EyeQBoost Sdn. Bhd. (Company No. 202501033997 / 1635407-M)
Website: https://eyeqboost.com
Last updated: 8 October 2026
This policy explains what personal data we collect, why we collect it, who we share it with, and what you can do about it. It applies to this website and to our programmes and services. We handle personal data in accordance with the Personal Data Protection Act 2010.
Who we are
EyeQBoost Sdn. Bhd. is a private company incorporated in Malaysia, providing holistic education programmes for children. For data protection purposes, we are the data user responsible for the personal data described in this policy.
What we collect
From parents and guardians. Your name, email address, phone number, billing and payment details, and any information you give us when you enquire, enrol, or correspond with us.
About children enrolled in our programmes. Name, age or date of birth, school year, and information relevant to delivering the programme — such as progress notes, assessment results, and any learning needs, allergies or medical information you choose to tell us so that we can keep your child safe and supported.
From anyone who uses this website. Your IP address, browser type, device information, pages visited and time spent, collected automatically through cookies and analytics. If you submit an enquiry or booking form, we collect what you enter into it.
Session recordings. We record sessions for internal quality assurance and trainer development. These recordings may include children’s images and voices. They are not published or shared outside EyeQBoost.
We only collect information about a child with the consent of that child’s parent or guardian.
Why we use it
- To deliver our programs and communicate with you about them
- To process enrolments, invoices and payments
- To keep children safe during sessions, including responding to medical or welfare needs
- To train and assess our educators, and improve the quality of what we teach
- To respond to your enquiries
- To send you updates about our programmes, where you have asked to receive them
- To operate and improve this website
- To meet our legal, tax and regulatory obligations
Cookies and analytics
This site uses cookies — small files stored on your device — to make the site work, remember your preferences, and understand how visitors use it.
We use Google Analytics (via Google Site Kit) to collect anonymised statistics about site traffic. This data is processed by Google and governed by Google’s own privacy policy at https://policies.google.com/privacy. If you would rather not be included, you can use Google’s opt-out browser add-on, or block cookies through your browser settings. Blocking cookies may stop parts of the site working properly.
If you have an account on this site, we also set cookies to keep you logged in and remember your display settings. Login cookies last two days, or two weeks if you select “Remember Me”, and are removed when you log out.
Forms and embedded content
Enquiry and booking forms on this site are handled by WPForms. What you enter is sent to us by email and stored in the website database.
Some pages may include embedded content from other websites, such as videos or maps. Embedded content behaves as though you had visited that other site directly: the provider may set cookies, collect data about you and track your interaction with the embedded content, particularly if you are logged in to that provider. We do not control what they collect, and their own privacy policies apply.
Photos, videos and testimonials
We will only use a testimonial, photo, video, name or work from you or your child — for example on our website or social media — with your clear consent, given separately from this policy. Consent is collected through a short media consent form, signed by the parent or guardian, which sets out what material may be used and where. You can withdraw that consent at any time by writing to us, and we will stop using the material in anything new.
Internal quality-assurance recordings described above are never used for marketing or published anywhere, and are covered by a separate arrangement, not by media consent.
Who we share your data with
We do not sell your personal data, and we do not share it for anyone else’s marketing.
We share it only with:
- Service providers who help us run the business — website hosting, email, payment processing, accounting and scheduling tools. They may only use the data to provide that service to us.
- Professional advisers, such as our accountants or lawyers, where necessary.
- Authorities, where we are required to by law, or where there is a genuine concern about a child’s safety.
Some of these providers store data on servers outside Malaysia. Where that happens, we take reasonable steps to satisfy ourselves that your data is given a comparable level of protection.
How long we retain your data
We keep personal data only as long as we need it:
- Enquiry records: [TODO: e.g. 12 months] from your last contact with us
- Enrolment and programme records: for the duration of enrolment and [TODO: e.g. 7 years] afterwards, to meet tax and accounting requirements
- Session recordings: [TODO: e.g. 90 days], after which they are deleted
- Website analytics: as set by Google Analytics’ own retention settings
- Marketing contacts: until you unsubscribe
How we protect it
We restrict access to personal data to staff who need it for their work, use access controls and secure storage for session recordings, and require our service providers to maintain appropriate security. No system is completely secure, but if a breach occurs that is likely to cause you significant harm, we will notify you and the Personal Data Protection Commissioner as required by law.
What rights you have over your data
Under the Personal Data Protection Act 2010, you may:
- Ask for a copy of the personal data we hold about you or your child
- Correct anything inaccurate or out of date
- Withdraw consent to our processing, including media consent, at any time
- Limit how we use your data, including asking us to stop sending you marketing
- Ask us to delete data we no longer have a lawful reason to keep
To exercise any of these, email info@eyeqboost.com. We may ask you to verify your identity before we act, and we will respond within the period required by law. Note that withdrawing consent to core processing may mean we can no longer provide the programme.
If you are not satisfied with how we have handled your request, you may complain to the Personal Data Protection Commissioner, Malaysia.
Children
Our programs are for children, but our contractual relationship is with you as the parent or guardian. We do not knowingly collect personal data directly from a child without parental consent. If you believe we hold data about your child that you did not consent to, please contact us and we will investigate.
Changes to this policy
We may update this policy from time to time. The current version is always available on this page, with the date it was last updated shown at the top. Where a change materially affects how we use your data, we will tell you directly.