Privacy Policy

1. Introduction

Neurokiln ("we", "us", "our") operates an online AI development school based at Jalan Kelawei 76, 10250 George Town, Pulau Pinang, Malaysia. This Privacy Policy describes how we collect, use and protect personal data in connection with our website and educational programmes.

We process personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. If you have questions about this policy, contact us at [email protected].

2. Data We Collect

2.1 Data you provide directly

When you submit an enquiry form on our website, we collect your name, email address and, optionally, your phone number and message content. When you enrol in a stage, we collect the data necessary to administer your enrolment, including payment records held by our payment processor.

2.2 Data collected automatically

Our website may collect technical data such as IP address, browser type, pages visited and time spent on pages through analytics tools. This data is collected in aggregate and is used to understand how the site is used.

2.3 Legal basis for processing

• Contractual necessity — to administer your enrolment and deliver the stage you have enrolled in
• Consent — for marketing communications, where you have opted in
• Legitimate interests — to operate and improve the website and our programmes
• Legal obligation — where Malaysian law requires us to retain records

2.4 Retention periods

Enquiry data is retained for 12 months from the date of enquiry. Enrolment records are retained for seven years following the completion or withdrawal from a stage, in line with standard record-keeping practice. Analytics data is retained in anonymised aggregate form.

3. How We Use Your Data

• Responding to your enquiry and discussing stage suitability with you
• Processing your enrolment and administering your participation in a stage
• Sending you information relevant to the stage you are enrolled in, including session schedules and recorded session access
• Issuing completion records at the end of a stage
• Sending marketing communications about future cohorts, only where you have given consent or where you are an existing learner and there is a clear relationship to what you have already studied
• Understanding how the website is used in aggregate to improve its content and structure
• Complying with legal obligations under Malaysian law

We do not sell your personal data to third parties. We do not share your data for advertising purposes.

4. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These include access controls limiting which team members can access personal data, and the use of encrypted connections for data transmission.

In the event of a personal data breach that may affect your rights, we will notify you and, where applicable, the relevant supervisory authority, within the timeframes required by the PDPA.

No method of transmission or storage is entirely secure. We take the steps described above to reduce risk but cannot make absolute assurances.

5. Cookies

Our website uses cookies to remember your cookie consent preference and, if analytics cookies are accepted, to collect anonymised usage data. You can manage your cookie preferences at any time through our Cookie Policy page.

Essential cookies necessary for basic site function are always active. Analytics and marketing cookies are only set if you give consent.

6. Your Rights

Under the PDPA and related applicable frameworks, you have the right to:

• Access — request a copy of personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Withdrawal of consent — withdraw marketing consent at any time
• Objection — object to processing based on legitimate interests
• Erasure — request deletion of data we are not legally required to retain
• Portability — receive your data in a commonly used machine-readable format

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you are not satisfied with our response, you may contact the relevant data protection authority in Malaysia.

7. Third-Party Links

Our website may contain links to external websites, including partner organisation sites referenced in Stage 3 programme materials. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site before providing personal data.

8. Age Restriction

Our programmes are intended for individuals aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] so we can take appropriate steps.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will update the Last Updated date at the top of this page. Where changes are material, we will notify enrolled learners by email. Continued use of the website following notification constitutes acceptance of the updated policy.

10. Contact for Privacy Matters

For any questions, corrections or requests related to personal data, contact: