How We Use Personal Data
We collect information about you and may also collect information about your parents or appointed legal guardians when you meet with us. We use this information to help us provide guidance in selecting courses. We share your information to the extent necessary with our partners and/or other parties to allow them to provide their services and with any other entity required by law (e.g. with Brunei government entities).
We may also use this information, once you return to Brunei, to offer employability training to support your job search.
Storing Information:
We retain information only for as long as necessary to fulfil the purpose(s) for which it was collected and to meet our legal and regulatory obligations.
Requesting Access to Your Information:
- You may request access to your information (“right of access”) by contacting Findlay’s Data Protection Officer. You also have the right:
- To be informed about the collection and use of your information (the “right to be informed”).
- To ask us to change any information that you consider is not accurate or complete (“right to rectification”).
- To ask us to delete personal information (“right to erasure”).
- To ask us to stop using your information for specified purposes (“right to restriction of processing”).
- To ask us to transfer your information to you or to another party (“right of portability”).
- To withdraw consent at any time (where relevant – “right of withdrawal”).
- To complain to AITI if you feel we have not used your information appropriately.
Why We May Not Comply with an Information Request
There are legitimate reasons why we may not comply to your information request, which depend on why we are processing it. For example, some rights will not apply:
- The right to erasure does not apply when the lawful basis for processing is legal obligation or public task.
- The right to portability does not apply when the lawful basis for processing is legal obligation, vital interests, public task or legitimate interests.
- The right to object does not apply when the lawful basis for processing is contract, legal obligation or vital interests.
- If the lawful basis is consent, you don’t haven’t the right to object, but you have the right to withdraw consent.
If you have a concern about the way we collect or use your information, you should raise your concern with us immediately.
Withdrawal of Consent and the Right to Complain:
We will only process information with your consent for the purpose(s) to which you have consented. Where we are processing your information with your consent, you have the right to withdraw that consent. If you change your mind, or you are unhappy with our use of your information, please let us know by contacting your consultant or our Data Protection Officer.
Note that refusing to provide information or to advise when it has changed may mean that we or our partners can’t fulfill our obligations.
Security:
To prevent unauthorised access, we maintain reasonable physical, electronic and organisational procedures to protect information against accidental or unlawful destruction, accidental loss, alteration, unauthorised disclosure or access.
We have implemented reasonable standards of technology and operational security to protect information from loss, misuse, or unauthorised alteration or destruction.
Please note that where you transmit information to us over the internet, this can never be guaranteed to be 100% secure.
Last Updated
We may need to update this privacy notice periodically so we recommend that you revisit this information from time to time. This version was last updated on 11 March 2026.
Contact
If you would like to discuss anything in this privacy notice, please contact The Data Protection Officer:
Tel: +673 2428658
Email: dpofindlaybsb@gmail.com
