Taylor's is committed to processing and safeguarding the personal data of its students in strict compliance  with the Personal Data Protection Act (PDPA) 2010 (including the Personal Data Protection (Amendment) Act 2024 and all subsequent regulations and official guidelines). In our capacity as a Data Controller, we implement rigorous technical and organisational measures to ensure data integrity, confidentiality, and security across all processing operations.

 

The information on the enforcement of PDPA  which is provided below is in relation to the nature and type of data processed; how your data is collected and used; to whom your data can be disclosed; and your right to access and correct your personal information.

LANGUAGE AND REGULATORY FRAMEWORK
WHAT PERSONAL DATA WE PROCESS?
HOW DO WE USE YOUR DATA
HOW IS YOUR DATA COLLECTED
DISCLOSURE OF YOUR PERSONAL DATA
GROUP ALIGNMENT
DATA SECURITY LIMITATIONS
YOUR RIGHT TO ACCESS AND CORRECT PERSONAL INFORMATION
LANGUAGE AND REGULATORY FRAMEWORK WHAT PERSONAL DATA WE PROCESS? HOW DO WE USE YOUR DATA HOW IS YOUR DATA COLLECTED DISCLOSURE OF YOUR PERSONAL DATA GROUP ALIGNMENT DATA SECURITY LIMITATIONS YOUR RIGHT TO ACCESS AND CORRECT PERSONAL INFORMATION

In compliance with Section 7(3) of the Malaysian Personal Data Protection Act 2010, this Policy is issued in both English and Bahasa Malaysia. In the event of any conflict, inconsistency, or discrepancy between the English version and the Bahasa Malaysia version, the English version shall prevail to the extent permitted by local law.

 

Any formal complaints or material enquiries regarding institutional data processing frameworks may be directed to our designated Data Protection Officer at dpo@taylors.edu.my or filed formally with the Office of the Personal Data Protection Commissioner of Malaysia.

Taylor’s needs to process (that is, collect, use, store and ultimately destroy) your personal data for various academic, educational and administrative purposes. Generally, your personal data that we collect and process, includes but not restricted to:

 

Name, Identification number (NRIC), Passport number, Address, Contact numbers, Gender, Date of birth, Previous qualification, Personal email address, Photo and images, Biometrics, Marital status, Emergencies contact person(s) details, Family / guardian information.

 

 

 

Sensitive Personal Data

 

Some of the personal data that we process may include what is defined as 'sensitive personal data' under the Act and these include, but not restricted to: Race, Religion, Health, Records of misconduct and disciplinary action, Records of criminal offence.

 

This sensitive information shall be treated carefully by Taylor’s and will only be used for specific purposes. It will not be released to a third party without your explicit consent unless it is necessary to protect your interests.

 

 

 

Provision of Information

 

The provision of all information requested for in the relevant forms of Taylor’s is mandatory, unless specified otherwise. This is to enable us to process your application and / or request for our services.

 

Should you fail to provide the said information, Taylor’s will be unable to process your request and / or provide you with the relevant services.

 

 

 

Personal Data of Minors
  • Taylor’s may collect and process personal data relating to prospective students under the age of 18 for recruitment, educational outreach, event participation, scholarship, counselling, and related educational purposes.
  • Where required under applicable laws or internal policy, consent and/or notification may be obtained from a parent or legal guardian.
  • Parents/guardians may be contacted for verification, consent confirmation, counselling, admissions, welfare, or related educational matters.
  • Taylor’s reserves the right to suspend, limit, or cease processing where appropriate consent or verification cannot be obtained.

The purposes for which personal data is collected and further processed include, but are not limited to, the following:

 

  • To process applications for admission.
  • To maintain students' personal details, academic and non-academic records.
  • To facilitate internships, placements, or industrial training, as well as co-curricular activities.
  • To provide the relevant administrative support, counselling, and financial aid services.
  • To manage the use of facilities such as libraries, hostels, laboratories, etc.
  • To administer graduation and alumni-related events.
  • To administer tuition fees and other payments.
  • To communicate with students on important announcements, including matters relating to career services, postgraduate studies, and alumni.
  • To collect and relay information for relevant local or international statutory authorities or examination boards.
  • To issuing digital certificate or digital badge on designated third party digital credentialing platform.
  • To carry out data analysis of all student data for demographic information, academic performance and to improve institutional practices and outcomes.
  • To contact students' next of kin in case of an emergency.
  • To comply with any regulatory, audit, or security-related requirements.
  • To communicate with prospective students and/or parents or guardians regarding educational programmes, events, admissions, counselling, scholarships, financial assistance, and student-related matters. 
  • To provide personalised engagement, support, marketing communications, and recruitment-related services across digital and physical channels. 
  • To support lead management, customer relationship management (CRM), analytics, automation, profiling, and service improvement initiatives. 
  • To verify parental/guardian consent or notification requirements where applicable. 
  • To facilitate AI-assisted, automated, or technology-enabled engagement services, provided appropriate safeguards are in place.

Most, if not all, of your personal data was obtained from you directly, either from the following sources or from any other information you provided and this may include:

  • Enquiry Form
  • Various type of Application and / or Registration Forms
  • All other School and / or Support Services related Request Forms
  • Previous qualification related documents and / or certificates
  • Digital marketing campaigns, online events, webinars, competitions, surveys, roadshows, school engagement activities, and recruitment-related initiatives.
  • Customer relationship management (CRM) systems, chat platforms, AI-powered assistants/chatbots, social media platforms, messaging platforms, and marketing automation tools.
  • Parents, guardians, schools, educational partners, agents, event organisers, and authorised representatives.

 

In some instances, your personal data may have been obtained from external sources including, but not restricted to the following:

  • Third parties such as previous educational institutions, law enforcement agencies and other government entities
  • Third party service providers and any other future third parties in relation or incidental to the above
  • Personal data which are available in the public domain
  • Personal data which may be collected from cookies through the use of Taylor's website

Taylor's will keep your personal data confidential unless you have given written consent for disclosure, or such disclosure is permitted under prevailing laws/guidelines. Taylor’s may disclose your information to the categories of third parties listed below (but not limited to):

  • The Ministry of Higher Education, other relevant government departments/agencies, statutory authorities, and industry regulators.
  • The Malaysian Immigration Department and its appointed agencies.
  • Foreign embassies and their appointed agencies.
  • The police and other enforcement agencies, where and when required.
  • Your sponsors, including your parents/guardians.
  • Third parties that provide internships or attachment placements.
  • Professional or accreditation bodies.
  • Taylor’s external counterparts providing dual degrees, articulation, or progression of study.
  • Third parties appointed by Taylor’s to provide services, such as auditors, lawyers, contractors, printing companies, travel agencies, training organisers, insurance companies, digital credential and other platform providers.
  • Other institutions or companies within the Taylor's Education Group.
  • Technology vendors, cloud service providers, CRM providers, analytics providers, marketing automation providers, communication platform providers, and AI solution providers appointed by Taylor’s.
  • Parents or guardians of prospective students or students where required for educational, welfare, safety, or regulatory purposes.

Notwithstanding any provision to the contrary in this Policy, this Website and this Institution operate as part of the Taylor’s Education Group ('the Group'). To support efficient administration, strategic planning, institutional reporting, and consistent service delivery, all personal data, website usage metrics, tracking data, and material collected through this platform may be consolidated, centralised, stored, and processed in a Group-wide centralised database managed and controlled by the Group’s parent entity, Educrest Sdn. Bhd., alongside relevant Group Entities.

 

By utilising this platform, submitting enquiries, or providing your personal data, you explicitly acknowledge and consent to your data being shared across Group Entities (including but not limited to Taylor’s Education Sdn. Bhd., Taylor’s University, Taylor’s College, Taylor’s Schools and corporate shared serve offices) for operational, academic, compliance, and marketing automation purposes. All such processing, along with the engagement of third-party vendors (such as cloud hosting, CRM, and AI service providers), is governed by and strictly synchronised with the overarching Taylor’s Education Group Website Terms and Conditions and Group Privacy Statement and Personal Data Protection Notice.

While the Institution and the Group employ rigorous technical and organisational barriers, including multi-factor authorisation, firewalls, and active encryption, to protect your Personal and Sensitive Personal Data, you explicitly acknowledge that no transmission of information over the internet can be guaranteed as absolutely secure.

 

Consequently, any digital submission or transmission of your records via web portals, enquiry portals, or electronic email is performed entirely at your own risk.

You have the right to access and correct your personal information held by Taylor’s under the Act. Taylor’s always endeavours to upkeep the changes on your personal information in our student database system and hence you are encouraged to notify Campus Central of the changes in a timely manner.

 

You may do the following by completing the 'Update My Profile' online form via Campus Central Portal to update your personal data.

 

Any request to exercise your rights shall be administered as per the Act. Please be informed that pursuant to the Act, your request may be rejected in certain circumstances.

OTHER RELATED CONTENT