Privacy Notice & Policy
Last Updated: 16 October 2026
English | Bahasa Malaysia
1. About This Notice
Heguru Educational Laboratory (M) Sdn Bhd, operating as Heguru Malaysia (“we”, “us” or “our”), respects your privacy and processes personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, including applicable amendments.
This Notice explains how we collect, use, disclose, store and protect personal data relating to our educational programmes, website, enquiries, registrations, digital services, events and other business activities.
2. Personal Data We Collect
Depending on your interaction with us, we may collect information such as:
- Name, telephone number, email and address;
- Parent, guardian and student information;
- Child’s name, age/date of birth, programme and class information;
- Enquiry, trial class, enrolment and attendance information;
- Payment and transaction information;
- Communications and feedback;
- Photos or videos, where applicable;
- Website, device, cookie and analytics information;
- Social media and digital-platform information made available to us; and
- Other information reasonably necessary to provide our services.
Where necessary, we may also process sensitive personal data in accordance with applicable law.
3. How We Collect and Use Personal Data
We may obtain personal data directly from you, a parent or guardian, our forms, website, communications, classes, events, authorised service providers or digital platforms.
We may use personal data to:
- Respond to enquiries;
- Arrange trials, registrations and enrolments;
- Manage classes, students and parent communications;
- Process payments and administrative records;
- Provide programmes and customer support;
- Manage events and activities;
- Send service updates and, where permitted, marketing communications;
- Analyse website, social-media and business performance;
- Improve our programmes, services and communications;
- Maintain security and business records; and
- Comply with legal or regulatory requirements.
4. Disclosure and Third-Party Services
Where reasonably necessary, we may disclose personal data to:
- Our employees, centres and authorised personnel;
- IT, cloud, communication and software providers;
- Payment processors;
- Website, analytics and marketing service providers;
- Social media and digital-platform providers;
- Professional advisers; and
- Government or regulatory authorities where required by law.
We may also use authorised integrations with third-party platforms for functions such as communication, analytics, reporting and social-media performance analysis.
We do not sell personal data.
Some service providers may process or store information outside Malaysia. Where this occurs, we will take reasonable steps to comply with applicable Malaysian requirements on cross-border transfers.
5. Children’s Personal Data
As an education provider, we may process personal data relating to children for purposes such as trial classes, enrolment, attendance, programme administration and parent communication.
Where appropriate, information about a child should be provided or authorised by a parent or legal guardian.
Photographs, videos or identifiable student materials intended for marketing or publicity will be subject to appropriate consent where required.
6. Providing Personal Data
Some information is necessary for us to provide our services, such as contact details, registration information or student information.
Where required information is not provided, we may be unable to process an enquiry, booking, enrolment, payment or other requested service.
Other information may be optional.
7. Security, Retention and Your Rights
We take reasonable administrative, organisational and technical measures to protect personal data from unauthorised access, misuse, loss or disclosure.
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, regulatory or business requirements.
Subject to applicable law, you may request to:
- Access your personal data;
- Correct inaccurate personal data;
- Withdraw consent where applicable;
- Stop direct-marketing communications;
- Request that certain processing cease where provided by law; and
- Exercise other rights available under the PDPA, including applicable data-portability rights.
Where a reportable personal-data breach occurs, we will handle notifications in accordance with applicable Malaysian requirements.
8. Contact Us
For privacy enquiries or requests concerning your personal data, please contact:
Heguru Educational Laboratory (M) Sdn Bhd
Operating as Heguru Malaysia
Email: info@heguru.com.my
Telephone: 03-22872168
Address: Unit 27-3 & 25-3, Block B, Signature Office, Mid Valley Boulevard, Lingkaran Syed Putra, 59200 Kuala Lumpur.
Website: https://heguru.com.my
We may update this Notice from time to time. The latest version will be published on our website.