This policy explains how Oakforge English Studio Sdn. Bhd. (Business Reg. No. 202101038452 (1429801-T), “Oakforge”, “we”, “us”) handles personal data collected through the website oakforge.help and in the course of running our language studio at Level 2, 18 Jalan Telawi 5, Bangsar Baru, 59100 Kuala Lumpur, Malaysia. We process personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
1. What we collect
Through this website we collect only what you type into our enquiry form: your name, phone number, email address, the course you are interested in, and any free-text message you choose to add. If you enrol as a student, we additionally collect information needed to run your course — such as your (or your child’s) age band, assessed level, attendance, progress records, and billing details.
We also use a small number of cookies, described separately in our Cookie Policy. Analytics cookies are set only with your consent.
2. Why we collect it
- To respond to your enquiry and arrange trial lessons;
- To place you in a suitable class and track your learning progress;
- To invoice for fees and keep the accounting records the law requires;
- To contact you about schedule changes, holidays and your own course;
- To meet legal and regulatory obligations that apply to a Malaysian company.
We do not sell personal data. We do not send marketing newsletters unless you have expressly asked to receive them, and any such message will contain a working unsubscribe option.
3. Children
Enrolments for learners under 18 are accepted only from a parent or legal guardian, and all communication about a child’s progress is directed to that adult. We collect no more information about a child than is needed to teach them well and keep them safe on our premises.
4. Who can see your data
Within Oakforge, access is limited to the staff who need it: your tutor sees progress records, the front desk sees contact and billing details. We share data with third parties only where necessary to operate — for example our accounting service provider, our payment processor, or the video-conferencing platform used for online lessons — and each such provider is bound by its own confidentiality obligations. We will disclose data where Malaysian law compels us to.
5. How long we keep it
Enquiries that do not lead to enrolment are deleted within twelve months. Student records are kept for the duration of study and up to seven years afterwards, matching statutory record-keeping periods for Malaysian businesses. You may ask us to delete your data sooner, and we will comply unless a legal obligation requires retention.
6. Security
Data is stored on access-controlled systems, transmitted over encrypted connections, and backed up regularly. Paper records (for example signed enrolment forms) are kept in locked storage at the studio. No system is perfectly secure, but we take reasonable, proportionate measures and review them periodically.
7. Your rights
Under the PDPA you may request access to the personal data we hold about you, ask us to correct it, withdraw consent to processing, or limit how we use it. Write to [email protected] or post a request to the studio address above. We respond within 21 days.
8. Changes to this policy
If we change this policy, the new version will appear on this page with an updated date. Material changes affecting current students will also be announced by email.
9. Contact
Questions about privacy can be directed to [email protected], to +60 3-2202 5148, or to the studio address above. You also have the right to complain to the Department of Personal Data Protection Malaysia (JPDP).