Raudhatul Daie Kindergarten

This Privacy Policy sets out how RD Kindergarten collects, uses, discloses, and manages the personal information of our students, parents, guardians, staff, and other individuals in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

We may review and update this policy from time to time to ensure it remains appropriate to our operational needs and continues to align with legal requirements.

1. What Kinds of Personal Data Do We Collect?

The type of personal data we collect and hold includes, but is not limited to:

• For Students and Parents/Guardians:
  • Name, identity card/passport number, contact details, date of birth, and gender.
  • Nationality, race, and language background.
  • Medical information (e.g., details of allergies, chronic illnesses, vaccination records, and emergency contact details for doctors).
  • Developmental reports, incident reports, and photographs or videos taken during school activities for educational and commemorative purposes.
  • Dietary requirements and bus transport details.
  • Financial information for billing purposes.
• For Job Applicants, Staff Members, and Contractors:
  • Name, contact details, NRIC number, and date of birth.
  • Information provided in resumes and during interviews.
  • Employment history, qualifications, and professional development records.
  • Salary, bank account, and tax information.
  • Emergency contact details.
  • Medical certificates and health information.

2. How We Collect Your Personal Data

Personal data is generally collected:

• Directly from you through enrolment forms, registration sheets, and face-to-face meetings.
• From your interactions with us via emails, telephone calls, and our website.
• From third parties, such as referees for job applicants or medical professionals (with your consent).

3. Purposes for Collecting and Using Your Personal Data

Under the PDPA, we process your personal data for specific purposes. The primary purposes include:

• To process student enrolment and provide educational and care services.
• To ensure the safety, health, and well-being of all students while under our care.
• For internal administrative purposes, including billing and payment processing.
• To manage the employment relationship with our staff.
• To communicate with parents about their child’s progress and school activities through newsletters, emails, and our mobile application.
• To comply with legal and regulatory requirements.

4. Disclosure of Personal Data

We may disclose personal data to third parties only for the purposes stated above, including but not limited to:

• Regulatory and government authorities, as required by Malaysian law.
• Our professional advisers (e.g., lawyers, auditors).
• Service providers we engage, such as IT system hosts, cloud storage providers (which may involve data being stored on servers located outside Malaysia), and transportation services.
• In the case of a medical emergency, to healthcare professionals.

We do not sell or trade your personal data.

5. Use of Images and Recordings

We often take photographs and videos of students engaged in school activities. These are used for:

• Educational and assessment records within the kindergarten.
• Internal displays within the kindergarten.
• The school’s private yearbook or similar commemorative publications, distributed only to the school community.

We will obtain separate, explicit written consent from you prior to using any photograph or video of your child in public-facing materials, such as on our website, social media channels, or public marketing brochures.

6. Data Security and Retention

We take reasonable steps to protect the personal data we hold from misuse, interference, loss, unauthorized access, modification, or disclosure. These steps include secure physical record storage and electronic security measures like password protection and access controls.

We will retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

7. Your Rights Under the PDPA

You have the right to:

• Request access to your personal data held by us.
• Request correction of any personal data that is inaccurate, incomplete, or out-of-date.
• Withdraw your consent for the processing of your personal data, subject to legal and contractual restrictions.
• Limit the processing of your personal data.

Please note that withdrawing consent may affect our ability to provide certain services, such as caring for your child.

8. How to Contact Us

For any inquiries, requests to access or correct your personal data, or to make a complaint about a potential breach of the PDPA, please contact our Data Protection Officer:

Email: [[email protected]]
Phone: [Insert Phone Number]
Address: [Insert Kindergarten Address]

We will investigate any complaint and respond to you within a reasonable period.

Last Reviewed: [Insert Current Date, e.g., January 2025]
Management Responsibility: Data Protection Officer
Publication: School website, parent portal, and staff handbook.
Audience: Parents, Guardians, Staff, and Students of RD Kindergarten.