PRIVACY

Privacy notice

Revision FSA-POL-2026-09-13, effective 2026-09-13. Owner-approved operating policy — not a court-certified legal opinion and not a guarantee of admission, visa, or partner outcomes.

Controller and purposes

Falcon Study Abroad (Maldives consultancy; Malaysia first destination) is the controller for data used to run consultations, accounts, document collection, casework and operational finance. We process identity and contact details, academic profile facts, documents, case records and financial subledger evidence for those purposes. Authority is contract or pre-contract steps, legitimate operational interests (security and audit), consent for optional marketing, and legal obligation for financial records.

Marketing consent is optional and separate from service contact. Private documents, transcripts and medical evidence never appear in public catalogue pages or fixtures.

Retention (summary)

Abandoned minimal leads: 12 months after last meaningful activity, then erase when eligible.
Failed or quarantine uploads: 30 days after upload received, then erase when eligible.
Operational documents: review 12 months after case closure (not silent auto-delete).
Financial records: review at least 5 years after tax year end (MIRA Tax Administration Act §27(c) unofficial English). Never auto-erase. Legal holds win.

Processors for this launch

Intended hosting is Dokploy/VPS and private S3-compatible storage with quarantine (live bucket and region still being evidenced). Email SMTP is used when configured. WhatsApp and SMS are disabled. BML hosted checkout and live partner APIs are not part of this launch.

Your rights

Contact Falcon through the contact page or signed-in support tools to request access, correction, export or deletion. Finance facts and legal holds may limit erasure. See also terms of use and cookies.