Privacy Policy

Last updated: 17 August 2026. This policy explains how Enso International Academy ("Enso", "we", "us", "our") collects, uses, discloses, and protects personal data — including data relating to prospective and enrolled students — in connection with our school operations and this website, ensoacademy.com.my. We are committed to handling personal data, in particular the sensitive health and diagnostic information families share with us, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy applies to parents and guardians enquiring about or enrolling a child at Enso, enrolled students, and visitors to our website. Where we refer to "your child's data," we mean data provided to us by a parent or legal guardian on the child's behalf, since children cannot themselves consent to data processing under the PDPA.

Admissions and enrollment data: your child's name, date of birth, and prior school records; parent/guardian name, contact number, and email address; and, where relevant to placement and support planning, health and developmental information such as diagnoses (e.g. ASD, ADHD, Dyslexia, Global Developmental Delay), therapy or assessment reports, and Individual Learning Plan (ILP) details.

Contact and enquiry data: information you submit through our contact form or by phone/email, such as your name, contact details, and the content of your message.

Website usage data: pages visited, device and browser type, and approximate location, collected automatically via Google Analytics (Google tag / gtag.js) when you browse ensoacademy.com.my.

We use personal data to: assess and process admissions enquiries and applications; plan and deliver appropriate academic, therapeutic, and behavioural support for enrolled students; communicate with parents/guardians about enrollment, school activities, and administrative matters; respond to enquiries submitted through this website; and understand how visitors use our website so we can improve it. We do not use your child's health or diagnostic information for any purpose beyond planning and delivering their education and support at Enso, and we do not sell personal data to third parties.

We share personal data only where necessary to operate the school and this website: teaching, therapy, and administrative staff directly involved in a student's care; the third-party service providers who run parts of our website and admissions process on our behalf — currently Aidaform (our contact form provider) and Google (website analytics and advertising measurement, via Google Analytics/Google Ads); and regulators or authorities where we are legally required to disclose information. Any external professionals your child sees through Enso (e.g. occupational, speech, or behavioural therapists) receive only the information needed to provide that specific service, and are bound by their own professional confidentiality obligations.

This website uses cookies from Google Analytics/Google Ads to measure traffic and advertising performance, and may load embedded third-party content (such as our social media feed via Tagembed and our contact form via Aidaform) that sets its own cookies. You can control or disable cookies through your browser settings; doing so may affect how some parts of this site function, such as the contact form or embedded social feed.

We retain admissions enquiries that do not proceed to enrollment for a limited period to allow us to follow up, after which they are deleted. For enrolled students, we retain academic, health, and support records for as long as your child is enrolled at Enso and for a reasonable period afterward, as required for legal, regulatory, or safeguarding purposes. You may ask us about the specific retention period that applies to your child's records at any time using the contact details below.

We limit access to student health and diagnostic information to staff who need it to support your child, and we take reasonable technical and organisational steps to protect personal data against unauthorised access, loss, or misuse. No method of storage or transmission is completely secure, but we review our safeguards on an ongoing basis.

As a parent or guardian acting on your child's behalf, or as a website visitor, you have the right to: request access to the personal data we hold about you or your child; request correction of inaccurate or incomplete data; withdraw consent to further processing (which may affect our ability to continue providing certain services); and lodge a complaint with the Department of Personal Data Protection Malaysia if you believe we have not handled your data in accordance with the PDPA. To exercise any of these rights, contact us using the details in Section 10.

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page shows when it was last revised.

For questions about this policy or to exercise your data protection rights, contact us at info@ensoacademy.com.my or +6011 1445 3056, or write to us at 33, Lorong Maarof 1, Bangsar, 59000 Kuala Lumpur, Malaysia.