Privacy Policy

1. Introduction

Lumencore ("we", "us", "our") is committed to protecting the personal information of everyone who enquires about, enrols in, or participates in our educational programmes. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, and your rights in relation to it.

This policy applies to information collected through our website at lumenco.sbs, through our enrolment forms, and during the course of programme delivery. It is governed by Malaysia's Personal Data Protection Act 2010 (PDPA 2010).

If you have questions about this policy or how we handle your data, contact us at [email protected].

2. Information We Collect

2.1 Enquiry and Enrolment Forms

When you contact us or enrol a child in a programme, we may collect:

• Full name of the parent or guardian
• Email address
• Phone number (if provided)
• Name and age of the child participant
• Programme preference and any notes submitted with the enquiry

2.2 Website Usage Data

When you visit our website, basic technical information may be collected through analytics tools and cookies, including browser type, pages visited, and approximate location. See Section 5 and our Cookie Policy for details.

2.3 Programme Participation

During a programme, we may hold records relating to the child's participation, session attendance, and feedback provided at the close of the programme. These are held internally and are not shared publicly.

3. How We Use Your Information

We use personal data for the following purposes:

• Responding to enquiries and providing information about programmes
• Managing enrolment and programme scheduling
• Sending parent summaries and programme-related communications
• Improving our programmes based on feedback
• Meeting our obligations under applicable Malaysian law

We do not use personal data for automated profiling, do not sell data to third parties, and do not use it for any purpose beyond what is described in this policy without your prior consent.

3.1 Legal Basis for Processing

We process data on the basis of: (a) your consent, provided when you submit an enquiry or enrolment form; (b) the performance of a contract, when you enrol in a programme; and (c) legitimate interest, in cases such as maintaining records relevant to programme quality and safety.

3.2 Data Retention

Enquiry records are retained for up to 12 months from the date of submission. Enrolment and participation records are retained for up to 3 years following the end of a programme. After these periods, data is deleted or anonymised unless legal obligations require longer retention.

4. Data Protection Measures

Personal information is stored on secured systems with access limited to Lumencore staff who require it to carry out their responsibilities. We apply reasonable technical and organisational measures to protect against unauthorised access, accidental loss, or disclosure.

In the event of a data breach that presents a risk to individuals, we will notify affected parties and, where required under PDPA 2010, the relevant authorities, within a reasonable timeframe.

5. Cookies

Our website uses cookies to understand how visitors use the site and to store preferences. Essential cookies are required for the site to function. Optional analytics and preference cookies are only set with your consent. See our Cookie Policy for full details and to manage your preferences.

6. Third-Party Sharing

We do not sell, rent, or trade personal data. We may share limited information with trusted third-party service providers who assist in operating our website or delivering programme communications (such as email delivery platforms). These providers are contractually bound to process data only on our instructions and in accordance with this policy.

We may disclose data if required to do so by law or in response to a valid request by a government authority.

7. Third-Party Links

Our website may contain links to external websites not operated by Lumencore. We have no control over the content or privacy practices of those sites and are not responsible for their policies. We recommend reviewing the privacy policy of any third-party website you visit.

8. Children's Privacy

Lumencore programmes are designed for children, but this website and our enrolment process are directed at parents and guardians. We do not knowingly collect personal data directly from minors without parental consent. Enrolments are completed by the parent or guardian on behalf of the child participant.

If you believe a child has submitted personal information to us without appropriate parental knowledge, please contact us at [email protected] and we will investigate and remove the data where appropriate.

9. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) and, where applicable, international privacy standards, you have the following rights:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
• Right to object: You may object to certain uses of your data, including direct marketing.
• Right to erasure: You may request deletion of your personal data where there is no legitimate reason for us to continue holding it.

To exercise any of these rights, contact us at [email protected]. We will respond within 14 business days. Identity verification may be required before we process your request.

If you have concerns about how your personal data is handled, you may lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) at www.pdp.gov.my.

10. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website or services after a revision constitutes acceptance of the updated policy. We encourage you to review this page periodically.

11. Contact Us

Data controller: Lumencore
Address: Jalan Sultan Ismail 142, 50250 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3 2716 5384