Privacy Policy

Who we are

This website is operated by Core Consult Resources (SA0535328-D), a business registered in Malaysia and trading as Afterkelas. In this policy, "we", "us" and "our" mean Core Consult Resources.

We are the data user responsible for the personal data described here, as that term is used in the Personal Data Protection Act 2010 of Malaysia (the "PDPA"). We handle personal data in accordance with the PDPA and its seven principles.

What this policy covers

This policy covers the Afterkelas marketing website at www.afterkelas.com: the pages you are reading, the enquiry forms on them, and the measurement we run on them.

By using this website or submitting an enquiry, you confirm that you have read this policy and consent to the handling of personal data described in it. If you do not agree, please do not submit an enquiry.

Personal data we collect

Data you give us

When you submit an enquiry through this website, or start a conversation with us on WhatsApp or another channel we publish, you give us some or all of the following:

• Your name, and the name of the student if you are enquiring for someone else
• Your contact number and, where you provide one, your email address
• Whether you are a student or a parent or guardian
• The education level, curriculum and subjects you are asking about
• Whether you are interested in one-to-one or small-group classes
• Anything else you choose to write in the message field or send us in conversation

Please do not send us identity-card numbers, bank details, medical information, or any other sensitive personal data through an enquiry form. We do not need it at the enquiry stage and we do not ask for it there.

Data collected automatically

When you browse the site we record a limited, privacy-preserving record of the visit so we can understand which pages are useful:

• Pages viewed, the order you viewed them in, and how long you stayed
• The referring website or campaign that brought you here
• Approximate region, derived from your network address rather than stored as a precise location
• Device category, screen size, browser and operating system
• Your network address and browser identification string, used for security, abuse prevention and rate limiting

Our own measurement does not set cookies and does not attach a persistent identifier to you across sites. The Google tag described in section 6 works differently and is covered there.

Anti-spam checks

Our enquiry forms run invisible checks to stop automated submissions, including a decoy field that a person never sees, a timing check, and a small computation your browser performs. These checks look at how a submission was made, not at who made it.

How we use your personal data

We use the personal data described above to:

• Reply to your enquiry and answer your questions
• Match the student with a suitable tutor, programme, level and schedule
• Arrange and follow up on a trial class or placement
• Send you information about the classes you asked about
• Keep our website secure, prevent abuse of our forms, and diagnose faults
• Understand which pages and campaigns help people find us, in aggregate
• Meet our legal, tax and record-keeping obligations

We do not sell your personal data. We do not rent or trade it. We do not use enquiry data to build advertising profiles about you or your child.

If you ask us about classes and decide not to proceed, we may contact you once or twice afterwards to ask whether you are still looking. Tell us to stop and we will stop.

Your consent and your choice

We handle your personal data on the basis of the consent you give when you submit an enquiry, and where applicable for the performance of a transaction you have asked us to arrange, as permitted under the PDPA.

Supplying your personal data is voluntary. It is, however, necessary if you want a reply: without a name and a contact number we cannot respond to an enquiry or arrange a class.

You may withdraw your consent at any time by writing to us at the address in the final section. Withdrawal does not affect anything we did with your data while your consent was in force, and it may mean we can no longer provide the service you asked for.

Cookies, analytics and advertising tools

Our own measurement

We run a first-party, cookieless measurement script on this site. It sends us the page-level information listed in section 3 and nothing else. It does not store an identifier on your device.

Google tag

We also load the Google tag (gtag.js) so we can measure the performance of our advertising and understand how visitors reach us. Google may set cookies or similar identifiers on your device through this tag, and may process the resulting data as an independent controller under its own terms.

You can control this through your browser settings, through your Google Ads settings, or with a browser extension that blocks advertising tags. Blocking it does not affect your ability to browse this site or submit an enquiry.

Most browsers let you refuse cookies or delete cookies already stored. Where a feature of this site depends on a cookie, refusing it may limit that feature.

Who we share personal data with

We disclose personal data only where it is necessary, and only to the following classes of recipient:

• Our own staff and academic advisors, who handle enquiries and placements
• The tutor proposed for the student, so they can prepare for the class, limited to what the lesson requires
• Service providers who host our website, deliver our messages, and provide our measurement and communication tools, acting on our instructions
• Professional advisors such as accountants and lawyers, where they need it to advise us
• Regulators, law-enforcement agencies or courts, where we are required or permitted by Malaysian law to disclose it
• A successor entity, if the business or part of it is reorganised or transferred, subject to this policy continuing to apply

We require our service providers to protect personal data and to use it only for the purposes we specify.

Transfers outside Malaysia

Some of the infrastructure and tools we rely on, including our website hosting and our communication and measurement providers, store or process data on servers outside Malaysia.

Where personal data is transferred out of Malaysia, we take reasonable steps to satisfy ourselves that it will receive protection comparable to that required under the PDPA, including by contract with the provider. By submitting an enquiry you consent to such transfers for the purposes set out in this policy.

How long we keep it

We keep personal data only as long as it is needed for the purpose it was collected for, or as long as the law requires, whichever is longer.

• Enquiries that do not lead to a placement: up to 24 months from your last contact with us, so we can pick up the conversation if you come back
• Enquiries that lead to a placement: transferred to the tutoring platform and retained under that platform's policy for the life of the relationship and any period the law requires afterwards
• Financial and tax records: for the period required by Malaysian tax and accounting law
• Website measurement data: in aggregated form, with individual visit records removed on a rolling basis

When personal data is no longer needed, we delete it or convert it into a form that can no longer identify you.

How we protect it

We take practical steps to protect personal data against loss, misuse, and unauthorised access, alteration or disclosure. These include encrypted connections across the site, access limited to staff who need it, rate limiting and abuse controls on our forms, and encryption at rest for sensitive credentials on our systems.

No website or transmission method is completely secure, and we cannot guarantee absolute security. Please do not send sensitive information to us through an open channel such as an unsecured email.

Students under 18

Much of our teaching is for school-age students. We ask that any enquiry concerning a student under 18 is made by that student's parent or legal guardian, or with their knowledge and consent.

Where we hold personal data about a student under 18, the consent of the parent or guardian governs how we handle it, and the parent or guardian may exercise the rights in section 11 on the student's behalf.

If you believe a child has given us personal data without the consent of a parent or guardian, write to us at afterkelas@gmail.com and we will remove it.

Your rights under the PDPA

Under the PDPA you have the right to:

• Ask for access to the personal data we hold about you
• Ask us to correct personal data that is inaccurate, incomplete or out of date
• Withdraw your consent to our handling of your personal data
• Ask us to stop, or not begin, handling your personal data for direct marketing
• Ask us to limit the handling of your personal data where it is causing or likely to cause you damage or distress

To exercise any of these rights, write to us at afterkelas@gmail.com with enough detail for us to identify you and your request. We will respond within 21 days, as the PDPA requires. We may charge a prescribed fee for a data access request, and we may need to verify your identity before we act.

Some requests cannot be met in full. Where the law requires us to keep a record, or where meeting your request would disclose someone else's personal data, we will explain what we can and cannot do.

Links to other websites

This website links to services we do not control, including WhatsApp, our social media profiles, and our tutoring platform. Once you follow such a link, the operator of that service handles your data under its own policy.

We are not responsible for the content or the privacy practices of websites we do not operate. Please read their policies before giving them personal data.

Changes to this policy

We may update this policy as our practices, our tools, or the law change. The effective date at the top of this page shows when it was last revised.

Where a change materially affects how we handle your personal data, we will take reasonable steps to bring it to your attention. Continuing to use the website after a change takes effect means you accept the revised policy.

How to contact us

For any question about this policy, or to exercise any of the rights in section 11, write to us:

If you are not satisfied with how we have handled your request, you may refer the matter to the Personal Data Protection Commissioner of Malaysia.