Privacy Policy

1. Introduction

Backprop Lab (Suite 8-3, Menara Suezcap, KL Gateway, 59200 Kuala Lumpur) operates as a data user under Malaysia's Personal Data Protection Act 2010 (PDPA). This policy explains what personal data we collect, why we collect it, how we use it, and what your rights are.

This policy applies to data collected through the website at backprop.cyou, through enquiry forms, and through the enrolment process for any of our courses. If you have questions about this policy, contact us at [email protected].

2. What data we collect

We collect the following categories of personal data:

• Contact information: name, email address, phone number (if provided). Collected when you submit an enquiry form or complete enrolment.
• Course activity data: assignment submissions, code review records, written assessment records, and session attendance. Collected as part of course delivery.
• Technical data: IP address, browser type, and pages visited. Collected automatically by our web server logs.
• Cookie data: a single consent preference stored in your browser's localStorage. See Section 6 and the Cookie Policy for details.

Legal basis: Contact enquiries — consent. Course delivery — performance of a contract. Technical data — legitimate interest in operating a functional website. All processing is compliant with the PDPA 2010.

Retention: Enquiry data is retained for 24 months from the date of last contact. Course records and assessment documentation are retained for 5 years. Technical server logs are retained for 90 days.

3. How we use your data

• To respond to enquiries submitted through the website form.
• To process enrolment and deliver course materials, assignments, and written feedback.
• To produce and retain your written assessment record at course close.
• To send communications directly related to your enquiry or enrolment (not marketing).
• To maintain the security and operation of the website.

We do not use your personal data for automated decision-making or profiling. We do not sell your data or share it with third parties for commercial or marketing purposes.

4. Third-party sharing

We do not share personal data with third parties except where necessary to operate our services:

• Hosting provider: our website and data are hosted on servers operated by a commercial provider. Servers are located in Malaysia or the Asia-Pacific region.
• Cluster access provider: learners in the Transformer and Capstone courses access GPU compute through a shared cluster. You will be advised of the specific provider on enrolment.
• Legal obligation: we may disclose data if required to do so by law or in response to a lawful request by public authorities in Malaysia.

5. Data protection measures

• Data in transit is protected using TLS encryption.
• Access to personal data is restricted to staff who require it to deliver courses or respond to enquiries.
• In the event of a personal data breach that creates a risk to affected individuals, we will notify them as soon as reasonably practicable.
• We do not store payment card information. Course fees are processed through external payment facilities.

6. Cookies

This website uses a single cookie stored in localStorage to remember your consent preference. No analytics or advertising cookies are set without your agreement. See the Cookie Policy for full details.

7. Your rights under the PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• Right of access: to request a copy of the personal data we hold about you.
• Right to correction: to request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: to withdraw consent to processing at any time (this does not affect the lawfulness of processing before withdrawal).
• Right to object: to object to processing for direct marketing purposes (we do not engage in direct marketing, but the right applies).

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you believe we have not handled your data correctly, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

8. Third-party links

This website may contain links to external resources, including papers, cluster providers, and public datasets. We are not responsible for the privacy practices of those external sites. You should review their privacy policies independently before providing any personal data.

9. Children's privacy

Our courses are designed for adults with prior technical experience. We do not knowingly collect personal data from individuals under the age of 18. If you believe a person under 18 has submitted data through our site, contact us at [email protected] so we can remove it.

10. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the website after changes are posted constitutes acceptance of the updated policy. If changes are material, we will notify enrolled learners directly.

11. Contact

Data user: Backprop Lab

Address: Suite 8-3, Menara Suezcap, KL Gateway, 59200 Kuala Lumpur, Malaysia

Email: [email protected]

Phone: +60 3 7876 4192