Privacy Policy

Last updated: June 10, 2026

UiTM STEP ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our platform. We have designed our practices to align with international data protection standards, including the General Data Protection Regulation (GDPR).

1. Information We Collect

We may collect personal identification information from you in various ways, including:

  • Identity Data: First name, last name, and student ID.
  • Contact Data: UiTM student email address and contact numbers.
  • Profile Data: Skills, portfolio items, biography, and profile images you choose to upload.
  • Technical Data: IP address, browser type and version, time zone setting, operating system, and platform details.
  • Usage Data: Information about how you use our platform, products, and services.

2. Legal Basis for Processing (GDPR)

Under the GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

  • Consent: You have given clear consent for us to process your personal data for specific purposes.
  • Contract: Processing is necessary for a contract we have with you (e.g., providing our marketplace services).
  • Legitimate Interests: Processing is necessary for our legitimate interests, such as improving our platform and preventing fraud, provided those interests are not overridden by your rights.

3. How We Use Your Information

We use the collected information for various purposes, including to:

  • Provide, operate, and maintain our platform.
  • Verify your student status and manage your account.
  • Facilitate connections between students and clients.
  • Send administrative information, such as updates, security alerts, and support messages.
  • Comply with legal obligations and resolve disputes.

4. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies. When your data is no longer needed, we will securely delete or anonymize it.

5. Information Sharing and International Transfers

We do not sell your personal data. We may share your public profile information with other users to facilitate freelance opportunities. If we transfer your personal information across international borders, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data under international laws.

6. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

  • The right to access: You can request copies of your personal data.
  • The right to rectification: You can request that we correct inaccurate or incomplete data.
  • The right to erasure (Right to be forgotten): You can request that we erase your personal data under certain conditions.
  • The right to restrict processing: You can request that we restrict the processing of your data.
  • The right to data portability: You can request that we transfer the data that we have collected to another organization, or directly to you.
  • The right to object: You can object to our processing of your personal data.

To exercise any of these rights, please contact us using the information provided below. We have one month to respond to your request.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our platform and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our platform.

8. Data Security

We implement robust technical and organizational security measures designed to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or relevant laws. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, your rights, or our data practices, please contact our Data Protection Officer at [email protected] or through official UiTM administrative channels.