ElectricForge

Privacy Policy

Last revised: 14 June 2026

This policy explains how ElectricForge English Studio Sdn Bhd (“ElectricForge”, “we”, “us”), Business Registration No. 202301024816 (1521437-X), of Suite 28-03, Level 28, Q Sentral, 2A Jalan Stesen Sentral 2, KL Sentral, 50470 Kuala Lumpur, Malaysia, handles personal data in connection with the website electricforge.pro and our online English classes. We process personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).

1. Data we collect

We collect only what we need to run the studio:

  • Enquiry data — the name, email address, optional phone number, chosen class and goal description you submit through our booking form.
  • Student records — for enrolled students: level assessments, attendance, lesson recordings, progress notes and certificates issued.
  • Billing data — invoicing details required by Malaysian tax and accounting law. We do not store card numbers; payments are processed by licensed payment providers.
  • Technical data — basic server logs (IP address, browser type, pages requested) kept for security and troubleshooting.

2. Why we process it

We use personal data to respond to enquiries, schedule and deliver classes, share lesson recordings with the student (or the parent of a minor student), issue certificates and invoices, improve our teaching, and meet legal obligations. We do not sell personal data, and we do not use it for third-party advertising.

3. Children

Our Young Learners classes are for children aged 5–12. We only accept a child’s enrolment from a parent or legal guardian, who provides and controls the child’s data. Lesson recordings of children are shared only with that parent or guardian.

4. Lesson recordings

Classes are recorded so students can replay them. Recordings are stored on access-controlled cloud storage, shared privately with the participants of that class only, and deleted no later than twelve months after the course ends, unless you ask us to remove them earlier.

5. Sharing and transfers

We share data only with service providers who help us operate — video-conferencing, cloud storage, email and accounting platforms — under agreements that restrict their use of it. Some providers store data outside Malaysia; where they do, we choose providers offering safeguards consistent with the PDPA.

6. Retention

Enquiry data that does not lead to enrolment is deleted after twelve months. Student records are kept for the duration of study plus twenty-four months. Billing records are kept for seven years as required by law.

7. Security

Access to personal data is limited to staff who need it, protected by unique credentials and two-factor authentication. Our website enforces HTTPS, and form submissions are protected against cross-site request forgery.

8. Your rights

Under the PDPA you may request access to your personal data, ask us to correct it, withdraw consent to processing, or limit how we use it. Write to [email protected] and we will respond within twenty-one days. If withdrawal of consent makes it impossible to deliver classes you have booked, we will explain the consequences before acting.

9. Cookies

Our use of cookies is described separately in the Cookie Policy.

10. Changes and contact

We will post any changes to this policy on this page with a new revision date. Questions about privacy can be sent to [email protected] or by post to the address above.