ICMS EDUCATION GROUP PRIVACY NOTICE

PERSONAL DATA PROTECTION ACT 2010
This Privacy Policy governs the manner in which ICMS Education Group collects, uses, maintains and discloses information collected from users (each, a "User") of the www.saito.edu.my website ("Site"). This privacy policy applies to the Site and all products and services offered by ICMS Education Group.

 

Personal identification information
We may collect personal identification information from Users in a variety of ways, including, but not limited to, when Users visit our site, register on the site, subscribe to the newsletter, fill out a form, and in connection with other activities, services, features or resources we make available on our Site. Users may be asked for, as appropriate, name, email address, mailing address, phone number, religious belief, medical details, previous examination results, academic records and images (e.g. photographs). Users may, however, visit our Site anonymously. We will collect personal identification information from Users only if they voluntarily submit such information to us. Users can always refuse to supply personally identification information, except that it may prevent them from engaging in certain Site related activities.

 

Non-personal identification information
We may collect non-personal identification information about Users whenever they interact with our Site. Non-personal identification information may include the browser name, the type of computer and technical information about Users means of connection to our Site, such as the operating system and the Internet service providers utilized and other similar information.

 

Web browser cookies
For general web browsing although no personal data is revealed to ICMS, certain technical and statistical information would be made available via ICMS’s third party internet provider such as cookies, the IP address, the time, date and duration of the visit by the browser.
ICMS does not assume responsibility to verify any third party’s personal data that has been supplied to ICMS including without limitation through recommendation, referral or nomination as the consent of such third party shall be deemed to have first obtained by the data provider prior to the disclosure to ICMS.
How we use collected information
ICMS may collect personal data from its data subjects and their authorized representatives, from third parties, or from publicly available sources which may include (but is not limited to):
  • from data subjects registering details on the ICMS website for inquiries
  • from data subjects completing a new student registration form and a new student
  • information form, as well as application to register as an ICMS students
  • from data subjects communicating directly with the officers from the academic department, student enrolment or marketing unit or any of ICMS’s representatives
  • from data subjects making any financial transactions to ICMS
  • from data subjects interacting with ICMS during open days, promotions, contests, tournaments, lucky draws, or special events
  • from data subjects participating in surveys or another research
  • from data subjects applying for a job position at ICMS or from the referee(s) of data subjects
  • from data subjects’ interaction with ICMS via social media or interactive applications including but not limited to Facebook, Twitter, and Instagram
  • from third parties connected to the data subjects (payment collector, housing developer, credit reporting agencies or financial institutions); and
  • from such other sources whom the data subject has given his/her consent for the disclosure of personal data, and/or where lawfully permitted

 

Use of Personal Data Collected
ICMS will use the personal data to meet the following purposes for which such personal data may be used and further processed:
  • to communicate with the data subjects for any notification and inquiry
  • to process applications for admission and placement in ICMS as well as in local and international Higher Education Institutions
  • to verify the identity and background of the data subjects
  • to provide information and/or updates on academic and non-academic programmes
  • to respond to inquiries or complaints regarding any matters relating to ICMS
  • to fulfil practical training needs with external organizations, placement or work experience other than relevant programmes and co-curricular activities
  • for direct marketing purposes through social media such as WhatsApp, SMS, phone calls, letters, emails and/or any other communication channels
  • to send invitations or promote any of ICMS’s events, competitions, promotional activities, campaigns and launches
  • to help monitor, review and improve ICMS’s events and promotions, as well as products and/or services
  • for internal administration purposes
  • to provide training to ICMS’s employees
  • to keep and update internal records such as personal information as well as academic and non-academic records
  • to record alumni data for the purpose of graduation and alumni related events
  • to operate and process any payments related to services such as fee rates and other payments
  • to conduct market research or surveys, internal marketing analysis, customer profiling, customers’ pattern and preference analysis, planning and statistical analysis, as well as trends related to the improvement of ICMS’s programmes.
  • to share the Personal Data when required by sponsors, programmes certification bodies, local and international higher education institutions, auditors for internal auditing and reporting, as well as insurance companies to apply for and obtain insurance policy, risk and safety management, etc
  • to track, investigate and prevent frauds, forbidden activities that are illegal and unauthorized by law
  • to enable ICMS to perform its responsibilities and enforce its rights under any agreements and documents to which ICMS is a party
  • to carry out instructions or to respond to any enquiries, complaints, comments or feedback that the data subjects have submitted to ICMS
  • to protect or enforce ICMS’s rights to recover any debt owing to ICMS
  • to compile information for analysis and in reports for relevant regulatory authorities
  • to transfer or assign ICMS’s rights, interests and obligations under any of its agreements
  • to fulfil any requirements of enforced laws and rules and disclose under the requirements of any enforced laws, regulations, directives, court orders
  • guidelines, by-laws, circulars or canon law enforced or enforceable against ICMS
  • for any other purpose that is required or permitted by any law or regulations, guidelines and/or relevant regulatory authorities

 

Sharing of Personal Data
For the purposes as stated above and as a part of the provision of services and the management or operation of the same, ICMS may disclose personal data to the following third parties:
  • ministries, government agencies, law enforcement agencies, courts, tribunals
  • regulatory bodies, industry regulators, ministries, and or agencies or statutory bodies, offices or municipalities in any jurisdiction, where required or authorized to do so to comply with any law, regulation, orders or inquiry from relevant authorities such as the Ministry of Education, Immigration Department of Malaysia, foreign embassies and its appointed agencies
  • students’ sponsors including parents/guardians
  • Third parties that provide practical training
  • professional body or accreditation or examination body
  • Third parties appointed by ICMS provide services to the institution such as auditors, lawyers, suppliers, training provider companies, and insurance companies
  • immediate family members and/or individuals that may be contacted during emergencies
  • data centers and/or servers located within Malaysia for data storage purposes
  • the public to announce contest or promotion winner(s) by publishing the name, photo and any other personal data of the winner without compensation for advertising and publicity purposes
  • companies or organizations that act as ICMS’s agents, contractors, service providers or professional consultant
  • ICMS’s business associates and other parties for purposes that are related to the purpose of collecting and using personal data as stated under Clause 2.3 above; and/or
  • any individual which reasonably requires the disclosure in order to operate and
  • maintain the business or carry out the activities of ICMS
 
Retention And Transfer of Personal Data
  • ICMS has implemented security policies and technical measures to protect the personal data in accordance with such requirements of the applicable personal data protection laws and regulations. Where we consider it necessary or appropriate for the purpose of data storage or processing, ICMS may transfer the personal data to a third-party service or product providers within or outside Malaysia, under similar level of security measures
  • ICMS will also put in place reasonable measures such that the personal data in our possession or under our control is destroyed and/or anonymized as soon as it is reasonable to assume that (i) the purpose for which that personal data was collected is no longer being served by the retention of such personal data; and (ii) retention is no longer necessary for any other legal or business purposes
  • Where any personal data is to be transferred out of Malaysia, ICMS will comply with the PDPA in doing so. In this regard, this includes obtaining the data subject’s consent unless an exception under the PDPA or law applies and taking appropriate and reasonable steps to ascertain that the foreign recipient organization of the personal data is bound by legally enforceable obligations to provide to the transferred personal data a standard of protection that is at least comparable to the protection under the PDPA. This may include ICMS entering an appropriate contract with the foreign recipient organization dealing with the personal data transfer or permitting the personal data transfer without such a contract if the PDPA or law permits so.
 
Review and Changes to PDPP
ICMS may review this PDPP to ensure that it remains in adherence to laws, any significant business changes, and any suggestions and opinions from other organizations. ICMS shall review the amended policies thoroughly before announcing and implementing all the changes

 

Contacting us 
If you have any questions about this Privacy Policy, the practices of this site, or your dealings with this site, please contact us at:
 ICMS University College
www.icms.edu.my
Lot 13A & 13B, Level 13, Menara PKNS, Petaling Jaya,
No. 17, Jalan Yong Shook Lin, 46050, Petaling Jaya,
Selangor Darul Ehsan Tel.: +603-7932 5454
 
This PRIVACY POLICY last updated on 11 August 2025.