BreezePath

Legal

Privacy Policy

Last updated: 19 July 2026

1. Introduction

BreezePath ("BreezePath", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you:

  • visit or use the BreezePath website;
  • submit an enquiry, assessment, application or contact form;
  • upload a resume, transcript or other document;
  • communicate with our counsellors or representatives;
  • attend a consultation, event, webinar or information session;
  • use our education counselling, university application, visa support, insurance, accommodation or related services;
  • interact with us by email, telephone, WhatsApp, social media or another communication channel; or
  • otherwise provide personal data to us.

By using our website or providing personal data to us, you acknowledge that you have read this Privacy Policy.

This Privacy Policy applies only to information processed by BreezePath. Universities, education providers, government authorities, insurers, accommodation providers, technology platforms and other third parties may process your information under their own privacy policies.

2. Personal Data We May Collect

The personal data we collect depends on the services you request and your relationship with BreezePath.

2.1 Identity and Contact Information

We may collect:

  • full name;
  • date of birth;
  • nationality;
  • gender, where relevant;
  • identification or passport information;
  • residential or correspondence address;
  • country, state and city;
  • email address;
  • telephone number;
  • preferred communication method;
  • emergency contact information; and
  • parent or guardian information, where applicable.

2.2 Education and Professional Information

We may collect:

  • current and previous schools, colleges or universities;
  • academic qualifications and education history;
  • transcripts, certificates and examination results;
  • English-language and other test scores;
  • preferred study level, programme, institution and destination;
  • employment history and professional qualifications;
  • resumes, curricula vitae and portfolios;
  • personal statements, essays and references;
  • scholarship information;
  • education budget and funding information;
  • preferred intake period; and
  • career interests and objectives.

2.3 Application, Immigration and Travel Information

Where you ask us to assist with an application or related service, we may collect:

  • university and programme application information;
  • passport and visa information;
  • immigration history;
  • offer letters and enrolment documents;
  • financial evidence required by an institution or immigration authority;
  • travel and arrival information;
  • accommodation preferences;
  • insurance information; and
  • supporting documents requested by an institution, government authority or service provider.

2.4 Sensitive Personal Data

Some services may require information concerning:

  • health or medical requirements;
  • disabilities or accessibility needs;
  • religious or dietary requirements;
  • biometric information;
  • criminal history; or
  • other sensitive matters relevant to an application, visa or student-support service.

We only collect and process sensitive personal data where it is reasonably necessary, where you have provided explicit consent, or where processing is otherwise permitted or required by law.

Please avoid sending unnecessary sensitive information through general enquiry forms or unsecured communication channels.

2.5 Communication and Relationship Information

We may keep records of:

  • counselling sessions and consultation notes;
  • emails, telephone calls, messages and enquiries;
  • appointments and event registrations;
  • instructions you provide;
  • application progress and outcomes;
  • feedback and complaints;
  • marketing preferences and consent records; and
  • interactions with our counsellors, representatives and support personnel.

Where a consultation or call is recorded, we will inform you where required.

2.6 Website and Technical Information

When you visit our website, we or our technology providers may automatically collect:

  • Internet Protocol address;
  • browser and device type;
  • operating system;
  • approximate location derived from your internet connection;
  • referring website;
  • pages viewed and links selected;
  • dates, times and duration of visits;
  • website errors and performance information;
  • cookie identifiers; and
  • similar technical information.

Where required, we will obtain consent before using non-essential analytics, advertising or tracking technologies.

2.7 Information About Other People

You may provide information concerning a parent, guardian, sponsor, dependant, referee, emergency contact or another person.

Before providing another person's personal data, you should ensure that you have their permission or another lawful basis to provide the information to BreezePath.

3. How We Collect Personal Data

We may collect personal data:

  • directly from you through our website, forms, consultations, document uploads and communications;
  • from a parent, guardian, sponsor or authorised representative;
  • from schools, universities, examination bodies, referees and education partners;
  • from application and student-recruitment platforms;
  • from immigration, visa, insurance, accommodation and related service providers;
  • at events, exhibitions, seminars and webinars;
  • from publicly available education or professional sources; and
  • automatically through cookies, website logs and similar technologies.

Where we receive information from another organisation, that organisation should have appropriate authority to disclose it to us.

4. How We Use Personal Data

We may use personal data for the following purposes.

4.1 Responding to Enquiries

We may use your information to:

  • respond to your questions;
  • contact you through your selected communication channel;
  • arrange consultations;
  • understand your study objectives; and
  • assign an appropriate counsellor or representative.

4.2 Providing Education Counselling

We may use your academic background, preferences and budget to:

  • identify potentially suitable programmes and institutions;
  • recommend study destinations;
  • assess general entry requirements;
  • identify possible scholarships or funding opportunities;
  • explain application requirements; and
  • provide education and career pathway guidance.

Recommendations are based on the information available at the time and do not guarantee admission, scholarships, visas, employment or any other outcome.

4.3 Managing Applications and Related Services

When you instruct us to proceed, we may use your information to:

  • prepare, review and submit applications;
  • communicate with institutions concerning your application;
  • monitor application progress;
  • support offer acceptance and enrolment;
  • assist with visa documentation;
  • support insurance, accommodation and arrival arrangements;
  • communicate deadlines and document requirements; and
  • maintain records of the services provided to you.

We will not knowingly submit an application using your information without your instructions or authorisation.

4.4 Operating and Protecting Our Business

We may use personal data to:

  • maintain accurate records;
  • manage appointments and events;
  • train and supervise personnel;
  • monitor and improve service quality;
  • respond to complaints;
  • protect our legal rights;
  • prevent fraud, misuse and security incidents;
  • comply with legal, regulatory and contractual obligations; and
  • establish, exercise or defend legal claims.

4.5 Improving Our Website and Services

We may analyse aggregated or appropriately de-identified information to:

  • understand how our website is used;
  • improve website performance;
  • develop new services and resources;
  • evaluate student needs and market trends; and
  • improve our counselling and application processes.

Where reasonably possible, research and statistical reporting will use information that does not directly identify an individual.

4.6 Marketing Communications

With your consent, or where otherwise permitted by law, we may send information concerning:

  • study destinations;
  • university programmes;
  • scholarships;
  • application deadlines;
  • education events;
  • webinars;
  • BreezePath guides; and
  • related services.

You may withdraw your marketing consent at any time. Withdrawing marketing consent will not affect services you have already requested.

4.7 Testimonials and Success Stories

We will only publish your name, image, testimonial, admission result or success story after obtaining appropriate permission.

We will not knowingly publish unredacted passport numbers, identification numbers, visa numbers, financial documents, transcripts or other confidential application documents.

5. Consent and Grounds for Processing

Depending on the circumstances, we may process personal data:

  • with your consent;
  • with your explicit consent for sensitive personal data, where required;
  • to take steps requested by you before providing a service;
  • to provide services you have requested;
  • to comply with legal or regulatory obligations;
  • to protect your or another person's vital interests;
  • to establish, exercise or defend legal claims; or
  • for legitimate business and operational interests where permitted by law and where those interests do not unfairly override your rights.

Where information is mandatory, we will indicate this where reasonably practicable.

You are not required to provide optional information. However, if you do not provide information that is reasonably necessary for an application or service, we may be unable to provide that service or complete the relevant process.

6. Automated Recommendations and Profiling

BreezePath may use questionnaires, matching tools or predefined criteria to provide preliminary programme or destination recommendations.

These results are intended as general guidance. Important counselling, application and eligibility decisions are not made solely through automated processing without appropriate human involvement.

You should independently verify formal requirements with the relevant institution, government authority or service provider.

7. Who We May Share Personal Data With

We may disclose personal data where reasonably necessary for the purposes described in this Privacy Policy.

7.1 Education Institutions and Scholarship Providers

We may share information with:

  • universities;
  • colleges;
  • schools;
  • pathway providers;
  • scholarship organisations; and
  • their authorised representatives.

We normally share a complete student profile only after receiving your instructions or consent to proceed with an application or assessment.

7.2 Education and Application Partners

We may use authorised application, student-recruitment, document-management or education-technology platforms to process and monitor applications.

Depending on their role, these organisations may process information as our service providers or as independent organisations responsible for their own processing.

7.3 Immigration and Government Authorities

Where required for your requested services, information may be provided to:

  • embassies and consulates;
  • immigration authorities;
  • visa application centres;
  • education regulators;
  • government departments; and
  • other legally authorised bodies.

7.4 Student Service Providers

With your instructions or consent, we may share relevant information with:

  • health-insurance providers;
  • accommodation providers;
  • guardianship providers;
  • payment or financial-service providers;
  • testing organisations;
  • travel and arrival-support providers; and
  • other service providers selected by you.

7.5 Operational Service Providers

We may use third parties that support our operations, including:

  • website-hosting and cloud-storage providers;
  • customer relationship management systems;
  • email and communication providers;
  • cybersecurity and information-technology providers;
  • analytics providers;
  • document-storage and electronic-signature providers;
  • appointment and event platforms;
  • professional advisers, auditors and insurers; and
  • payment processors.

Such providers should only process personal data for authorised purposes and should apply appropriate security and confidentiality safeguards.

7.6 Legal and Regulatory Disclosures

We may disclose information where reasonably necessary to:

  • comply with a legal obligation, court order or regulatory request;
  • investigate suspected fraud or unlawful activity;
  • protect students, employees or the public;
  • protect BreezePath's rights and property; or
  • establish, exercise or defend legal claims.

7.7 Corporate Transactions

If BreezePath undergoes a merger, acquisition, restructuring, investment, financing or transfer of business assets, personal data may be disclosed to professional advisers and relevant transaction parties, subject to appropriate confidentiality protections.

BreezePath does not sell or rent personal data to third parties for their independent marketing purposes.

8. International Transfers

Study-abroad services may involve organisations located outside Malaysia.

Your personal data may therefore be transferred to, accessed from or stored in countries where:

  • your selected institution is located;
  • an application or recruitment partner operates;
  • a visa, insurance or accommodation provider operates; or
  • a cloud or technology provider maintains infrastructure.

Privacy laws in another country may differ from those in Malaysia.

Where personal data is transferred internationally, BreezePath will take reasonable steps to comply with applicable cross-border transfer requirements. Depending on the circumstances, these steps may include:

  • informing you of the transfer;
  • obtaining consent where required;
  • assessing the recipient and destination;
  • using appropriate contractual protections;
  • limiting information to what is necessary;
  • implementing security safeguards; and
  • taking reasonable precautions concerning the recipient's processing.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, accounting, regulatory and operational requirements.

Our retention periods may vary depending on the nature of the information and the services provided.

As a general guide:

  • enquiry information that does not progress to an active service may be retained for up to 24 months after the last meaningful interaction;
  • counselling, application and service records may be retained for up to seven years after the service or student relationship ends;
  • marketing information may be retained until you withdraw consent or until it is no longer reasonably required;
  • website logs and analytics information may be retained for up to 24 months; and
  • consent, complaint and legal records may be retained for as long as necessary to demonstrate compliance or protect legal rights.

At the end of the relevant retention period, information will be securely deleted, anonymised or otherwise removed from active use.

Residual copies may remain temporarily in secure backups until those backups are overwritten or deleted according to our normal backup schedule.

10. Data Security

BreezePath takes reasonable administrative, technical and organisational measures to protect personal data against:

  • loss;
  • misuse;
  • unauthorised access;
  • accidental disclosure;
  • alteration;
  • destruction; and
  • other unlawful processing.

Depending on the nature of the information and system, these measures may include:

  • access controls based on job responsibilities;
  • secure user authentication;
  • password and account-management controls;
  • encrypted transmission or storage where appropriate;
  • secure cloud and document-storage services;
  • system monitoring and backups;
  • confidentiality obligations;
  • personnel training;
  • security reviews; and
  • due diligence concerning service providers.

Access to student records is limited to personnel and authorised parties who reasonably require the information for their duties.

No online service, email system or storage platform can be guaranteed to be completely secure. You should protect your own accounts and avoid sending highly sensitive documents through unsecured channels unless instructed to do so.

11. Personal Data Breaches

BreezePath maintains procedures for identifying, assessing and responding to suspected personal data breaches.

Where a breach occurs, we will take reasonable steps to:

  • contain and investigate the incident;
  • reduce potential harm;
  • secure affected systems or records;
  • document the incident;
  • notify relevant authorities where required; and
  • notify affected individuals where required by applicable law.

12. Cookies and Similar Technologies

Our website may use cookies, pixels, local storage and similar technologies.

These may include:

  • Strictly necessary technologies, which support essential website functions;
  • Functional technologies, which remember preferences;
  • Analytics technologies, which help us understand website performance and usage; and
  • Advertising technologies, where used, which measure campaigns or support relevant advertising.

Where required, we will obtain consent before using non-essential cookies or similar technologies.

You may manage cookies through any cookie-preference tool made available on the website and through your browser settings. Blocking some technologies may affect website functionality.

13. Direct Marketing Preferences

You may stop receiving marketing communications at any time by:

  • using the unsubscribe function in an email;
  • replying "STOP" where that option is available;
  • informing your counsellor; or
  • contacting us using the details below.

We may continue sending non-marketing communications that are necessary to manage an enquiry, application or service you have requested.

14. Students Under 18

BreezePath may provide services to students under 18.

Where a student is under 18, we may:

  • require the involvement and consent of a parent or lawful guardian;
  • collect parent or guardian contact and identification information;
  • communicate with the parent or guardian concerning the student's application and welfare; and
  • verify the authority of the person providing consent.

A parent or guardian should review this Privacy Policy before submitting personal data concerning a minor.

If you believe information concerning a minor has been submitted without appropriate authority, please contact us promptly.

15. Your Privacy Rights

Subject to applicable law and relevant exceptions, you may have the right to:

  • be informed about how we process your personal data;
  • request access to personal data held about you;
  • request correction of inaccurate, incomplete, misleading or outdated information;
  • withdraw consent for future processing based on consent;
  • object to or prevent processing for direct-marketing purposes;
  • request that certain processing be stopped or limited;
  • request data portability where legally applicable and technically feasible;
  • request deletion or anonymisation where the information is no longer required and deletion is permitted by law; and
  • make a complaint concerning our handling of personal data.

Withdrawal of consent does not affect processing that occurred lawfully before the withdrawal. It may also affect our ability to continue providing an application or service that depends on the relevant information.

To protect your information, we may request reasonable identification or supporting information before responding to a privacy request.

Certain requests may be limited or refused where permitted by law, including where fulfilling the request would disclose another person's data, compromise legal privilege or conflict with a legal retention obligation.

16. Complaints

Questions or complaints should first be directed to BreezePath using the contact details below.

We will review the matter and aim to provide a meaningful response within a reasonable period.

You may also have the right to lodge a complaint with the relevant personal data protection authority where you believe your personal data has been processed in breach of applicable law.

17. Third-Party Websites and Platforms

Our website may contain links to university websites, application platforms, WhatsApp, social media pages, maps and other third-party services.

When you select a third-party link or communicate through an independently operated platform, that third party may process information under its own terms and privacy policy.

BreezePath does not control the independent privacy practices of third parties. You should review the relevant third-party privacy policy before submitting sensitive information.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

  • changes to our services;
  • changes to our technology or service providers;
  • changes to our data-processing practices; or
  • changes to legal and regulatory requirements.

The latest version will be published on this page with an updated revision date.

Where a change materially affects how we use personal data, we will take reasonable steps to provide additional notice or obtain consent where required.

19. Contact Us

For questions, access requests, correction requests, complaints or other privacy matters, please contact:

BreezePath
Email: info@breezepath.org
Subject: Privacy Request

Recommended Form Consent Wording

The following wording may be used on enquiry and application forms.

Required Privacy Acknowledgement

I acknowledge that I have read the BreezePath Privacy Policy and consent to BreezePath processing my information to respond to my enquiry and provide the services I request.

Optional Marketing Consent

I agree to receive study-abroad guides, scholarship updates, event invitations and other marketing communications from BreezePath. I may unsubscribe at any time.

Application and International Disclosure Authorisation

I authorise BreezePath to disclose the personal data and application documents I have approved to selected institutions, application partners and relevant service providers, including recipients outside Malaysia, for the purpose of assessing and processing my application.