Your information matters

Privacy Policy

We want parents, students and partners to understand what information GeniusCode+ uses, why we use it and the choices available to them.

Effective and last updated: 13 August 2026

English

This Privacy Policy explains how Genius Code Plus Solution (“GeniusCode+”, “we”, “us” or “our”), SSM registration number 003612403-A, processes personal data in connection with our websites, learning portal, classes, competitions, student showcases, communications and certificate services (collectively, the “Services”).

In short: we collect only information reasonably needed to provide and improve our educational services, protect it with appropriate safeguards, do not sell personal data, and give parents, guardians and other data subjects ways to access or correct their information.

1. Information we may collect

Depending on how you use the Services, we may collect:

  • parent or guardian details, including name, email address, telephone number and communication preferences;
  • student details, including name, age or date of birth, course, school or programme information, guardian relationship and learning needs;
  • class information, including schedules, attendance, teacher notes, learning progress, projects, achievements and certificates;
  • account information used to access the learning portal, including login identifiers and security records;
  • registration, competition, payment and administrative records;
  • identity information, such as a Malaysian identity card or passport number, when needed for registration, identity matching or certificate retrieval;
  • communications sent through email, telephone, WhatsApp, Telegram, forms or customer support channels;
  • photos, videos, project work, testimonials or profile information where the relevant permission has been obtained; and
  • technical information such as IP address, device/browser details, security events and basic website usage information.

2. How we collect information

We may receive information directly from parents, guardians, students, teachers or authorised representatives; through registrations, forms, messages and use of the Services; from schools, event organisers or programme partners; and automatically through necessary website and security technologies.

3. Why we use personal data

We use personal data to respond to enquiries; arrange trials, classes and programmes; manage accounts, schedules, attendance and learning records; personalise instruction; communicate progress to authorised parents or guardians; administer competitions, submissions, awards and certificates; verify identity and prevent misuse; process payments and maintain business records; improve our programmes and safety; send marketing where permitted with an option to opt out; and meet legal, regulatory, safeguarding and dispute-resolution obligations.

Where information is required to enrol a student, issue a certificate or provide another requested service, not supplying it may prevent us from completing that service.

4. Children’s privacy and student showcases

Our Services are designed for children and families. We normally obtain personal data about a child from, or with the knowledge and permission of, a parent or legal guardian. We ask parents and guardians to provide accurate information and to supervise a child’s use of our Services where appropriate.

We publish a student’s name, project, photo, video, testimonial or showcase profile only where suitable permission has been obtained. Public student showcase pages are excluded from search-engine indexing by default. A parent or guardian may ask us to update or remove published student material by contacting us.

5. Certificate searches and identity numbers

The certificate service may use an identity card or passport number to match a person with certificate records. A value entered into the search form is used to perform that search and is not intentionally added by us to a separate search-history record. Identity information previously supplied for registration or certificate issuance may remain in the relevant protected administrative record for as long as reasonably necessary.

Please enter identity information only on the official certificate website and do not send it through public comments or social media.

6. When we disclose information

We do not sell personal data. We may disclose only the information reasonably necessary to authorised teachers, staff and contractors; technology, hosting, database, communication, video-class, form, storage, security and payment providers acting for us; schools, competition organisers or programme partners where required to deliver an activity; professional advisers; and authorities or other parties where required or permitted by law or necessary to protect safety and legal rights.

Providers used in delivering the Services may include Vercel, Supabase, Cloudflare, Google services, Zoom, WhatsApp and Telegram, depending on the activity. Their own privacy terms may apply when you use their platforms.

7. International processing

Some service providers may process or store information outside Malaysia. Where this occurs, we take reasonable steps to use reputable providers and require or rely on appropriate protections for the transferred information, consistent with applicable law.

8. Retention

We retain personal data only for as long as reasonably necessary for the purpose it was collected, to maintain accurate educational and business records, to verify issued certificates, or to satisfy legal and dispute-resolution requirements. Retention periods may differ by record type. When information is no longer required, we take reasonable steps to delete, anonymise or securely dispose of it.

9. Security

We use reasonable administrative, technical and organisational safeguards designed to prevent loss, misuse, unauthorised access, alteration or disclosure. Access is limited according to role and need. No online service can be guaranteed completely secure, so users should protect their passwords and notify us promptly of suspected misuse.

10. Your choices and rights

Subject to applicable law, you may ask whether we process your personal data; request access to or correction of it; withdraw consent; object to or limit certain processing; opt out of direct marketing; or request deletion where continued retention is not required. For a child, these requests should normally be made by the parent or legal guardian.

We may need to verify the requester’s identity and authority before acting. Some requests may be limited where records must be retained by law or are needed to protect another person’s rights.

11. Websites, external links and cookies

Our sites may use technologies necessary for security, login sessions and correct operation. External services and links—including social networks, messaging platforms, Google Forms and video-class services—operate under their own terms. We are not responsible for the privacy practices of unrelated third-party websites.

12. Updates to this policy

We may update this policy when our Services or legal obligations change. The current version will be published on this page with its effective date. We will provide additional notice when a change materially affects how we use personal data.

13. Contact us

Genius Code Plus Solution
SSM registration number: 003612403-A

Email: geniuscodeplus@gmail.com
Telephone/WhatsApp: +60 11-1766 9268

Please include enough information for us to identify the relevant record and understand your request, but do not send full identity-card or passport details by ordinary email or public messaging.