Privacy Policy

EdgeBox Education Advisory Sdn. Bhd. ("EdgeBox", "we", "us") operates the website edgebox.help. This policy explains what personal data we collect when you use the site or our counselling services, why we collect it, and the choices you have. We process personal data in accordance with the Malaysian Personal Data Protection Act 2010 ("PDPA").

1. Data we collect

When you submit an enquiry or attend a consultation we may collect: your name, email address, phone number, academic results and qualifications, intended field and level of study, budget range, and any information you volunteer in free-text fields. If you proceed to an application we may additionally collect copies of transcripts, identity documents and financial evidence required by the institutions you apply to.

When you browse the site we collect limited technical data — pages visited, approximate region, browser type — through cookies described in our Cookie Policy.

2. Why we use it

• To prepare your pathway plan and respond to enquiries;
• To submit and track applications you have authorised;
• To check scholarship eligibility with institutions on your shortlist;
• To meet legal, accounting and regulatory obligations;
• To improve the site and our counselling process.

We do not sell personal data, and we do not send marketing messages unless you have opted in. You may withdraw consent at any time by writing to us.

3. Who we share it with

Your data is shared only with: (a) the educational institutions you ask us to apply to; (b) government bodies where a visa or student-pass application requires it (for example, Education Malaysia Global Services); and (c) service providers who host our systems under confidentiality obligations. Each recipient receives only what is necessary for the stated purpose.

4. Storage and retention

Records are stored on access-controlled systems located in Malaysia or with providers offering equivalent safeguards. Enquiry data that does not proceed to an application is deleted within 24 months. Application files are retained for 7 years to satisfy audit and dispute-resolution requirements, then destroyed.

5. Your rights

Under the PDPA you may request access to the personal data we hold about you, ask us to correct it, or withdraw consent to further processing. We respond to verified requests within 21 days. Contact our data administrator at [email protected] or by post to Unit 12-3A, Wisma Perdana, Jalan SS 15/4, 47500 Subang Jaya, Selangor, Malaysia.

6. Minors

Many of our clients are aged 17–18. Where a client is under 18, we require the involvement and consent of a parent or guardian before processing an application.

7. Changes to this policy

We may revise this policy from time to time. The "last updated" date above reflects the current version, and material changes will be highlighted on this page for 30 days.