Privacy and Personal Data Protection Notice

1. Who is responsible for your data

The data user/controller for this service is Goolee Sdn. Bhd.. For questions, access or correction requests, contact admin@goolee.my or call +6010-459 1008. Please include enough information for us to identify your request without sending unnecessary sensitive information.

2. Personal data we may collect

Depending on how you use the service, this may include:

• name, email address, telephone number, nationality, organisation and account details;
• identity document type and number for course registration and attendance verification where required;
• booking details such as the room, date, period, participants, purpose, requirements, notes and promotion use;
• payment method, payment reference, transaction proof, verification and refund information. Full card details are handled by the payment provider, not stored by Goolee Academy;
• check-in information, booking QR token, attendance and operational notes;
• 3D-printing request details and uploaded model or reference files;
• technical and security information such as IP address, session identifiers, audit activity, browser request information and error records.

3. How we receive data

We receive information directly from you when you register, book, contact us, upload a file or submit payment proof. We also generate booking references, QR tokens, status history and audit records. Payment providers and email or hosting providers may return limited transaction or delivery information needed to complete the service.

4. Why we use personal data

We use personal data to:

• create and secure customer accounts;
• check availability, calculate prices, apply promotions and manage bookings;
• process payments, verify payment proofs, issue receipts and handle refunds;
• send important booking, payment, cancellation, approval and service updates;
• operate QR check-in, attendance, facility access and safety processes;
• respond to enquiries and manage 3D-printing quotations and production requests;
• prevent fraud, protect the website, maintain audit trails, resolve disputes and comply with legal obligations.

5. Disclosure to service providers

We may disclose the minimum information needed to trusted providers that support hosting, database and file storage, email delivery, payment processing, security, backup and technical operations. Online payment processing is provided by Stripe. These providers may process data in other countries where their services operate. We do not sell personal data.

6. Security and private files

We use access controls, authentication, server-side validation, private storage, audit records and security headers appropriate to the service. Payment proofs, QR assets, uploaded print files, backups and logs are not intended to be public. No internet service can guarantee absolute security, so please use a strong password and do not share booking QR codes or payment documents publicly.

7. Retention

We keep personal data only for as long as reasonably necessary for the purposes in this notice, including account administration, bookings, payment reconciliation, tax or accounting records, safety, disputes, fraud prevention and legal requirements. Retention periods may differ by record type. When data is no longer needed, we delete, anonymise or securely dispose of it where practicable.

8. Your choices and requests

Subject to applicable law and reasonable verification, you may ask to access or correct personal data we hold about you, ask questions about its use, withdraw optional communications or raise a concern about processing. Withdrawal does not affect processing already carried out lawfully and may not remove records we must retain for a booking, payment, security or legal purpose. Send requests to the contact above.

9. Children and third-party links

The service is intended for people who can legally use the service and make the relevant booking. If a parent or guardian believes a child’s personal data was submitted improperly, contact us. Links to Stripe or other third-party services are governed by those providers’ own notices.

10. Updates and complaints

We may update this notice when our processing, service or legal requirements change. The latest version is published on this page. If we cannot resolve a privacy concern, you may contact the Personal Data Protection Commissioner/Jabatan Perlindungan Data Peribadi through its official channels.

Read the official Personal Data Protection Act information ↗

Bahasa Melayu summary

Notis ini menerangkan cara Goolee Sdn. Bhd. mengumpul dan memproses data peribadi untuk akaun, tempahan, pembayaran, daftar masuk QR, khidmat pelanggan dan permintaan percetakan 3D. Anda boleh menghubungi admin@goolee.my untuk pertanyaan, akses atau pembetulan data. Sila rujuk versi Bahasa Melayu yang diluluskan oleh organisasi sebelum penerbitan rasmi untuk pematuhan penuh.