Legal

Privacy Policy

Last updated 14 May 2026. This policy explains what we do with your personal data when you visit iceforma.bond or sign up for an Iceforma Academy course.

Who we are

Iceforma Academy is a trading name of Iceforma Academy Sdn Bhd (Business Registration No. 1612587-V), incorporated in Malaysia and operating from Suite B-12-2, Sunway Pinnacle, Persiaran Lagoon, Bandar Sunway, 47500 Petaling Jaya, Selangor.

For privacy questions, contact our data officer at [email protected].

What we collect

We only collect what we need to provide our services and respond to you.

  • Enquiry form data: name, email, phone (if you give it), the programme you are interested in and the goal you describe.
  • Lesson-related data, if you become a learner: billing address, scheduling preferences, lesson recordings, tutor notes and progress reports.
  • Technical data: IP address, browser type, language preference and pages you visited on the site (collected via our cookie consent — see cookie policy).

Why we collect it

  • To respond to your enquiry, set up a free trial and (if you decide to proceed) deliver the course you have booked.
  • To send transactional emails about your lessons (reminders, recordings, written feedback).
  • To improve the site’s technical performance and identify pages with broken links or slow loading times.
  • To comply with Malaysian tax law, accounting requirements and the PDPA 2010.

How long we keep it

Enquiry data with no follow-up is deleted within twelve months. Active learner data is kept for the duration of your engagement plus seven years (tax and accounting). Lesson recordings are kept for the lifetime of your course on the platform and deleted within thirty days of you closing your account.

Who we share it with

We do not sell or rent your personal data, ever. We share it only with:

  • Your assigned tutor (name, level, lesson notes — the minimum needed to teach you).
  • Our learner success advisor team (Sunway office — three named individuals).
  • Our accounting software (Stripe for payments, Xero for invoicing — both GDPR-compliant subprocessors).
  • Authorities, only where Malaysian law requires us to (e.g., court order).

Your rights

Under Malaysia’s Personal Data Protection Act 2010 you have the right to:

  • See what we hold about you (a "subject access request"). Free, within 21 days.
  • Correct anything that is wrong.
  • Ask us to delete your data — we will action it unless we are legally required to retain it.
  • Withdraw consent for marketing communications.

To exercise any of these, email [email protected].

Cookies

See our cookie policy for what we set and why. You can change your consent at any time using the "Cookie preferences" button in the footer.

Updates

If we materially change this policy we will say so on this page and email active learners. Minor wording fixes will simply update the "Last updated" date.