Privacy Policy
Last updated: 14 November 2026
Who we are
EPI Academy is operated by Epipeople Management & Consultancy (Registration No. RC30000242), Brunei Darussalam. We decide how and why your personal data is used, and we handle it in line with the Personal Data Protection Order, 2025 of Brunei Darussalam. For any data protection matter, contact hello@epipeople.com.
Personal data we collect
Registration details: your name, email address, mobile number with country code, country and time zone, how you heard about us, and your learning goals.
Payment records: your bank transfer reference, date and the receipt you upload.
Course records: attendance, assignments, coach feedback, completion status and certificate details.
Feedback: your ratings and comments, and any review you choose to give.
Messages and website data: messages you send us, and basic technical data collected by our website host, such as cookies needed for the site to work.
Why we use it
We use your personal data to process your registration, verify payment, deliver your course, record attendance and assignments, issue and verify certificates, answer your questions, keep business records, meet legal obligations and improve our courses.
Consent
We collect and use your personal data with your consent, or as otherwise permitted by law. You may withdraw your consent at any time by contacting us. If you do, we may be unable to continue providing a course to you.
Marketing
Registering for a course does not add you to a marketing list. We send marketing messages only if you have separately agreed to receive them, and you can opt out at any time.
Who we share it with
Your assigned coach receives only the details needed to teach and assess you. We use service providers for website hosting, email, video conferencing and secure storage, who act on our instructions. We disclose personal data to authorities where the law requires it. We do not sell personal data.
Transfers outside Brunei Darussalam
Some of our service providers store data outside Brunei Darussalam. Where personal data is transferred abroad, we take steps to ensure it receives a comparable standard of protection.
Recordings
Live sessions may be recorded for internal quality and record-keeping purposes. Recordings are stored privately and are not distributed.
Certificate verification
Our public certificate verification page confirms whether a certificate is valid. Your name and course are shown publicly only if you choose to allow it.
Security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, use, disclosure or loss. Receipts, assignments and learner records are kept in private storage, not on public links.
How long we keep it
We keep personal data only for as long as it is needed for the purposes above, or as required for legal, accounting or business records. After that we delete or anonymise it.
Your rights
You may ask for access to the personal data we hold about you, ask us to correct it, and withdraw your consent. Contact hello@epipeople.com and we will respond within a reasonable time. If you are not satisfied with our response, you may contact the Authority for Info-communications Technology Industry of Brunei Darussalam (AITI).
Participants outside Brunei Darussalam
We welcome participants from other countries. Where the data protection law of your country gives you additional rights that apply to us, we will respect them.
Children
Our courses are intended for adults. Participants under 18 may register only with the consent of a parent or guardian.
Changes to this policy
We may update this policy from time to time. The latest version is always published on this page.
Contact
Email hello@epipeople.com or message (+673) 8880590.