Privacy Policy — TAM Evolution

1. Who we are

TAM Evolution (“TAM Evolution”, “we”, “us”) builds and operates digital platforms for institutions and the people connected to them, including SISTAM. This policy explains how we collect, use, share and protect personal data when you visit tamevolution.my or use SISTAM on the web or in the SISTAM app.

We process personal data in line with Malaysia’s Personal Data Protection Act 2010 (the “PDPA”).

2. SISTAM and your institution

SISTAM is used by institutions such as schools, colleges and the organisations that run them. When your institution uses SISTAM, it decides which student, staff and family information is held and why. For that information, we process personal data on the institution’s behalf and according to its instructions.

Your SISTAM account itself — the identity you sign in with — is one account that can connect to more than one institution and more than one role, for example as a parent and as a member of staff. We look after that account for you.

If you have a question about records an institution holds about you or your child, please contact that institution first. We will help it respond.

3. Personal data we collect

Account and identity

Your name, email address and sign-in details. Passwords are stored only in hashed form.
Verification codes we send to confirm your email address or reset your password.
The profiles and roles linked to your account, such as personal, parent or guardian, and staff.

Information from your institution

Student or staff records your institution connects to your account, such as a student or staff number, class or programme.
Records created while using institution services, such as attendance, calendar and activity information, and fees, invoices and payments where your institution offers them.
Card or device identifiers, where your institution uses cards or scanners to confirm identity or record attendance.

Family links

Links between a parent or guardian and a child’s profile, and how and when each link was approved.

Technical information

Your IP address, browser or device type and app version, and records of sign-ins and important actions, which we keep to run the service securely and to investigate problems.

4. How we use personal data

To create and secure your account and let you sign in once for every role.
To connect your account to the institutions, roles and family members you are linked with.
To let parents and guardians see information about the children linked to them, and only what their institution allows.
To let institutions run their services, such as attendance, calendars, communication and finance.
To send messages about the service, such as verification codes and important notices.
To keep SISTAM secure, prevent misuse, fix problems and improve how the platform works.
To meet our legal obligations.

We do not sell personal data, and we do not use it for advertising.

5. Students and children

Information about students is provided and controlled by their institution. A parent or guardian can only see a child’s information after the institution has approved the link between them, and only for the children linked to their own account. We take particular care with information about children and use it only to provide the institution’s services.

7. Where your data is stored

SISTAM’s application servers, database and email delivery run on Amazon Web Services in the Asia Pacific (Malaysia) region. Some providers we use, such as the service that delivers this website’s fonts, may process limited technical information outside Malaysia; where that happens we take the steps the PDPA requires.

8. How we protect it

Information travelling between your device and SISTAM is encrypted (HTTPS).
Passwords are stored only in hashed form.
Access is limited by role, and each institution’s data is kept separate from others.
Important actions and support access are recorded so they can be reviewed.

No system is completely secure. If a personal data breach affects you, we will act quickly and notify your institution, the authorities and you where the law requires.

9. How long we keep it

We keep personal data only for as long as we need it for the purposes above, or for as long as the law or your institution requires. Institution records are kept according to the institution’s own retention rules. When data is no longer needed, we delete it or make it anonymous.

10. Your choices and rights

Subject to the PDPA, you can ask us to:

give you access to the personal data we hold about you;
correct personal data that is inaccurate, incomplete or out of date;
stop or limit processing, or withdraw consent you have given; and
close your account and delete your data.

We will confirm your identity before acting on a request. Where a request concerns records your institution controls, we will work with that institution to respond. Withdrawing consent or closing your account may mean some SISTAM services are no longer available to you.

11. This website and your browser

tamevolution.my does not use advertising or analytics cookies. Your browser’s local storage is used only to keep you signed in, if you sign in, and to remember display preferences such as the page layout you choose. Our pages load fonts from Google Fonts, which receives your IP address and browser information when you visit.

12. Changes to this policy

We may update this policy as SISTAM and the law change. We will post the new version here with a new “last updated” date and, for important changes, let you know in SISTAM or by email.

13. Contact us

For questions about this policy or to make a request about your personal data, email info@tamevolution.my.

← Back to TAM Evolution