Privacy Policy

This policy describes exactly what VYROX Education Academy does with the information you give us through this website. It is written to be read, not to be survived.

The short version: we collect only what the two forms on this site ask for, we store it on our own server outside the public web root, we do not sell or share it, and we contact you through WhatsApp rather than an email list.

1. What we collect

We collect personal data in exactly two places, and only when you choose to submit a form.

Enrolment enquiry

• Your name, email address, phone number and country
• The programme and learning mode you are interested in
• Optionally: your highest education level, current profession, how you heard about us, and any message you write

Internship application

• Your name, email address and phone or WhatsApp number
• Your institution, field of study and level of study
• Your preferred placement area, requested start and end dates, and placement mode
• Your resume, as a PDF, DOC or DOCX file
• Optionally: your written statement about the placement

Collected automatically

• A one-way hash of your IP address. We never store the address itself. The hash exists only so we can rate-limit submissions and detect automated abuse; it cannot be reversed to identify you.
• Your browser user-agent string, stored alongside a submission to help us diagnose form problems.
• Standard web server logs kept by our hosting provider.

2. What we deliberately do not do

• No tracking cookies. This site sets no cookies at all.
• No analytics. There is no Google Analytics, no Meta pixel, no session recording and no advertising tag on this site.
• No mailing list. We do not run an email newsletter, so we never add your address to one.
• No selling or renting of personal data to anyone, for any purpose.
• No profiling or automated decision-making. A person reads every enquiry and every application.

The only thing stored in your browser is a single localStorage entry named vyrox-lang, which remembers whether you prefer English or Chinese. It contains no identifier and never leaves your device. Clearing your browser data removes it.

3. Why we hold it, and for how long

Data	Purpose	Retention
Enrolment enquiry	To assess whether the programme you chose matches your background, and to reply to you	24 months from your last contact with us
Internship application and resume	To assess your application and, if you are placed, to administer the internship	12 months from the decision, unless you are placed
Hashed IP and rate-limit records	Preventing automated abuse of the forms	Rolling 1 hour window
Server logs	Security and fault diagnosis	As set by our hosting provider

You can ask us to delete your data sooner than any of the above, and we will.

4. Where it is stored

Submissions are written to a private directory on the vyrox.edu.kg server that sits outside the public web root and is explicitly denied to browsers by the server configuration. Uploaded resumes are stored under a filename we generate ourselves, with an extension we derive after verifying the file's actual contents, so the name you gave the file is never used on disk.

Internship applications are also emailed internally to our admissions team with the resume attached, so the people assessing your application can read it.

5. Who else sees it

Your form submissions are seen by VYROX Education staff involved in admissions or recruitment, and by nobody else. We do not share them with third parties.

Separately, and unavoidably, simply loading this page causes your browser to request files from three external services, which means those services receive your IP address and user-agent as part of a normal web request. We list them so you know:

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — typefaces
• unpkg (unpkg.com) — the Vue JavaScript framework
• Tailwind CDN (cdn.tailwindcss.com) — the styling engine

We send no personal data to any of them. Their handling of the request is governed by their own privacy policies.

6. Why our email address is an image

Our contact address is displayed on this site as an image rather than as text or a mailto: link. This is deliberate: it stops automated harvesters from scraping the address into spam lists. It also means you have to type it manually, which we accept as the cost of keeping the inbox usable. For anything time-sensitive, WhatsApp is faster.

7. How we protect it

• The whole site is served over HTTPS, and HTTP requests are redirected to it.
• Form submissions are validated on the server, not only in the browser.
• Uploaded files are checked by extension, by their actual leading bytes, and by an independent content-type check before being accepted. Anything that fails is discarded.
• Stored data sits outside the web root with restrictive file permissions.
• Rate limiting and anti-automation checks protect both forms.
• VYROX operates under an ISO 27001:2022 certified information security management system.

No system is perfect. If you believe your data has been exposed, tell us on WhatsApp and we will investigate immediately.

8. Your rights

Under the Malaysian Personal Data Protection Act 2010 (PDPA) you may:

• Ask what personal data we hold about you
• Ask us to correct anything inaccurate
• Ask us to delete your data
• Withdraw your consent to our holding it
• Limit how we process it

Message us on WhatsApp with your request. We will confirm your identity before acting on it, and we aim to respond within 21 days. There is no charge for a reasonable request.

Withdrawing consent while an application is open means we can no longer assess it, so the application will be closed.

9. Age

Our programmes are aimed at working adults and tertiary students. We do not knowingly collect data from anyone under 16. If you believe a minor has submitted a form, tell us and we will delete the record.

10. Changes

If this policy changes materially we will update the date at the top of this page. Because we run no mailing list, we cannot notify you individually — please check back if it matters to you.

11. Who is responsible

VYROX Education Academy, Level 16, The Vertical Business Suite Tower A, Bangsar South, 59200 Kuala Lumpur, Wilayah Persekutuan, Malaysia.