Last updated: 21 April 2026

At ROAR Academy, we take the privacy of our families, students, and website visitors seriously. This Privacy Policy explains what personal data we collect across roaracademy.asia, the ROAR Launchpad, and any other services operated under the ROAR Academy brand, why we collect it, how we use it, and your rights under the Malaysian Personal Data Protection Act 2010 (PDPA).

1. Who we are

The data controller responsible for your personal data is:

Roar Beyond Sdn. Bhd. (1668775-A) (trading as ROAR Academy)
Level 32, Menara Hong Leong, No 6, Jalan Damanlela, Bukit Damansara, 50490 Kuala Lumpur, Malaysia.
Email: info@roaracademy.asia

Throughout this Policy, “we”, “our”, and “us” refer to Roar Beyond Sdn. Bhd.

2. What personal data we collect

The data we collect depends on how you interact with us. We group it into the following categories:

2.1 ROAR Launchpad assessment

When a student completes the ROAR Launchpad, we collect:

• Student’s full name
• Student’s date of birth
• School name and year group
• Gender (optional)
• Parent or guardian email address
• Student email address (optional)
• Assessment responses and the resulting profile report
• Consent records (including timestamps)

2.2 Enrolment enquiries and contact forms

When you submit an enrolment enquiry or contact form, we typically collect:

• Your full name
• Email address and phone number
• Relationship to the student (parent, guardian, educator, etc.)
• Student’s name, age, and current school (if relevant)
• Any questions, comments, or additional information you provide

2.3 Newsletter subscriptions

If you sign up for our newsletter, we collect your name and email address.

2.4 Resource downloads

When you download brochures or other resources, we may collect your name and email address to send you the resource and related updates.

2.5 Event registrations

When you register for an event, we collect your name, email, phone number, and any details relevant to the event (such as the number of attendees or dietary requirements).

2.6 Live chat or messaging

If you contact us via a chat widget on our website, we collect the content of your messages, your name, email, and any other information you share during the conversation.

2.7 Information automatically collected

When you visit our website, we may automatically collect technical information such as:

• IP address and approximate location
• Browser type and device information
• Pages visited and time spent on our site
• Referring website or search terms (where available)

We do not collect payment information, government ID numbers, health data, biometric data, or other sensitive personal information through our Services.

3. How we use your data

We use the data you provide for the following purposes:

• Responding to enquiries. To answer your questions, process enrolment interest, and follow up on your submissions
• Generating and delivering Launchpad profile reports. To process assessment responses and email reports to parents and students
• Sending newsletters and updates. Only to users who have subscribed. Every newsletter includes an unsubscribe link
• Providing requested resources. To deliver brochures, guides, and event information
• Internal records and follow-up. To keep pastoral, admissions, and communication records consistent with standard educational practice
• Sharing with ROAR Academy staff and mentors. Where relevant, we share student-related information internally with teachers, mentors, and administrators who support the student’s learning
• Research. Aggregated and anonymised data may be used for educational research, including academic case studies. Personal identifiers are removed before data is used for research purposes
• Improving our Services. We analyse how our website and Launchpad are used so we can improve user experience, content, and features
• Legal and safeguarding. Where required to comply with the law or to protect the safety and wellbeing of students and others

We will not use your data for third-party marketing, advertising, or promotions without your separate and explicit consent.

4. Legal basis for processing

Under the PDPA, we process your personal data on the following bases:

• Consent. You (or your parent or guardian, where you are under 18) have given clear consent when completing a form, assessment, or subscription
• Legitimate interests. Where processing is necessary to operate our Services, respond to enquiries, maintain records, and improve what we offer
• Contractual necessity. Where processing is necessary to enter into or perform an agreement with you, such as enrolment
• Legal obligation. Where we are required to process data to comply with Malaysian law

5. Who we share your data with

We do not sell your personal data. We share limited data only with the following categories of recipients:

• Service providers. We use trusted third-party services to operate our website and tools, including cloud hosting (Vercel), database storage (Supabase), email delivery (Resend), website hosting and WordPress services, and any analytics or communication tools we adopt. These providers process data on our behalf and are bound by confidentiality and data protection obligations
• ROAR Academy staff. As described in section 3
• Legal authorities. Where we are required by law to disclose information, for example in response to a valid court order
• Professional advisors. Such as legal and accounting advisors, bound by professional confidentiality obligations

We do not transfer your data to any third party for their own marketing purposes.

6. Cookies and tracking technologies

Our website uses cookies and similar technologies to operate correctly and to understand how visitors use our content. Cookies are small text files stored on your device.

We may use:

• Essential cookies, which are necessary for the website to function (for example, to remember your progress in a form)
• Analytics cookies, to understand how visitors use our site so we can improve it (for example, Google Analytics, where deployed)
• Functional cookies, to remember preferences and improve your experience

You can control cookies through your browser settings and can usually disable non-essential cookies. Where required, we will display a cookie notice asking for your consent before deploying non-essential cookies.

The ROAR Launchpad currently uses minimal browser storage (sessionStorage) to hold assessment responses temporarily while the student completes the questions. This data is cleared when the browser is closed.

7. International data transfers

Some of our service providers may store or process data outside Malaysia, including in the United States and European Union. Where this happens, we take reasonable steps to ensure your data is protected by appropriate safeguards and that the recipient country applies adequate data protection standards.

8. How long we keep your data

We retain different categories of data for different periods:

• ROAR Launchpad submissions (personal details, responses, reports) are kept for three years from the date of assessment. If the student enrols at ROAR Academy, data is kept for the duration of enrolment plus three years after leaving
• Enrolment enquiry records are kept for up to three years from your last contact with us, or longer if you proceed to enrolment
• Newsletter subscribers are kept on our list until you unsubscribe
• Event registration data is kept for up to two years after the event
• Live chat transcripts are kept for up to one year unless linked to a longer-running enquiry
• Website analytics data is kept for up to two years, typically in aggregated or anonymised form
• Anonymised research data (with all personal identifiers removed) may be retained indefinitely for academic research purposes
• Consent records are kept for as long as we hold the associated personal data, to demonstrate compliance

After these periods, personal data is deleted or fully anonymised.

9. Your rights

Under the PDPA, you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate or incomplete data
• Request deletion of your data, subject to our legal and legitimate retention requirements
• Withdraw consent for future processing at any time
• Object to certain types of processing, including research use
• Limit processing in certain circumstances
• Unsubscribe from newsletters and other marketing communications at any time
• Lodge a complaint with the Personal Data Protection Department of Malaysia (JPDP) if you believe your rights have been violated

To exercise any of these rights, please email us at info@roaracademy.asia. We will respond within 21 days.

10. How we protect your data

We implement reasonable technical and organisational measures to protect your data, including:

• Encrypted data transmission (HTTPS) across our website and tools
• Secure cloud storage with restricted access
• Role-based access controls for staff
• Regular review of our security practices and service providers

While we take data security seriously, no online service can guarantee absolute security. If a data breach occurs, we will notify affected users and relevant authorities in line with PDPA requirements.

11. Children’s data

Many of our Services are designed for, or involve, students aged 12 to 18. We require parent or guardian consent before any student under 18 completes the ROAR Launchpad assessment or has their personal data processed for enrolment or related purposes.

Parents and guardians can request access to, correction of, or deletion of their child’s data at any time by contacting us.

12. Marketing communications

We will only send you newsletters, event invitations, and other marketing communications if you have opted in. You can unsubscribe at any time using the link at the bottom of every email, or by contacting us at info@roaracademy.asia.

Unsubscribing from marketing does not stop essential communications related to your enrolment, enquiry, or Launchpad submission.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The “Last updated” date at the top of this page will reflect any changes. For significant changes that affect your rights, we will notify users by email where possible.

14. Contact us

If you have any questions about this Privacy Policy, how we handle your data, or wish to exercise any of your rights, please contact us:

Roar Beyond Sdn. Bhd.
Email: info@roaracademy.asia