Legal
Privacy Policy
Last updated: 10 April 2025 ยท Neural Loft
Neural Loft is committed to handling the personal data of learners, prospective learners, and website visitors with care and transparency. This policy explains what data we collect, how we use it, and the rights available to individuals whose data we hold.
1. Who We Are
Neural Loft operates as an online school based at 37 Jalan SS 15/4, 47500 Subang Jaya, Selangor, Malaysia. We offer structured AI and machine learning programmes and are the data controller for information collected through this website and our programme administration.
Questions about this policy or data-related requests should be directed to: [email protected]
2. Data We Collect
Information you provide directly
- Full name and email address submitted through the enquiry form
- Phone number, if voluntarily provided
- Message content, including any questions about programmes
- Enrolment details for enrolled learners (name, contact information, programme selected)
- Submitted exercises and written work during a programme
Information collected automatically
- Browser type, device type, and approximate location (country/region)
- Pages visited, time spent on pages, and referral source
- IP address and session identifiers
- Cookie preferences as stored in your browser
3. How We Use Personal Data
- To respond to enquiries and provide programme information
- To administer enrolments, sessions, and feedback processes
- To communicate with enrolled learners about their programme
- To analyse website usage and improve our content
- To comply with legal obligations under Malaysian law
We do not use personal data for marketing to third parties, nor do we sell personal data to any third party for commercial purposes.
4. Legal Basis for Processing
We process personal data under the Personal Data Protection Act 2010 (PDPA) of Malaysia. Our lawful bases for processing include:
- Consent โ for enquiry form submissions and cookies that are not essential
- Contract performance โ for administering enrolled learner data
- Legitimate interests โ for website analytics to improve our service
5. Data Retention
- Enquiry form data is retained for up to 24 months if no enrolment follows
- Enrolled learner data is retained for seven years following course completion, in line with record-keeping requirements
- Website analytics data is retained for a maximum of 14 months
- Cookie consent records are retained for 12 months from the date of consent
6. Data Sharing
We do not share personal data with third parties except where necessary for the operation of our services:
- Website hosting and email service providers operating under data processing agreements
- Analytics tools (e.g., Google Analytics) operating under applicable data processing terms
- Regulatory or legal bodies where required by Malaysian law
7. Data Security
We apply reasonable technical and organisational measures to protect personal data, including encrypted data transmission, access controls limited to personnel who need the information, and regular reviews of our data handling practices. In the event of a data breach that is likely to affect individuals' rights, we will notify the relevant parties as required by law.
8. Cookies
Our website uses essential cookies for functionality and optional cookies for analytics purposes. Cookie consent is managed through the banner displayed on your first visit to the site. For a full explanation of the cookies used and how to manage your preferences, see our Cookie Policy.
9. Your Rights
Under the PDPA and related Malaysian data protection provisions, you have the right to:
- Access a copy of the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of data where no lawful basis for retention remains
- Withdraw consent for processing based on consent (this does not affect past processing)
- Object to processing for purposes beyond direct service delivery
To exercise any of these rights, email [email protected]. We will respond within five working days.
10. Third-Party Links
This website may contain links to external resources. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies independently.
11. Children's Privacy
Our programmes and website are directed at individuals aged 18 and above. We do not knowingly collect personal data from persons under 18. If we become aware that data from a minor has been submitted, we will delete it promptly.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email to enrolled learners and by a notice on this page. The date of the most recent revision is shown at the top of this page. Continued use of our services following any change constitutes acceptance of the revised policy.
13. Contact
Neural Loft
37 Jalan SS 15/4, 47500 Subang Jaya, Selangor, Malaysia
Email: [email protected]