NEW ERA UNIVERSITY COLLEGE (NEUC)
CUSTOMER, VISITOR & DONOR PRIVACY POLICY

1. Introduction

In compliance with the Personal Data Protection Act 2010 (PDPA, “the Act”) and its regulations, this Policy is issued to all customers, visitors and donors of New Era University College (“NEUC”, the University College, “we”, “our”, or “us”), a private higher education institution fully owned by New Era Edu Sdn. Bhd. This Policy informs you of your rights in relation to your personal data that has been and/or will be collected and processed by NEUC.
 

2. Collection of Personal Data

We collect and will continue to collect your personal data in relation to your purchase of our courses or products, engagement with our services, participation in our programmes or events, and/or your visit to our premises. Such personal data is necessary for us to facilitate transactions, provide services, manage registrations, ensure operational and administrative efficiency, and comply with applicable laws, regulations, and internal policies.
 

3. Description of Personal Data

The personal data processed may include, but is not limited to:

1. Customer (Purchases and Service Engagement – Online and Offline)
   For customers who purchase our courses or products or otherwise engage with our services (whether online or offline), we may process:
   • Identification details (e.g. name, identification card or passport number, date of birth, gender, nationality);
   • Contact information (e.g. address, email address, phone number);
   • Transaction and payment information (e.g. billing details, payment records, invoices, and purchase history);
   • Service and registration information (e.g. course enrolment details, account records, and service usage information);
   • System and interaction data (e.g. website usage data, login records, and service interaction logs, where applicable);
   • Any other information voluntarily provided by you in connection with your purchases, registrations, or engagement with our services.
      
2. Visitor (Campus Visitors and Event Participants – Online and Offline)
   For visitors to our premises or participants in our events, programmes, or activities, we may process:
   • Identification details (e.g. name, identification card or passport number, nationality);
   • Contact information (e.g. phone number and/or email address, where required for registration, access, or safety purposes);
   • Visitor and access records (including entry and exit records, registration logs, vehicle registration numbers, and access control records);
   • Event registration and attendance information (where applicable);
   • Images, audio and video recordings (e.g. CCTV surveillance, event photography, livestreaming, and institutional documentation);
   • Emergency contact details (where provided for safety and security purposes);
   • Any other information voluntarily provided during your visit or participation in our activities.
      
3. Donor (Donations, Sponsorships, and Philanthropic Contributions)
   For individuals or organisations who make donations, sponsorships, endowments, or other contributions to the University, we may process:
   • Identification details (e.g. name, identification card or passport number, nationality, organisation name and registration number, where applicable);
   • Contact information (e.g. address, email address, phone number);
   • Donation and contribution records (e.g. donation amount, sponsorship amount, contribution details, payment records, transaction references, invoices, receipts, and donation history);
   • Tax and compliance information (e.g. tax identification numbers and supporting documentation, where applicable);
   • Any other information voluntarily provided in connection with donations, sponsorships, or philanthropic activities.
      
4. Sensitive Personal Data (Where Applicable)
   We may process sensitive personal data, including information relating to physical or mental health, religious beliefs, biometric data, or financial information, strictly for purposes of service provision, safety, compliance, or administrative requirements.
   *Sensitive personal data will only be processed where necessary and with your explicit consent, in accordance with the PDPA.
    

4. Purposes of Collection of Personal Data

Your personal data is collected and processed for purposes including:

1. Registration, participation, and administration of events, programmes, services, or activities;
2. Customer service, enquiries, feedback, and communication management;
3. Visitor registration, security, and access control;
4. Processing of payments, transactions, or related administrative matters (where applicable);
5. Safety, security, and CCTV monitoring;
6. Compliance with legal, regulatory, and internal policy requirements;
7. Internal communication and institutional operations.
    

5. Sources of Personal Data

We may obtain your personal data from:

1. You directly (e.g. forms, registrations, declarations, submissions, or enquiries);
2. Event registrations, programmes, activities, or customer service interactions;
3. Government and statutory bodies;
4. Internal systems (e.g. visitor registration systems, access logs, CCTV);
5. Service providers or verification providers (where applicable);
6. Publicly available sources (where relevant).
    

6. Disclosure of Personal Data

We may disclose your personal data to other departments within NEUC. These departments will treat your personal data as confidential, in accordance with this Policy and with all applicable data protection legislation, and will process such personal data only for the purposes and within the terms set out herein.

We are responsible for the personal data under our control, including personal data disclosed by us to a third-party service provider or vendors (often referred to as the “data processor”). We take every measure to ensure that a comparable level of protection is provided for personal data when processed by such service providers.

NEUC is committed to complying with the PDPA, in particular its policies as well as corresponding guidelines and orders.
 

7. Security of Personal Data

We are committed to protecting customers’, visitors’ and donors’ personal data by implementing appropriate technical, administrative, and physical security measures to safeguard personal data against loss, misuse, unauthorized access, disclosure, alteration, destruction, and cybersecurity threats through measures such as access controls, user authentication, encryption, workstation and device security, system and network security, secure storage and backup, logging and monitoring, and secure data transfer methods.

Physical records containing personal data are also protected through controlled access, secure handling, and secure disposal procedures. In addition, We ensure that employees, contractors, vendors, and service providers handling customers’, visitors’ and donors' personal data comply with confidentiality and security obligations, while data breaches or security incidents are managed through established response and mitigation procedures to ensure the continued protection of customers’, visitors’ and donors’ personal data.

Further details regarding our information security practices and technical safeguards are available in our Security Policy (Customer, Visitor & Donor).
 

8. Use of Cookies

The cookies used by the official website of NEUC and its internal digital platforms are used for system functionality, user experience, and platform performance. Some cookies may be used by third parties to provide NEUC with information on engagement and promotional effectiveness.

Cookies may collect information related to your use of the platforms, including session and preference data, for authentication, functionality, and system administration purposes. Such cookies do not intentionally collect sensitive personal data unless required for system operation or authentication. You may configure the internet browser settings to manage or disable cookies.
 

9. Transfer of Personal Data

We are committed to ensuring a comparable level of protection for the personal data of customers, visitors and donors should the information be processed or used outside Malaysia by NEUC’s vendors or experts.
 

10. Marketing and Promotional Purposes

With your consent, where required by applicable law, your personal data (such as your name, image, photograph, video recording, voice recording, testimonials, contact details, and participation in our programmes, activities, or events) may be used for marketing, communication, publicity, promotional, and institutional purposes. Such use may include publications, newsletters, websites, social media platforms, livestreams, audiovisual materials, and other communication channels.

Where applicable, you may opt out of receiving marketing communications or withdraw your consent for certain promotional uses of your personal data by contacting us, subject to any legal, operational, or contractual limitations.
 

11. Data Subject’s Obligations

It is necessary for NEUC to collect and retain the personal data of customers, visitors and donors, who are required to provide accurate and complete personal data. Failure to do so may affect the processing of such data for the purposes stated in Clause 4, and may result in registration, participation, access, or related processes not proceeding or being discontinued.
 

12. Retention of Personal Data

NEUC retains personal data for as long as it is necessary to fulfil the purposes for which it was collected, or as required for legal, regulatory, audit, administrative, or institutional requirements. Where personal data is no longer required for the stated purposes, it will be securely deleted, or archived, unless retention is required by law or for legitimate institutional purposes.
 

13. Rights of Data Subject

1. To request access to personal data
   Customers, visitors and donors have the right to request access to personal data processed by NEUC upon reasonable notice. Access requests may be made by downloading the prescribed Personal Data Access Request Form, duly completing the form, and submitting it via email to the relevant department.
    
2. To request correction of personal data
   Customers, visitors and donors have the right to request correction and/or update of their personal data that is inaccurate, incomplete, or outdated. Correction requests may be made by downloading the prescribed Personal Data Correction Request Form, duly completing the form, and submitting it via email to the relevant department.
    
3. To limit the processing of your personal data
   Customers, visitors and donors are entitled to limit the processing of their personal data by withdrawing their consent, subject to applicable legal requirements and contractual conditions, and within a reasonable period of time.
    

14. Data Breach Notification

NEUC will take reasonable steps to detect, investigate, and address any personal data breach in accordance with the PDPA. Upon awareness, the Data Protection Officer (DPO) will record, investigate and implement security measures, and assess whether notification to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi, JPDP) is required where necessary, and notify the affected data subject(s) and reporter, where applicable, of the outcome.
 

15. Changes to Privacy Policy

NEUC reserves the right to amend this Policy from time to time without prior notice. Customers, visitors and donors are advised to check NEUC’s website regularly for the latest version of this Policy. The latest Policy can be accessed at www.newera.edu.my.
 

16. Acknowledgement and Consent

By communicating or engaging with NEUC, customers, visitors and donors acknowledge that you have read and understood this Policy and consent to the use, processing, disclosure, and transfer of your personal data by NEUC as described herein. You may withdraw your consent by written notice or by completing the relevant form on the website.
 

17. Inquiries and Complaints

Should you require further information about the personal data we hold or the way in which your information is being collected or used which are not answered by this Policy, please contact or write to us at:

Data Protection Officer (DPO)
New Era University College

Address: Blocks B & C, Lot 5, Seksyen 10, Jalan Bukit,43000 Kajang, Selangor, Malaysia
Tel: 603-8740 6392/8210 3709
Email:
For PDPA-related enquiries: dpo@newera.edu.my
For customer-related enquiries: publicity@newera.edu.my
For visitor-related enquiries: general@newera.edu.my
For donor-related enquiries: public@newera.edu.my

(Revised and Approved by Administration Meeting on 20th May 2026)