Privacy Policy

Last updated: 19 August 2026

Notis ini juga boleh didapati dalam Bahasa Malaysia.

Mukmin Academy provides playschool, preschool, special needs and PPKI after-school programmes in Wangsa Melawati, Kuala Lumpur.

We are operated by two companies:

TASKA NADI MUKMIN SDN. BHD. (1677669-P)
PUSAT JAGAAN NADI MUKMIN SDN. BHD. (1677671-A)

No. 29, Jalan Dataran Wangsa 1, Wangsa Melawati, 53300 Kuala Lumpur

This notice explains what personal information we collect, why, who we share it with, and your rights under the Personal Data Protection Act 2010 (PDPA).

For any privacy question, contact us at info@mukminacademy.com or 018 225 3511.

What we collect

When you visit our website. We have no contact forms — you cannot type personal details into any page. We use Google Analytics to see which pages are read and how visitors found us. It records your approximate location, browser, device and the pages you view. It does not identify you by name.

When you contact us. If you message us on WhatsApp, call, or email, we receive what you choose to send — usually your name, phone number, your child’s name and age, and anything you tell us about your child’s needs. We use it to answer you, and keep it if your child enrols.

When your child enrols. We collect what we need to care for and teach your child:

Your child’s name, date of birth, identification details, photograph and address
Health information — allergies, medical conditions, medication, dietary needs, immunisation, doctor’s contact
For children in our Early Intervention or PPKI programmes, diagnosis, assessment reports, therapy history and progress notes
Parent and guardian details — name, IC number, address, phone, email
Emergency contacts, and the people authorised to collect your child
Fee and payment records

Health information and information about a child’s diagnosis are sensitive personal data under the PDPA. We collect it only where it is needed for your child’s care, safety and learning, and we restrict access to staff directly involved with your child.

Photographs and video. We take photos and video of children during lessons, celebrations and excursions. We use them in your child’s records and daily updates to you, and in our website gallery and our Facebook, Instagram, TikTok and YouTube pages.

We do this only with your written consent, given when your child enrols. You can withdraw consent at any time by writing to info@mukminacademy.com, and we will stop using your child’s images and remove them from our own channels. Images already shared elsewhere by other people cannot always be recalled.

CCTV. We operate CCTV in our premises for the safety and supervision of children. Footage is viewed only by authorised staff and is kept for about one month before being overwritten, unless it is needed for a specific safety or incident investigation.

Why we use it

To answer your enquiries and arrange visits
To enrol your child and administer their place
To care for, supervise and teach your child
To meet your child’s individual learning needs
To keep your child safe, including managing allergies and medical needs
To keep you updated on your child’s day and progress
To invoice and collect fees
To meet our legal, licensing and regulatory duties
To understand how our website is used

We rely on your consent, on the need to deliver what we have agreed with you, and on our legal obligations.

Who we share it with

We do not sell your data, and we do not share it for advertising.

We share it only with:

School2me (operated by Appminor Sdn Bhd), the app we use to send you updates about your child’s day. Your contact details and your child’s activity records are held there.
Government and regulatory bodies where required — including the Department of Social Welfare (JKM), the Ministry of Education, health authorities and Bomba.
Healthcare providers, in a medical emergency involving your child.
Google, for website analytics only. Google does not receive your child’s records.
Our accountants, auditors or lawyers, where necessary and in confidence.

We may also disclose information where the law requires it, or where it is necessary to protect a child from harm.

Sending information outside Malaysia

Google Analytics stores website data on servers outside Malaysia. Where we transfer personal data abroad, we do so only where the destination offers protection comparable to the PDPA, or where another lawful basis applies.

Your child’s enrolment, health and developmental records are kept in Malaysia and are not transferred overseas.

How long we keep it

Your child’s records — while your child is with us, and afterwards for as long as the law and our licensing conditions require
Financial records — 7 years, as Malaysian tax law requires
CCTV footage — about one month
Enquiries that do not lead to enrolment — up to 12 months
Website analytics — up to 14 months

When a retention period ends, we securely delete or destroy the records.

Cookies

Our website uses Google Analytics and Google Tag Manager, which set cookies to measure how pages are used. You can block or delete cookies in your browser settings and the site will still work normally. You can opt out of Google Analytics entirely at tools.google.com/dlpage/gaoptout.

We do not use advertising or remarketing cookies.

Links to our WhatsApp, Facebook, Instagram, TikTok, YouTube and Google Maps pages take you to services with their own privacy policies, which we do not control.

How we protect it

Paper records are kept in locked storage, accessible only to authorised staff
Digital records are password-protected and limited to staff who need them
Our website uses HTTPS encryption
All staff are bound by confidentiality obligations towards children and families
Health, diagnosis and assessment records are restricted to staff directly involved in your child’s care

Children’s information

Nearly everything we hold concerns children, and children cannot give consent themselves. We therefore rely on the consent of a parent or legal guardian.

We never use children’s information for marketing, and we never sell, rent or trade it.

Your rights

Under the PDPA you may ask us to:

See the information we hold about you or your child
Correct anything inaccurate or out of date
Withdraw your consent, though this may mean we can no longer offer a place
Limit how we use it
Transfer it to another provider, where that is technically possible

Email info@mukminacademy.com or speak to us at the academy. We may need to confirm your identity first. Requests about a child must come from a parent or legal guardian.

You also have the right to complain to the Personal Data Protection Commissioner.

If something goes wrong

If a data breach occurs that is likely to cause serious harm, we will notify the Personal Data Protection Commissioner within 72 hours of becoming aware of it, and tell affected families where required.

Changes

We may update this notice. The current version is always on this page, with the date it was last updated. If a change is significant, we will tell parents directly.

Contact us

TASKA NADI MUKMIN SDN. BHD. (1677669-P)
PUSAT JAGAAN NADI MUKMIN SDN. BHD. (1677671-A)