Who we are
The Malaysian Students' Council of Australia (MASCA Australia) is the national representative body for Malaysian students in Australia. In this policy, “MASCA”, “we”, “us” and “our” refer to MASCA Australia.
This policy covers the MASCA Australia website, its administration area and enquiries submitted through the website. Separate MASCA state chapters or external websites may publish their own privacy terms.
Information we collect
Information you give us
- Contact details and enquiry content, such as your name, email address, affiliation, state, topic and message.
- Information supplied by committee members, partners and sponsors for publication, such as names, roles, biographies, portraits and organisation logos.
- Account details used by authorised committee members to access the content management system.
Information collected when you use the site
Our hosting and security providers may process technical records such as IP address, device or browser type, requested pages, timestamps and diagnostic logs. If you allow optional analytics, we also receive aggregated usage and website performance information. See our cookie notice for more detail and controls.
How we use information
We use personal information where reasonably necessary to:
- respond to enquiries and direct them to the relevant MASCA team;
- operate, secure, maintain and improve the website;
- publish approved committee, partner and sponsor information;
- manage authorised access to the content management system;
- understand website performance where analytics consent is given;
- meet legal obligations and respond to misuse or security incidents.
We do not sell personal information or use this website for behavioural advertising.
When information is shared
Information may be accessible to authorised MASCA committee members and to service providers that help us operate the website. These currently include Vercel for hosting and optional analytics, Supabase for database and media infrastructure, and Resend for delivering website enquiries by email.
We may also disclose information where you ask us to, where required by law, or where reasonably necessary to protect people, MASCA or the integrity of our services. Links to third-party websites are governed by those sites' own privacy practices.
Storage, overseas processing and security
MASCA and its service providers may process information in Australia and in other countries where their infrastructure or personnel are located. Our current database infrastructure is hosted in South Korea. Privacy protections and legal requirements may differ between countries.
We use reasonable administrative and technical safeguards appropriate to the information we handle, including restricted CMS access and managed service providers. No internet transmission or storage system can be guaranteed completely secure.
Retention
We keep information only for as long as reasonably needed for the purposes described in this policy, MASCA's operational records, dispute resolution, security or legal obligations. Enquiries may remain in MASCA email accounts, and provider logs or backups follow the relevant provider's retention cycle. We remove or de-identify information when it is no longer required where practicable.
Your choices and requests
You may ask to access or correct personal information we hold about you, request deletion where appropriate, withdraw analytics consent, or raise a privacy concern. Email [email protected] with enough detail for us to identify the relevant information. We may need to verify your identity and may retain information where the law or a legitimate operational need requires it.
Applicable privacy frameworks
We aim to handle personal information consistently with the Australian Privacy Principles under the Privacy Act 1988 (Cth), and the Malaysian Personal Data Protection Act 2010 where those laws apply. These frameworks may not apply to every MASCA activity in the same way. Our data protection statement explains the principles we follow in practice.
Changes to this policy
We may update this policy as the website, our providers or applicable requirements change. The effective date at the top of this page shows when this version took effect. Material changes will be highlighted where reasonably practicable.