Privacy Policy

1. Who We Are

Kreia AI Academy is a brand of Kreia Digital Services (SSM registration IP0621395-H), which runs AI training classes in Kuala Lumpur. In this policy, “we” and “us” mean Kreia Digital Services. We decide how your personal data is used, which makes us the data user under the PDPA.

2. What We Collect

• Booking details: your full name, email, mobile number, company, job title and any remark you send us.
• Payment details: your payment reference and the proof of payment you upload. A receipt usually shows your name, bank, amount and date. We never ask for your card details or online banking login.
• Messages: what you tell us when you ask for advice, a custom course or corporate training.
• Class records: attendance, the class you joined and any feedback you give.
• Website data: basic technical information your browser sends, such as your IP address and device type. Our pages load fonts from Google Fonts, which receives your IP address when a page loads.

To book a class we need your name, email, mobile number and company. Your job title and remarks are optional. If you don’t give us the required details, we can’t process your booking.

3. How We Use It

• To reserve your seat, match your payment and send your booking confirmation.
• To send class details, reminders and changes to your class.
• To answer your questions and prepare quotes for custom courses or corporate training.
• To issue receipts and invoices and keep the accounting records the law requires.
• To improve our courses, using feedback and attendance.
• To send news about new courses and offers, only if you agree. You can unsubscribe at any time.

4. Who We Share It With

We do not sell your personal data. We share it only with:

• Trainers who teach your class, so they know who is attending.
• Service providers who help us run the academy, such as our website form service, email, cloud storage, accounting and our bank. They may use your data only to provide their service to us.
• Government bodies, regulators or courts, when the law requires it.

5. Data Stored Outside Malaysia

Some of our service providers, such as email and cloud storage, keep data on servers outside Malaysia. When that happens, we take reasonable steps to make sure your data is protected to a standard similar to the PDPA.

6. How Long We Keep It

• Booking, payment and invoice records: seven years, as Malaysian tax and company law requires.
• Enquiries that don’t lead to a booking: up to two years.
• Marketing preferences: until you unsubscribe.

After that, we delete your data or make it anonymous.

7. How We Protect It

Only people who need your data to do their job can see it. We store it with providers that encrypt data and protect accounts with strong passwords and two-step sign-in. If a data breach is likely to cause you significant harm, we will tell you and the Personal Data Protection Commissioner as the law requires.

8. Your Rights

You can ask us to:

• Show you the personal data we hold about you.
• Correct data that is wrong, incomplete or out of date.
• Stop sending you marketing, or withdraw a consent you gave.
• Send your data to you or to another organisation, where the law allows it.

Email us at academy@kreiastudio.com. We reply within 21 days. We may need to confirm who you are before we act on a request.

9. Participants Under 18

Our classes are for adults. If someone under 18 joins a class, a parent or guardian must book for them and agree to this policy.

10. Changes to This Policy

We may update this policy from time to time. The date at the top shows when it last changed. If a change affects how we use data you have already given us, we will tell you by email.

11. Contact Us

For any question about your personal data, email academy@kreiastudio.com or write to Kreia Digital Services, Kuala Lumpur, Malaysia. This policy is also available in Bahasa Malaysia and 中文 on request.