Privacy policy
Effective 1 March 2026. This document explains what personal data Skyforma Learning Sdn Bhd collects, why we collect it, and how we look after it.
Who we are
Skyforma Learning Sdn Bhd (company number 1567843-A) is a private limited company registered in Malaysia. Our registered address is Suite 12, Wisma Akademik, Jalan Dato Bandar Tunggal, 70000 Seremban, Negeri Sembilan. The data controller for the personal data described in this policy is Skyforma Learning Sdn Bhd.
What we collect
We collect only the data we need to deliver our English courses and to respond to enquiries.
- Contact data — the name, email, mobile and any optional message you provide on our trial-request form.
- Lesson data — if you become a student, your lesson history, mentor notes, CEFR check-ins and progress letters.
- Billing data — payment is handled by our payment partner. We see the masked card number and the receipt, never the full card.
- Site analytics — if you accept analytics cookies, we use Plausible Analytics, which collects anonymised, aggregated traffic data without personal identifiers.
How we use your data
We use your personal data to deliver the service you've asked for, to keep records required by Malaysian law, and to make Skyforma better. Specifically:
- Responding to your trial enquiry and arranging a slot with a mentor.
- Delivering your lessons, written recaps and progress letters.
- Issuing invoices and processing refunds where applicable.
- Improving the website (only with your consent to analytics).
Legal grounds
Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, we process your data on the basis of: (a) your consent (trial enquiries, optional marketing), (b) performance of the contract between you and Skyforma Learning Sdn Bhd (delivering lessons), and (c) compliance with our legal obligations (tax records).
Sharing
We do not sell personal data, and we don't share it with third parties for marketing. The only parties who see your data are:
- Our hosting and email providers, under data processing agreements.
- Our payment processor (for billing only).
- Our accountants, for the legal minimum required to keep our books.
Retention
We keep trial-enquiry data for twelve months from the date of your enquiry. If you become a student, we keep lesson and billing records for seven years — the minimum required by Malaysian tax authorities. You can ask us to delete data earlier; we will honour requests except where retention is legally required.
Your rights
You can ask us at any time to access, correct, delete or restrict the processing of your personal data, or to withdraw a consent you previously gave. Email [email protected] and we will respond within twenty-one days. If you remain unhappy with our response you can complain to the Department of Personal Data Protection of Malaysia.
Children
Our Children's English Club is open to learners aged 6–14. Personal data for learners under the age of eighteen is collected from the parent or guardian, and only with their explicit consent. We do not share that data outside the mentor team and our hosting provider.
Security
The website runs over HTTPS. Our learning space is protected by individual passwords. Lesson recordings are stored encrypted and accessible only to the student and their mentor.
Updates
If we update this policy materially, we will tell registered students by email and post a banner on the home page for thirty days. Minor changes (a phone number, a section title) are made silently.