Privacy Policy

21st Mind Learning Centre ("21st Mind", "we", "us", or "our") respects your privacy and is committed to protecting personal data in accordance with the Personal Data Protection Act 2010 ("PDPA"), as amended, and its regulations. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over it — whether you are a parent or guardian enquiring about our programs, or a student enrolled with us.

This Policy applies to personal data collected through our website at 21stmind.com (the "Site"), our learning centres in Desa Sri Hartamas and Bandar Baru Bangi, and any other way you interact with us, including by phone, WhatsApp, email, or in person.

"You" in this Policy refers to the person whose personal data we hold. Where our student is a minor, this includes the student's parent or legal guardian, who provides consent on the student's behalf.

1. Personal Data We Collect

We only collect personal data that is relevant to running our programs and communicating with you. Depending on how you interact with us, this may include:

• Parent/guardian's name, phone number, and email address
• Child's name and age
• Preferred learning centre location and program(s) of interest
• Any additional information you choose to share with us, such as questions or comments submitted through our enquiry form, WhatsApp, phone, or email
• Photographs, videos, or testimonials from classes, holiday camps, or competitions, where you have given consent (see "Photographs and Testimonials" below)
• Basic technical information generated by your browser when you visit our Site (see "Cookies and Website Analytics" below)

We do not knowingly collect sensitive personal data (such as health information, religion, or race) unless you voluntarily provide it to us — for example, to let us know about a medical or dietary need relevant to a class or camp. Where you do so, we will only use it for that specific purpose.

2. How We Collect Your Personal Data

We collect personal data directly from you, through:

• Our website enquiry / program interest form
• WhatsApp, phone calls, and email
• Enrolment and registration at our learning centres

3. Why We Collect and Use Your Personal Data

We use your personal data to:

• Respond to your enquiries and follow up on program interest
• Register your child for a trial class, term program, or holiday camp
• Place your child in the appropriate class or level, and manage attendance
• Communicate with you about classes, schedules, fees, holiday camps, and centre announcements
• Register students for external innovation competitions (such as Techlympics or Scratch Olympiad), with your consent, where the competition organiser requires participant details
• Maintain the safety and orderly operation of our centres
• Comply with our legal and regulatory obligations

Where we rely on your consent to process personal data (for example, for marketing photos or competition sign-ups), you may withdraw that consent at any time by contacting us using the details at the end of this Policy. If you choose not to provide certain information that is necessary for us to enrol your child or deliver a program, we may not be able to provide that service to you.

4. Photographs and Testimonials

From time to time, we take photographs or short videos of students during classes, holiday camps, and competitions, which we may use on our website, social media, or other marketing materials. We will only use images that identify your child, or testimonials attributed to you or your child, with your consent, obtained separately at the point of enrolment or before a specific event. You may withdraw this consent at any time by contacting us, and we will remove the relevant material from future use within a reasonable time.

5. Who We Share Your Personal Data With

We do not sell your personal data. We keep it confidential and only share it where necessary, with:

• Service providers who help us run our business, such as Google (for our enquiry forms and record-keeping) and Cloudflare (for website hosting and anonymous visit statistics). These providers handle personal data in line with their own privacy policies and security practices, and we use them only for the purposes described in this Policy.
• Competition organisers, where your child is registered to take part in an external competition that requires participant details, with your consent.
• Professional advisers (such as an accountant or lawyer), where reasonably necessary for our business.
• Authorities or regulators, where we are legally required to disclose information, or to protect the safety of a student, staff member, or member of the public.

Some of the service providers above (such as Google) may store or process data on servers located outside Malaysia. Where this happens, we take reasonable steps to ensure your personal data continues to receive a comparable standard of protection, as required under the PDPA.

6. Cookies and Website Analytics

Our Site does not use advertising or tracking cookies. To understand how the Site is used and keep it fast, we use Cloudflare Web Analytics, a privacy-focused tool that records anonymous, aggregated statistics — such as which pages are visited, the country and device type of visitors, and how quickly pages load. It does not use cookies, does not follow you across other websites, and does not identify you personally.

Our Contact page includes an embedded Google Map. When you open that page, Google may receive technical information from your browser and may set its own cookies, in line with Google's privacy policy. We may also use minimal, strictly necessary technical data (such as your browser type) required for the Site to function correctly. If we introduce other analytics or marketing tools in the future, we will update this Policy accordingly.

7. Data Security

We take reasonable technical and organisational steps to protect your personal data against loss, misuse, unauthorised access, and disclosure. This includes limiting access to personal data to staff who need it to do their jobs, and using reputable third-party platforms with their own security safeguards to store and process data on our behalf. In the unlikely event of a data breach that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and affected individuals in accordance with the PDPA.

8. How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy — for example, for as long as your child is enrolled with us, plus a reasonable period afterwards to respond to follow-up questions, maintain records, and comply with our legal obligations. Enquiries that do not lead to enrolment are retained for a limited period before being deleted, unless you ask us to remove them sooner.

9. Your Rights

Under the PDPA, you have the right to:

• Request access to the personal data we hold about you or your child
• Request correction of any personal data that is inaccurate or outdated
• Withdraw consent you previously gave us, such as for marketing photos
• Ask us to stop processing your personal data where it is likely to cause you or your child unwarranted harm or distress
• Where reasonably feasible, request a copy of your personal data in a commonly used format

To exercise any of these rights, contact us using the details below. We may need to verify your identity, and in some cases the PDPA allows us to decline a request — if so, we will explain why.

10. Children's Data

Our programs are designed for children, so personal data relating to a student is collected and used with the consent of their parent or legal guardian. If you are a parent or guardian and believe your child has provided us with personal data without your knowledge outside of an enrolment process, please contact us and we will address it.

11. Links to Other Websites

Our Site may contain links to third-party websites, including social media pages and the interest form we use. Once you leave our Site, this Policy no longer applies — we encourage you to review the privacy practices of any site you visit.

12. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or in the law. We will post the updated version on this page with a new "Last updated" date. Please check back periodically.

13. Contact Us

If you have any questions about this Policy, or wish to exercise any of your rights under the PDPA, please contact us at:

• Email: info@21stmind.com