Student and parent data, looked after like the children themselves
A preschool holds the most personal information there is: children's names and birth dates, allergies, parents' phone numbers, who may collect a child, and photos. Under Malaysia's Personal Data Protection Act 2010 (PDPA), the operator is responsible for it.
Here is how SleekJunior helps you carry that responsibility.
Who sees what
Access follows the role — nobody sees another family's records.
| Principal | Branch admin | Teacher | Parent | |
|---|---|---|---|---|
| All branches | ✓ | — | — | — |
| Own branch students | ✓ | ✓ | Own classes | Own children |
| Invoices & payments | ✓ | ✓ | — | Own |
| Daily log & photos | ✓ | ✓ | Own classes | Tagged child |
| Staff payroll | ✓ | — | Own payslip | — |
Sample screen with made-up data.
A separate portal per school
Every school has its own subdomain and every record is tied to its school. Sign-ins are not shared between schools.
Role-based access
Principals, branch admins, teachers and parents each see only what is theirs. Teachers see their classes; parents see their children.
Photos stored privately
Daily-log photos are never in a public folder, location data (EXIF) is stripped, and only parents of tagged children can open them.
Data access requests
Parents can request a copy of their child's data from the portal, and the school processes it with a record.
Upload photo — Kekwa (Toddler)
Location data is removed. Only parents of tagged children can see it.
Check no untagged faces are visible.
Photos can only be tagged to children with photo consent.
Sample screen with made-up data.
PDPA for preschools: where a system helps
The PDPA asks operators to collect data with consent, use it for the stated purpose, keep it secure and give people access to their data. A system can help at each step — consent recorded on the registration form, access limited by role, and data requests handled in the portal.
A system does not make you compliant on its own. Your privacy notice, staff training and how data is handled outside the system remain the operator's responsibility.
Photo consent that is actually enforced
Photo consent is recorded per child. Teachers can only tag photos to children who have it. If a parent withdraws consent, every photo the child is tagged in is deleted — file and all — for every family.
- HTTPS on every page
- Phone notifications never show message content or passwords
- Temporary passwords must be changed at first sign-in
Frequently asked questions
Read next
See how it works for yourself
Tell us about your school and we'll set up a demo you can drive yourself — nothing to install or pay for.
Try the Demo