, subject to appropriate safeguards
[HOSTING PROVIDER], [DATABASE OR AUTHENTICATION PROVIDER], [PAYMENT PROVIDER], [ANALYTICS PROVIDER], [EMAIL PROVIDER] and [CUSTOMER SUPPORT PROVIDER].
Some service providers may process or store personal data outside Malaysia. Where personal data is transferred internationally, we will take reasonable steps and apply safeguards required by Malaysian law. These may include assessing the destination and provider, contractual protection, security controls and other legally recognised transfer conditions.
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including providing the service, maintaining accounts and subscriptions, processing transactions, resolving disputes, preventing fraud and meeting legal, tax, accounting and regulatory obligations.
Retention periods vary by data type. When information is no longer required, we will take reasonable steps to delete, destroy or anonymise it, subject to lawful record-keeping needs.
We use reasonable administrative, technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, disclosure or destruction. Measures may include access controls, authentication, secure hosting, backups, monitoring and confidentiality requirements.
No online system is completely secure. If a personal data breach occurs, we will investigate and notify the relevant authority and affected individuals where required by applicable law.
Subject to applicable law and permitted exceptions, you may ask us to:
• Close your account or delete personal data that we are not legally required to retain
• Transfer personal data to another data controller where a legal portability right applies
• Explain our handling of your personal data or review a privacy complaint
Submit requests to [PRIVACY EMAIL ADDRESS]. We may verify your identity before acting and may retain certain records where required for legal, security, accounting, fraud-prevention or dispute-resolution purposes.
We may send educational updates, product news or promotional offers where you have consented or where otherwise permitted by law. You can opt out through an unsubscribe link, account preference or by contacting [SUPPORT OR PRIVACY EMAIL]. You may still receive essential messages concerning your account, payment, security or subscription.
You may request account closure through any account-deletion feature provided in the service or by contacting [SUPPORT EMAIL ADDRESS]. Closing an account may end access to subscription content and saved preferences. We may retain limited records where legally required or reasonably necessary to protect the service, resolve disputes or enforce agreements.
The service may link to external websites, applications or services. We do not control their privacy practices. Please review the privacy notice of any third party before providing personal data.
We may update this Privacy Policy when our services, data practices, providers or legal obligations change. The revised policy will be posted with a new Last Updated date. Where a change materially affects how we handle personal data, we may provide additional notice through the service or registered email address where appropriate.
CDE Flash Card, operated by [REGISTERED COMPANY NAME], [REGISTERED BUSINESS ADDRESS]. Privacy email: [PRIVACY EMAIL ADDRESS]. Support email: [SUPPORT EMAIL ADDRESS].
If you are dissatisfied with our response, you may contact the Personal Data Protection Commissioner of Malaysia, subject to the procedures and rights available under applicable law.
This Privacy Policy may be provided in Bahasa Malaysia, English and other languages. If translated versions differ, the version designated by us as controlling will apply only to the extent permitted by law. Nothing in this section limits any mandatory language or notice requirement under Malaysian law.
