Privacy Policy

Who we are

This website is operated by Knowledge Hub, a fully owned subsidiary of Inventive Alliance (M) Sdn. Bhd., registered in Malaysia. In this policy, "we", "us" and "our" refer to Knowledge Hub.

We are the data user responsible for the personal data described here, within the meaning of Malaysia's Personal Data Protection Act 2010 ("PDPA").

• Address: Suite A-09-07, Union Tower No. 176, Jalan Desa Bakti, 58000 W.P. Kuala Lumpur, Malaysia
• Email: info@knowledgehubglobal.com
• Phone: +60 124 777 294

What we collect

Information you give us

When you submit an enquiry form on this site — the contact page, the enquiry pop-up, or a form inside a page section — we collect the details you enter. Depending on the form, those are:

• Your name
• Your email address
• Your contact or WhatsApp number
• Your last completed level of education
• The university you are interested in
• The study level and programme you are interested in
• The service you are asking about
• Any message you choose to write

We also record which form or page your enquiry came from, so we know what you were looking at when you contacted us.

Only a contact number is strictly required to reach you. Everything else is optional, and leaving a field blank will not stop us from responding — it only means we know less about what you need before we speak.

If you go on to apply to an institution through us, we will collect the further information and documents that the institution's application requires. We will tell you what is needed at that point.

Information collected automatically

Our web server keeps standard access logs, which include your IP address, the pages you requested, the time of the request, and your browser's user-agent string. These are used to keep the site running and secure, not to build a profile of you.

This site sets exactly two cookies, and both are strictly necessary for it to work:

• knowledge-hub-session — keeps your session active while you move between pages and while you fill in a form.
• XSRF-TOKEN — protects form submissions against cross-site request forgery.

Both expire within two hours. This website does not use analytics, advertising, or tracking cookies, and does not run advertising pixels or share your browsing behaviour with advertising networks. Our campaign pages are different: they use Meta's advertising tools, as described under Campaign and event pages.

Third-party services that can see your IP address

Our pages load fonts from Google Fonts and Fontshare. Because your browser fetches those files directly, those providers receive your IP address and basic request information. They do not receive anything you type into our forms.

Campaign and event pages

We also run pages for particular events and university campaigns on our own sub-domains, such as umpsa.knowledgehubglobal.com for UMPSA's visit to Bangladesh. This policy covers those pages too.

What a registration collects

When you register on a campaign page, we collect:

• Your name
• Your phone or WhatsApp number
• The city you live in
• The study level and subject area you are interested in, and any research interest you mention
• The visit or information session you choose, if you choose one
• Which offer on the page you were looking at when you opened the form

We also keep a record that you agreed to be contacted, the exact wording you agreed to, and when.

Where you came from

To understand which of our announcements and adverts reach people, each registration also records the address of the page you landed on, the website that sent you to it, and any campaign tags in that link (for example utm_source or utm_campaign). This tells us, for instance, that you arrived from a particular Facebook post. It is stored with your registration, not used to follow you around other websites.

Where it goes

Registrations go directly into our internal enquiry system at leads.knowledgehubglobal.com. Only our own staff can sign in to it, each with a personal account, and it is not indexed by search engines. The counselling team uses it to contact you about the event and your study plans. Sharing beyond our team follows the section Who we share it with below.

Advertising measurement with Meta

Campaign pages use the Meta Pixel, a script from Meta Platforms, the company behind Facebook and Instagram. It tells us whether our adverts there lead to registrations, and helps Meta show them to people likely to be interested.

• When you open a campaign page, the Pixel sets a cookie named _fbp and tells Meta which page you viewed, along with your IP address and browser details. If you arrived by clicking one of our adverts, it may also set _fbc, which records that click.
• When you register, we tell Meta that you did, both from your browser and from our enquiry system (Meta's Conversions API). So that Meta can match the registration to an account, we send your phone number, first and last name and city in hashed form (scrambled one way, so they cannot be read back), together with your IP address and browser details. We do not send your study plans or your other answers.
• Meta's automatic advanced matching is switched on for the Pixel, so Meta may also hash contact details you type into the form when you submit it.

The consent statement on the registration form covers this. If you would rather not have your registration reported to Meta, contact us on WhatsApp or by phone instead of using the form. You can also block the Pixel with your browser's tracking protection or an ad blocker, and the form will still work. Meta handles this data under its own privacy policy, and you can control how Meta uses it for ads in your Facebook or Instagram ad settings.

Campaign pages load no other analytics or advertising scripts, and no third-party fonts. If you tap a WhatsApp or map link on one, you go to that service, and its own privacy policy applies from there.

Why we use your data

• To answer your enquiry and give you counselling on courses, institutions and study destinations.
• To prepare and submit applications to the institutions you choose, and to support the related visa and accommodation steps.
• To keep in touch about your application while it is in progress.
• To operate and secure this website, including preventing abuse of our forms.
• To meet our legal and record-keeping obligations.

We rely on your consent, given when you submit a form, and on the necessity of processing your data to take the steps you have asked us to take.

Who we share it with

Placing a student is not something we can do alone, so sharing is part of the service:

• Universities, colleges and education providers. When you ask us to pursue a course or institution, we pass on the personal data and documents that institution needs to assess your application. Once they hold your data, their own privacy policy governs what they do with it. We will always tell you which institutions we are approaching on your behalf.
• Our recruitment partners and representatives, where one is assisting you in your country.
• Service providers who operate our infrastructure, principally our web hosting provider, who store data on our behalf and are not permitted to use it for their own purposes.
• Meta Platforms, only for registrations made on our campaign pages, and only in the limited, hashed form described under Advertising measurement with Meta.
• Authorities and professional advisers, where we are required to disclose by law or need to establish or defend a legal claim.

We do not sell your personal data, and we do not share it with data brokers. Meta is the only advertising platform we share data with, and only as described above.

Sending data outside Malaysia

We work with students and institutions in many countries, so your data may be transferred outside Malaysia — for example, when we send an application to a university in Australia, the United Kingdom, Canada or elsewhere. Those countries may not give personal data the same protection as Malaysian law. We transfer data only where it is necessary to carry out what you have asked us to do, or, for campaign page registrations, to measure our adverts with Meta, which processes data in the United States and elsewhere.

How long we keep it

We keep enquiry records for as long as needed to respond to you and support any application that follows, and afterwards only for as long as we have a legitimate or legal reason to. If you ask us to delete your data and there is no such reason to keep it, we will.

Your rights

Under the PDPA you may:

• Ask what we hold about you and request a copy.
• Correct anything inaccurate, incomplete or out of date.
• Withdraw your consent to our continued processing.
• Limit how we process your data, including asking us to stop contacting you.

To exercise any of these, email info@knowledgehubglobal.com. We may need to verify your identity first. We will respond as soon as we reasonably can, and within any period the law requires.

Withdrawing consent while an application is in progress may mean we can no longer pursue it for you. We will tell you if that is the case before acting.

Keeping your data safe

This site, our campaign pages and our enquiry system are served over HTTPS, enquiry data is stored in access-controlled databases, and the systems staff use to read enquiries each require a personal account. No system is perfectly secure, and we cannot guarantee that transmission over the internet is free from risk, but we take reasonable steps to protect what you give us.

Children

Our services are aimed at prospective students. If you are under 18, please involve a parent or guardian before sending us your details. If you believe a child has given us personal data without that involvement, contact us and we will remove it.

Changes to this policy

We may update this policy as our services or the law change. The date at the top shows when it last changed. Where a change materially affects how we handle your data, we will take reasonable steps to bring it to your attention.

Contact us

Questions or complaints about this policy or how we handle your data: info@knowledgehubglobal.com, or write to us at the address above. You also have the right to complain to the Personal Data Protection Commissioner in Malaysia.