Privacy Policy

Last updated: May 2026

1. Introduction

IMAS International School Kuala Lumpur ("IMAS", "we", "us", or "our") is committed to protecting the personal data of parents, guardians, and students who use the IMAS Visa Application Portal ("the Portal"). This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Data We Collect

We collect the following categories of personal data:

  • Identity information: full name, date of birth, gender, nationality
  • Contact information: email address, phone numbers, WhatsApp number
  • Residential address in Malaysia
  • Travel document details: passport numbers (stored encrypted)
  • Application documents: uploaded files supporting the visa application
  • Account credentials: email and hashed password (never stored in plain text)

3. Purpose of Collection

Your personal data is collected and processed for the following purposes:

  • Processing student visa applications on your behalf
  • Communicating application status updates and required actions
  • Complying with Malaysian immigration and education regulations
  • Maintaining records required by EMGS (Education Malaysia Global Services)
  • Providing customer support related to visa applications

4. Data Storage and Security

Your data is stored securely on Google Workspace infrastructure (Google Sheets and Google Drive) with access restricted to authorised IMAS staff only. Sensitive fields such as passport numbers are encrypted using AES-256-GCM encryption before storage. Passwords are hashed using a one-way cryptographic function and are never stored in plain text.

5. Data Sharing

We do not sell or rent your personal data to third parties. Your data may be shared with:

  • EMGS (Education Malaysia Global Services) for visa processing purposes
  • Malaysian Immigration Department as required by law
  • IMAS staff authorised to manage visa applications

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described above, or as required by applicable law. Application records are typically retained for a minimum of 7 years following completion.

7. Your Rights

Under the PDPA 2010, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Withdraw consent (note: this may affect our ability to process your application)
  • Lodge a complaint with the Personal Data Protection Commissioner

8. Contact Us

For any privacy-related queries or to exercise your rights, please contact the IMAS Visa Team at your school's administration office or via the contact details provided during your enrolment.