Privacy Policy

Introduction

Neuralaya ("we", "us", "our") operates from 72 Lebuh Chulia, 10200 George Town, Pulau Pinang, Malaysia. This policy describes how we collect, use and protect personal data gathered through our website at neurala.cyou and through our course enrolment and enquiry processes.

If you have questions about this policy or how we handle your data, please write to [email protected].

What data we collect and why

Enquiry and enrolment data

When you submit our contact form, we collect your name, email address, and any information you include in your message. If you provide a phone number, we collect that too. We use this data to respond to your enquiry, to assess whether a course fits your situation, and to manage the enrolment process if you decide to join.

Course delivery data

For enrolled learners, we collect data necessary to operate the course: your name, email address, records of session attendance, submitted exercises, and project files where these form part of the course. We use this data to deliver the course and to provide written feedback.

Website analytics

We may use analytics cookies to understand how visitors use our website. This data is collected in aggregate and does not identify individual users unless you have consented to more detailed tracking. See our Cookie Policy for details.

Legal basis for processing

• Responding to enquiries: legitimate interest in responding to people who contact us.
• Course delivery: performance of a contract between you and Neuralaya.
• Analytics: consent, where obtained through our cookie banner.

Data retention

Enquiry data from people who do not enrol is kept for up to 12 months and then deleted. Learner records are kept for up to 3 years after course completion for record-keeping purposes, then deleted. Financial records are retained as required by Malaysian law.

How we use your data

We use your personal data only for the purposes described above. We do not use it to send unsolicited marketing. We do not add you to a mailing list unless you explicitly request this. If you wish to receive updates about future cohorts, you can ask us to note this and we will contact you when a relevant cohort opens.

Third-party sharing

We do not sell or share personal data with third parties for their own marketing purposes. We may share data with:

• Payment processors, where a transaction is involved (subject to their own privacy policies).
• Cloud hosting providers that store data on our behalf, under data processing agreements.
• Law enforcement or regulators, where required by law.

International transfers

Where data is processed or stored outside Malaysia — for example, if we use a cloud provider with servers in other countries — we take reasonable steps to ensure appropriate protections are in place, consistent with Malaysian data protection requirements under the Personal Data Protection Act 2010 (PDPA).

How we protect your data

• Our website uses HTTPS. Data in transit is encrypted.
• Access to personal data is limited to people who need it to operate the courses.
• We use reputable third-party providers for hosting and communications, with data processing agreements in place.
• If we become aware of a data breach that affects your personal data, we will notify you promptly and take steps to contain the breach.

Cookies

We use essential cookies to operate this website and optional analytics cookies with your consent. You can manage your cookie preferences at any time. See our Cookie Policy for a full explanation of cookie types and how to manage them.

Your rights

Under the Malaysian Personal Data Protection Act 2010, you have the right to:

• Access personal data we hold about you.
• Correct personal data that is inaccurate or incomplete.
• Withdraw consent for processing based on consent (this does not affect processing that took place before withdrawal).
• Object to processing where we rely on legitimate interests.
• Request erasure of your data, subject to our legal obligations.

To exercise any of these rights, write to [email protected]. We aim to respond within 14 working days. If you are not satisfied with our response, you may contact the Department of Personal Data Protection Malaysia.

Links to other websites

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before sharing any personal data with them.

Age restriction

Our courses are intended for people aged 18 or over. We do not knowingly collect personal data from individuals under 18. If we become aware that we have done so, we will delete the data promptly.

Changes to this policy

If we make material changes to this policy, we will post the updated version on this page with a revised date. For enrolled learners, we will notify you by email if changes affect how we handle your course data.

Contact

Data controller: Neuralaya

Address: 72 Lebuh Chulia, 10200 George Town, Pulau Pinang, Malaysia

Email: [email protected]