LEGAL / PRIVACY-POLICY
Privacy Policy
Last Updated: 14 June 2025 | Effective: 14 June 2025
1. Introduction
Neurantis ("we", "us", "our") operates an online school for AI development from Level 15, Menara Prestige, Jalan Pinang, 50450 Kuala Lumpur, Malaysia. This policy explains what personal data we collect from individuals who visit our website or enrol in our programmes, how we use it, and the rights available under Malaysia's Personal Data Protection Act 2010 (PDPA).
Questions about this policy may be directed to [email protected].
2. Data We Collect
We collect data through the following means:
- Enquiry form: name, email address, and optional phone number and message content.
- Enrolment: name, email address, phone number (for billing communication), and payment reference (handled by our payment processor; we do not store card details).
- Website usage: anonymised analytics data including pages visited, approximate geographic region, and browser type, collected via analytics tools when consent is given.
- Cookies: small text files stored in your browser. See Section 6 and our Cookie Policy for details.
3. Legal Basis for Processing
Under the PDPA 2010, we process personal data on the following bases:
- Consent: for marketing communications and analytics cookies, where you have opted in.
- Contract: where processing is necessary to fulfil an enrolment or respond to an enquiry.
- Legitimate interest: for fraud prevention, security, and record-keeping related to completed programmes.
4. How We Use Your Data
- To respond to enquiries submitted through the contact form.
- To process enrolment and administer programme participation.
- To send programme-related communications (schedules, assignment deadlines, cohort updates).
- To send marketing communications where you have opted in. You may opt out at any time.
- To understand how the website is used, in order to improve content and navigation, where analytics consent has been given.
5. Data Sharing
We do not sell personal data to third parties. We share data with the following categories of service provider where necessary:
- Payment processors: for billing. They operate under their own privacy policies and PCI-DSS standards.
- Email delivery services: for sending programme communications.
- Analytics providers: to measure website usage, under anonymisation and data processing agreements.
We require all processors to handle data under terms consistent with the PDPA 2010.
6. Cookies
We use essential cookies (required for the site to function), analytics cookies (to understand usage, opt-in), and preference cookies (to remember consent choices). Full details and preference controls are available on our Cookie Policy page.
7. Data Retention
- Enquiry data (form submissions without enrolment): 12 months.
- Enrolment and programme records: 7 years from cohort end date, for financial and administrative purposes.
- Assignment feedback records: 3 years from cohort end date.
- Analytics data: aggregated and anonymised within 26 months.
8. Data Protection Measures
Personal data is stored on servers located in Malaysia or in jurisdictions with adequate protection standards. We apply access controls so that only staff members who need to process data for programme administration can access it. Any identified breach that poses a risk to data subjects will be notified to the Department of Personal Data Protection within 72 hours of discovery.
9. Your Rights
Under the PDPA 2010, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate personal data.
- Withdraw consent to marketing communications at any time.
- Request that we cease processing your data for a specified purpose.
- Lodge a complaint with the Department of Personal Data Protection Malaysia.
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.
10. Third-Party Links
Our website may link to external resources, including research papers, tool documentation, or compute providers. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently.
11. Children's Privacy
Our programmes are directed at adults. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that data from a minor has been submitted, we will delete it promptly.
12. Changes to This Policy
We may update this policy when our data practices change or when legal requirements are revised. The date at the top of this page indicates when it was last updated. Where changes are material, we will notify enrolled learners by email.
13. Contact
Data controller: Neurantis
Level 15, Menara Prestige, Jalan Pinang, 50450 Kuala Lumpur, Malaysia
Email: [email protected]