Your name, email address, phone number and city, given at sign-up. Your purchase records and learning progress. If you join the affiliate programme, your bank name, account number and account holder name. Bank account numbers are encrypted at rest and shown as the last four digits only.
To give you access to the classes you buy, track progress and issue certificates, process payments through CHIP Collect, send receipts and verification codes, and pay affiliate commission.
Payment data is shared with CHIP Collect (chip-in.asia) to process transactions. Email is sent through our email provider. We do not sell your personal data to anyone.
Session and CSRF cookies are required for login and cannot be turned off. An affiliate referral cookie is stored for 30 days when you arrive through an affiliate link, and you can decline it in the consent banner.
Payment records and invoices are kept for seven years as Malaysian tax law requires. Verification codes are deleted a week after they expire. Affiliate click records are deleted after 180 days.
You have the right to access, correct and withdraw consent for your personal data. Because tax law requires us to retain invoice records, deletion requests are carried out by anonymising your account — personal data is scrubbed, and payment records remain without being linked to you.
If a data breach occurs that puts you at risk, we will notify affected users and the authorities within the period the law requires.
Any question or request about personal data can be sent to support@smootea.my.
We use cookies