Privacy Policy
This policy explains how CoreHub Education Group Sdn. Bhd. ("CoreHub", "we", "us") handles personal data collected through corehub.my and our counselling services, in line with the Personal Data Protection Act 2010 of Malaysia ("PDPA").
1. What we collect
When you submit an enquiry, book a session or engage our advisory services, we may collect: your name, email address, phone number, academic results and transcripts, intended field and destination of study, household income band (only where relevant to scholarship screening, and only with your consent), and correspondence between you and our advisors.
Our website also records limited technical data — browser type, pages visited and approximate region — as described in our Cookie Policy.
2. Why we collect it
- To respond to enquiries and schedule counselling sessions;
- To prepare course shortlists, cost comparisons and scholarship eligibility assessments;
- To submit applications to universities and colleges on your instruction;
- To assist with student visa documentation where you ask us to;
- To meet legal and audit obligations applying to Malaysian companies.
We do not sell personal data, and we do not send marketing about unrelated products.
3. Who we share it with
Data is disclosed only as needed to deliver the service you requested: to universities and colleges you choose to apply to; to visa processing bodies (such as EMGS or destination-country immigration services) where you engage our visa support; and to IT providers who host our systems under confidentiality obligations. Where a disclosure involves transferring data outside Malaysia — for example, to an Australian university's admissions office — we do so only to fulfil your application.
4. How long we keep it
Enquiry records that do not lead to an engagement are deleted within 24 months. Files of students we assist are retained for 7 years after the engagement closes, reflecting audit and dispute-resolution timelines, then securely destroyed.
5. Your rights under the PDPA
You may request access to the personal data we hold about you, ask for corrections, or withdraw consent to further processing. Withdrawal may mean we can no longer act on pending applications — we will explain the consequences before actioning it. Requests go to [email protected] or in writing to our registered address, and we respond within 21 days.
6. Security
Student records are stored on access-controlled systems with encryption at rest. Paper documents provided during sessions are scanned and the originals returned or shredded. Access is limited to advisors working on your file.
7. Minors
Many of our clients are under 18. For students below that age we require a parent or guardian to consent to data collection, and we encourage parents to attend counselling sessions.
8. Changes to this policy
We revise this policy as our services or the law change. The revision date at the top of this page always reflects the current version, and material changes are highlighted on this page for 30 days.
9. Contact
CoreHub Education Group Sdn. Bhd. (202101032874 / 1428815-D)
B-07-10, Block B, PJ Trade Centre, 8 Jalan PJU 8/8A, Bandar Damansara Perdana, 47820 Petaling Jaya, Selangor, Malaysia
Phone: +60 3-7498 2214 · Email: [email protected]