1. Who we are

Queensville Integrated Islamic School (“QIIS”, “we”, “us” or “our”) is operated by QUEENSVILLE INTEGRATED ISLAMIC EDUCATION PLT. For the purposes of Malaysia’s Personal Data Protection Act 2010 and its amendments (“PDPA”), we are the data controller responsible for the personal data described in this policy.

2. Personal data we collect

Depending on your interaction with QIIS, we may collect:

• Parent or guardian details, including name, telephone number, email address, residential area and relationship to the child.
• Student details, including name, age, date of birth, academic level, educational background, assessment results, learning needs and enrolment information.
• Sensitive information where necessary, such as health, dietary, disability, learning-support or religious information.
• Admission, fee, payment, attendance, communication and school-tour records.
• Photographs, videos or recordings where appropriate permission has been obtained.
• Website and device information, including IP address, browser, pages visited, cookies, form source and advertising identifiers such as GCLID or FBCLID.
• Any other information you voluntarily provide through forms, WhatsApp, email, telephone, social media or in person.

3. How we collect personal data

We may collect data directly from you, from an authorised parent or guardian, through our website and admission forms, during assessments and school activities, through WhatsApp or other communications, and from service providers or advertising platforms where permitted by law.

If you provide another person’s data, you confirm that you are authorised to do so and have informed that person about this policy.

4. How we use personal data

We process personal data for purposes that include:

• Responding to enquiries about programmes, fees, assessments, school tours and Intake 2027 or later intakes.
• Evaluating applications, arranging interviews and assessments, enrolling students and providing educational services.
• Managing student welfare, safety, learning support, attendance, academic progress, school activities and parent communications.
• Processing payments and maintaining administrative, accounting and regulatory records.
• Sending relevant school, admission and programme updates where you have consented or where otherwise permitted.
• Operating, securing, analysing and improving our website, services and advertising campaigns.
• Preventing fraud, responding to incidents, protecting legal rights and complying with applicable laws or lawful requests.

Where information requested in an admission or enrolment process is marked as required, failure to provide it may prevent us from processing the enquiry, application or requested service.

5. Children’s personal data

Our services relate to children and young people. We generally collect a child’s personal data from, or with the knowledge and consent of, their parent or legal guardian. Parents and guardians should provide only information that is accurate, relevant and necessary for the child’s education, admission, welfare and safety.

Our website enquiry form is intended for adults. Children should not submit personal data through the website without the involvement of a parent or guardian.

6. Sharing and disclosure

We do not sell personal data. Where necessary and subject to appropriate safeguards, we may disclose data to:

• QIIS staff, teachers and authorised representatives who need it to perform their duties.
• Technology, website hosting, cloud storage, communications, payment, analytics, assessment, transport or other service providers acting for us.
• Education authorities, regulators, professional advisers, insurers, emergency services or law-enforcement bodies where required or permitted by law.
• Another organisation in connection with a restructuring or transfer of the school, subject to applicable legal protections.

Some providers may process data outside Malaysia. Where this occurs, we take reasonable steps to ensure the transfer is permitted and the data receives an appropriate level of protection.

7. Cookies, analytics and advertising

Our website may use necessary cookies and similar technologies to function properly, remember preferences, measure traffic and understand the performance of our admission campaigns. These may include services supplied by Google, Meta or other authorised providers.

These providers may receive device, browsing or advertising identifier data according to their own privacy terms. You can control cookies through your browser settings and, where available, our cookie controls. Blocking some cookies may affect website functionality.

8. Retention and security

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, our educational and administrative requirements, dispute resolution, and applicable legal or regulatory obligations. When data is no longer required, we take reasonable steps to delete, destroy or anonymise it.

We use reasonable administrative, technical and physical safeguards designed to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction. However, no internet transmission or storage method can be guaranteed to be completely secure.

9. Your rights and choices

Subject to the PDPA and applicable exceptions, you may ask us to:

• Confirm whether we process your personal data and request access to it.
• Correct personal data that is inaccurate, incomplete, misleading or out of date.
• Withdraw consent or object to processing for direct marketing.
• Request restriction, deletion or other action where available under applicable law.

You may unsubscribe from marketing messages at any time by following the instructions in the message or contacting us. We may need to verify your identity or authority as a parent or guardian before processing a request.

Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, technology or legal obligations. The latest version will be published on this page with its effective date. Material changes may also be communicated through an appropriate channel.