This Privacy Policy explains how Codeinfinity4kids ("we", "us") collects, uses, discloses and protects personal data when you use our website, book a trial class or enrol a child in our classes. We aim to handle personal data in line with the Personal Data Protection Act 2010 of Malaysia.
1. Who this policy covers
This policy covers parents and legal guardians, students, and other visitors who contact us. Our services are intended for students aged 8 to 17. Bookings and registrations must be made by a parent or legal guardian, who provides consent on the child's behalf.
2. Personal data we collect
- Parent or guardian details: name, WhatsApp number and, optionally, email address.
- Student details: name, age, course interest and, optionally, previous coding experience.
- Learning records: class attendance, learning activities, project submissions and progress notes.
- Payment records: amounts, dates, status and references. We do not store card details.
- Technical data: basic logs needed to keep the website secure, such as IP address and browser type.
We do not ask for identity documents, precise location or sensitive personal data about children. Please do not include such information in messages to us.
3. Why we use personal data
- To arrange trial classes, enrol students and run classes.
- To contact parents about bookings, schedules, progress and payments.
- To send class updates and offers, only where a parent has opted in. You can opt out at any time.
- To keep our services secure, prevent misuse and meet legal obligations.
4. Automated tools
We may use workflow automation and AI tools to help our team, for example to draft replies or summarise enquiries. A person reviews important decisions such as pricing, payments and class placement. We do not send children's personal data to external AI providers without appropriate safeguards and authorisation.
5. Sharing personal data
We do not sell personal data. We share it only with service providers who help us operate (for example, hosting, messaging or payment providers) under appropriate confidentiality and security terms, or where required by law.
6. How long we keep data
We keep personal data only as long as needed for the purposes above. Enquiries that do not lead to enrolment are deleted or anonymised after a set period, and student records are deleted or anonymised after a student leaves, unless we must keep them longer by law. [Retention periods to be confirmed before launch.]
7. Security
We protect personal data with access controls, encrypted connections, secure password storage and audit logging of administrative actions. No system is completely secure, and we will act promptly on any data breach in accordance with applicable law.
8. Your rights
You may request access to, or correction of, the personal data we hold about you or your child, withdraw consent, or ask us to stop marketing messages. Some requests may affect our ability to provide classes.
9. Contact us
For privacy questions or requests, please contact us through our contact page. [Data protection officer details to be added if required.]
10. Changes to this policy
We may update this policy from time to time. The version number above shows the current version.