In short: we collect only what we need to guide you into a Malaysian university. We verify your WhatsApp number before we process anything. We send you WhatsApp and email messages only when you have agreed to them. We share your details with TJS Studysteps to support you in Malaysia, and with a university only when you ask us to apply there. We never sell your data. You can ask to see, correct or delete it at any time: privacy@careergliders.com.
Who we are
Career Gliders is a programme operated by 12Nexus, registered office H# 19-C, St. 7, Block E, Soan Gardens, Islamabad, Pakistan. TJS Studysteps is our operations partner in Malaysia. In this policy, "we" and "us" mean Career Gliders and 12Nexus.
12Nexus decides how and why your personal data is used, and is responsible for it. For anything about your data, write to privacy@careergliders.com. For everything else, write to info@careergliders.com.
We follow Pakistan's Prevention of Electronic Crimes Act 2016 (PECA) and Malaysia's Personal Data Protection Act 2010 (PDPA), as amended in 2024. Pakistan's Personal Data Protection Bill is still a draft; we will update this policy when it becomes law.
Students come to us from many countries. Where the data protection law of the country you live in gives you rights over your personal data, we respect those rights too.
What we collect
- Your answers to the pathway assistant: your qualification and grades, the field you want to study, your budget, your preferred intake and city, your English test, your interest in scholarships, and family needs you choose to tell us (for example, a female-only hostel). These answers stay in your browser until you ask for your full plan.
- Your contact details: your name, WhatsApp number, email address and city.
- Your consents: which messages and uses you agreed to, and when.
- Verification records: that your WhatsApp number was verified, and when. One-time codes are not kept after they expire.
- Your pathway and your file: the plan we build for you, your counsellor's notes, the outcome of calls, and your application stage.
- Your documents, when you apply: for example your passport, transcripts, certificates, bank statements and medical report. We ask for these only when they are needed for an application or a visa.
- Messages you send us on WhatsApp, by email or through our forms.
- Technical data: your IP address and basic browser and device information, used to keep the site secure and to stop abuse. Analytics data only if you accept analytics cookies (see Cookies).
If you are under 18, please ask a parent or guardian to read this policy with you and to agree on your behalf.
Why we use it
| Purpose | What we use | Our basis |
|---|---|---|
| Build your pathway and give you counselling | Assistant answers, contact details, pathway | You asked for the service |
| Verify your WhatsApp number | WhatsApp number, one-time code | You asked for the service; it also stops abuse |
| Send you your plan, updates and replies | Contact details | Your consent |
| Apply to universities and prepare your visa file | Your file and documents | You asked for the service, and your consent for each university |
| Support you on arrival in Malaysia | Contact details, arrival details, accommodation needs | You asked for the service |
| Keep the site secure and stop spam | Technical data | Our legitimate interest in a safe service |
| Understand how the site is used | Analytics data | Your consent (cookie choice) |
| Meet legal obligations | What the law requires | Legal obligation |
WhatsApp and email messages
When you ask for your plan or a call, you choose whether we may message you on WhatsApp and by email. With your consent we send:
- your one-time verification code
- your pathway and the link to follow its progress
- updates when your application moves to a new stage
- replies to your questions
We send messages from our own WhatsApp account and by email from noreply@careergliders.com; replies go to info@careergliders.com. WhatsApp is a service of Meta, so messages pass through WhatsApp under its own terms. We do not send marketing broadcasts on WhatsApp. Any email that is not about your own application has an unsubscribe link.
To stop messages, tell us on WhatsApp or write to info@careergliders.com. If you stop WhatsApp messages, we can still help you by phone or email.
WhatsApp verification
Before we process your request, we send a 6-digit code to your WhatsApp number. The code works for 5 minutes and allows 3 attempts. We limit how many codes a number or a connection can request each hour. This confirms the number is yours and protects you and us from fake requests. If you don't use WhatsApp, you can ask a counsellor to call you instead.
The AI pathway assistant
The assistant uses Google Gemini, provided by Google, to help build your pathway. Google processes the data for us, under its terms for the Gemini API, and only to produce the answer we ask for.
- Before you verify your number, the assistant runs in your browser. Nothing is stored and nothing is sent to Gemini.
- After you verify, we send Gemini your answers and the programme data needed to build your plan. We never send it your WhatsApp number or email address.
- Fees and costs are calculated by our own software from our data, not by the AI.
- A counsellor reviews every pathway. The assistant never decides admission.
Read more in How we use AI.
Analytics and cookies
We use Google Analytics 4, the Meta Pixel and Microsoft Clarity to understand how the site is used and to measure our advertising. They run only after you accept them in the cookie banner. Until then they are off. Clarity masks everything typed into forms. No analytics or marketing tag runs on your personal tracker page. If you accept marketing, Meta receives an anonymous "Lead" event when you verify your WhatsApp code, with no name, phone number or email address, and Google signals are turned on in Google Analytics. You can change your choice at any time from "Cookie settings" at the bottom of every page. Details are in the Cookie policy.
Who we share it with
We never sell your personal data. We share it only as follows:
- TJS Studysteps, our operations partner in Malaysia, to support your application, visa, arrival, accommodation and life in Malaysia.
- Universities, only when you ask us to apply to them, and only what the application needs. The university then uses your data under its own privacy policy. Your visa application goes to Education Malaysia Global Services (EMGS) through the university.
- Service providers who process data for us under contract: Google Cloud (hosting), Google (Gemini, and Google Analytics with your consent), Meta (WhatsApp, and the Meta Pixel with your consent), Microsoft (Clarity, with your consent), Cloudflare (Turnstile, which blocks automated form submissions), and our email hosting provider.
- Authorities, when the law requires it.
Where your data is stored
Your data may be processed outside the country you live in. Our servers are on Google Cloud in its Doha, Qatar region, our offices are in Pakistan and Malaysia, TJS Studysteps works in Malaysia, and our service providers may process data in other countries. Wherever your data is processed, we use providers that protect it under their contracts with us.
How long we keep it
- One-time codes: they expire after 5 minutes and are not kept.
- Enquiries that don't go further: 12 months after your last contact with us.
- Student files (pathway, notes, documents): while we are supporting you, then 3 years, unless the law requires longer.
- Message logs: 12 months.
- Analytics: Google Analytics keeps data for 14 months. Microsoft Clarity keeps session recordings for about 30 days and heatmap data for about 13 months, as set by Microsoft.
After that we delete the data or make it anonymous.
How we protect it
Data travels over encrypted connections (HTTPS). Only our team and TJS Studysteps can see student files, and only for their work. Documents are shared only through secure links, never by public link. If a data breach is likely to harm you, we will tell you, and the authorities where the law requires it.
Your rights
You can ask us to:
- tell you what data we hold about you and give you a copy
- correct data that is wrong or incomplete
- delete your data, where we don't need to keep it by law
- stop using your data for a purpose, or withdraw a consent you gave
- stop sending you messages
- send your data to you or to another organisation, where the law allows
Write to privacy@careergliders.com from the email address or WhatsApp number you gave us, so we can confirm it is you. We reply within 21 days. Withdrawing a consent does not affect what we did before. If you are not happy with our answer, you can complain to the data protection authority where you live, such as the Personal Data Protection Commissioner in Malaysia.
Changes to this policy
When we change this policy, we update the date on this page. If a change affects how we use data you have already given us, we will tell you before it takes effect.
Updated