Privacy Policy

1. Introduction

Northstar Atelier ("we", "us", "our") is committed to protecting the privacy of all individuals who interact with our services, including parents and guardians who enrol children in our programmes. This Privacy Policy explains what personal information we collect, how we use it, and the rights you have in relation to it.

This policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applies to all information collected through our website at northsta.info, our enquiry forms, and our programme enrolment process.

2. Data We Collect

We collect only the information necessary to provide and improve our educational services. This includes:

• Contact information: Name, email address, and phone number provided through our enquiry form.
• Enrolment information: Child's first name, age group, and programme preference — provided when booking a place.
• Communication records: Copies of email exchanges and session summaries shared with parents during a programme.
• Website usage data: Non-personal analytics data collected through cookies (see our Cookie Policy for details).

We do not collect children's surnames, school names, financial information, or any sensitive personal data as defined under the PDPA.

3. How We Use Your Information

• To respond to enquiries and manage programme enrolments
• To send session summaries, conversation prompts, and programme updates to enrolled families
• To manage payments and keep basic administrative records
• To improve our website and session materials based on aggregate, non-personal usage data
• To comply with legal obligations

We do not use your data for advertising, profiling, or automated decision-making.

4. Legal Basis for Processing

Under the PDPA and general data protection principles, we process your personal data on the following bases:

• Consent: When you submit our enquiry form or enrol in a programme.
• Contractual necessity: To deliver the educational services you have enrolled in.
• Legitimate interest: To improve our programmes and maintain appropriate administrative records.
• Legal obligation: Where required by Malaysian law.

5. Data Retention

We retain personal data only for as long as necessary. Enquiry data from individuals who do not enrol is deleted within 6 months. Enrolment and programme records are retained for up to 3 years after the end of a programme for administrative purposes, after which they are securely deleted.

6. Sharing Your Data

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We may share data with:

• Service providers who assist with website hosting or email delivery, bound by confidentiality obligations
• Legal or regulatory authorities where required by Malaysian law

7. Cookies

Our website uses cookies for basic functionality and anonymous analytics. You can manage your cookie preferences at any time through our Cookie Policy page.

8. Data Security

We take reasonable steps to protect personal data from unauthorised access, loss, or disclosure. These include password-protected file storage, limited staff access, and the use of reputable third-party email and hosting providers with their own security standards. No method of digital transmission is entirely without risk, but we maintain appropriate safeguards for the nature and volume of data we handle.

9. Your Rights

Under the PDPA and applicable data protection principles, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to legal retention requirements
• Withdraw consent for processing at any time
• Lodge a complaint with the relevant Malaysian authority (Department of Personal Data Protection)

To exercise any of these rights, please contact us at [email protected]. We will respond within 14 business days.

10. Children's Privacy

Our services are directed at parents and guardians of children aged 6–10. We do not collect personal data directly from children. All enrolments and communications are handled with the parent or guardian of the child concerned.

11. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of those websites and encourage you to review their policies before submitting any personal information.

12. Policy Updates

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Significant changes will be communicated to enrolled families by email.

13. Contact

For any privacy-related questions or requests, please contact: