Privacy Policy — Medicademy

1. Introduction

Medicademy (“we”, “us”, “our”) operates a learning management platform for CPD medical education in Malaysia. We are committed to protecting your personal data in compliance with the Malaysian Personal Data Protection Act 2010 (PDPA).

2. Data We Collect

Account data: name, email, password (hashed)
Professional data: MMC registration number, specialty, hospital/clinic affiliation, phone number
Payment data: processed via Stripe; we do not store card numbers
Learning data: course progress, video watch history, certificates earned

3. How We Use Your Data

To provide access to purchased courses and webinars
To generate CPD certificates with your name and MMC number
To send transactional emails (receipts, reminders)
To verify medical credentials for provider applications

4. Data Sharing

We share data with trusted third-party service providers (Supabase, Stripe, Mux, Resend) solely for platform operations. We do not sell your personal data.

5. Your Rights

Under the PDPA, you have the right to access, correct, and request deletion of your personal data. To exercise these rights, contact us at privacy@medicade.my.

6. Data Retention

We retain your data for as long as your account is active. Upon request, we will delete your account and associated data within 30 days, except where retention is required by law.

7. Contact

For privacy enquiries, contact: privacy@medicade.my