Privacy notice

This notice explains how Atas Mindset Sdn Bhd collects, uses and protects personal data in connection with the Pikiko programme. It is issued under the Personal Data Protection Act 2010.

Last updated: 30 September 2026 · Baca versi Bahasa Malaysia

1. Who we are

Pikiko is a programme operated by Atas Mindset Sdn Bhd (Registration no. 202401007632 (1553482-P)), B-8-2, The Troika, Jalan Binjai, 50450 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur, Malaysia. In this notice, “we”, “us” and “our” refer to Atas Mindset Sdn Bhd, which is the data controller for the personal data described below.

2. We do not collect any personal data about children

This is worth stating plainly, because it is unusual for a children’s programme.

We do not collect, request, hold or process personal data about the children who take part in Pikiko classes. We do not keep names, dates of birth, class lists, attendance records, contact details, photographs or any other information about individual children.

All records relating to children remain with your school or kindergarten, where they already sit under your own policies and your own duty of care. Our instructor arrives, teaches the class and leaves. Nothing about any child goes into our systems.

If this ever needs to change for a particular school, we would agree it with you in writing first, and no child’s data would be collected without the appropriate permissions being in place.

3. What personal data we do collect

Only what we need to talk to your school and to run the agreement between us.

Contact details of school and kindergarten staff

• Name and job role
• School or kindergarten name and location
• Email address and telephone or WhatsApp number
• Age groups, approximate class sizes and preferred language of instruction
• Anything else you choose to tell us in the enquiry form or in later correspondence

Programme agreements and business records

• The signed agreement between Atas Mindset Sdn Bhd and your school or kindergarten
• The name and signature of the person signing on behalf of your school
• Invoices, payment records and related correspondence

Website visitors

Standard technical information such as IP address, browser type and pages visited, collected through website analytics. See section 9.

4. Why we collect it, and our legal basis

• To reply to your enquiry and arrange a free demo class
• To prepare a written programme proposal and quotation
• To agree, sign and administer the programme agreement with your school
• To schedule classes and assign an instructor
• To invoice and keep accounting records
• To meet our legal, tax and regulatory obligations

We process this data on the basis of your consent, and where relevant for the performance of a contract with your school or to comply with a legal obligation.

5. Is supplying your data obligatory?

Supplying your personal data is voluntary. However, if you do not provide the contact details and school information requested in our enquiry form, we will not be able to respond to your enquiry, arrange a demo class or provide a proposal. If your school enters into a programme agreement, we are required to keep a record of that agreement and of the person who signed it.

6. Who we may disclose your data to

We do not sell personal data and we do not share it with advertisers. We may disclose it to the following classes of third parties, only as far as necessary:

• Pikiko instructors and staff assigned to your school
• Our service providers, including website hosting, email and secure file storage
• Our accountants, auditors and professional advisers
• Insurers, in connection with a claim or an insurance requirement
• Government authorities, regulators or law enforcement, where we are required to do so by law

7. Transfers outside Malaysia

Some of our service providers may store data on servers outside Malaysia. Where that happens, we take reasonable steps to ensure the data receives a standard of protection comparable to that required under the Personal Data Protection Act 2010, and we transfer only what is necessary.

8. How long we keep it

• Enquiries that do not proceed: up to 24 months from your last contact with us, then deleted
• Programme agreements, invoices and accounting records: 7 years, as required for tax and accounting purposes
• Contact details of staff at active schools: for the duration of the programme, and then in line with the periods above

9. Cookies and analytics

This website uses a small number of cookies necessary for the site to function, and analytics that help us understand which pages are useful. We do not use advertising cookies and we do not track you across other websites. You can block or delete cookies in your browser settings and the site will still work.

10. How we protect your data

We apply practical and organisational measures appropriate to the small volume of data we hold: encrypted connections to this website, access limited to the staff who need it, password-protected accounts, and instructor training on handling school information. No system is completely secure, but we take these obligations seriously and review them as the business grows.

If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as soon as practicable, and will inform affected individuals where the breach is likely to cause significant harm.

11. Your rights

Under the Personal Data Protection Act 2010 you have the right to:

• Access the personal data we hold about you
• Correct data that is inaccurate, incomplete or out of date
• Withdraw your consent to our processing of your data
• Limit processing, including asking us to stop sending you programme information
• Request data portability, where technically feasible
• Prevent processing that is likely to cause you damage or distress

We do not use automated decision-making or profiling.

12. How to contact us

To exercise any of the rights above, or to ask anything about this notice, contact:

Data Protection Contact
Atas Mindset Sdn Bhd
B-8-2, The Troika, Jalan Binjai, 50450 Kuala Lumpur
Email: support@pikiko.com.my
Telephone: 012-989 0582

We aim to respond to any request within 21 days. If you are not satisfied with our response, you may complain to the Personal Data Protection Commissioner, Jabatan Perlindungan Data Peribadi (JPDP), Malaysia.

13. Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed. Where a change is significant, we will tell the schools we work with directly.