Privacy policy

1. Who we are

Paradigm Professional Sdn Bhd (Company No. TODO — SSM registration number) is the data user responsible for the personal data described in this policy. Our registered address is , , , , Malaysia.

2. The data we collect

We collect personal data that you provide directly to us, namely:

• Enquiry data — name, job title, employer, email address, telephone number and the content of your message.
• Registration data — the above, plus NRIC or passport number, dietary and accessibility requirements, billing details, purchase order references, and HRD Corp employer code and grant number where a claim applies.
• Attendance data — signed attendance records, assessment results where a programme includes assessment, and evaluation form responses.

We do not collect sensitive personal data as defined by the Act, except where a participant voluntarily discloses health or dietary information to enable us to make reasonable accommodations.

3. Why we process it

• To respond to your enquiry and provide a quotation.
• To process your registration, issue invoices and administer your place on a course.
• To prepare and submit the documentation required for an HRD Corp grant application and claim, where you have told us the training is being claimed.
• To issue certificates of completion and maintain training records.
• To send you information about courses and schedules, where you have separately consented to marketing.
• To meet our legal, tax and accounting obligations.

4. Disclosure to third parties

We may disclose your personal data to:

• HRD Corp — participant name, NRIC and attendance record, where your employer is claiming the programme under a levy scheme. This disclosure is required for the claim to be processed.
• Your employer — where your employer is sponsoring or claiming your attendance, we will confirm your registration and attendance to them.
• Facilitators — the assigned trainer receives the participant list and any accessibility requirements relevant to delivery.
• Service providers — hosting, email delivery and payment processing providers acting on our instructions as data processors.
• Regulators and auditors — where disclosure is required by law or to respond to a lawful request.

We do not sell personal data, and we do not share it for third-party marketing.

5. Retention

Enquiry records are retained for twenty-four months from your last contact with us. Registration, attendance and certification records are retained for seven years, which covers both the statutory limitation period and the audit window applicable to HRD Corp claims. After these periods data is securely deleted or anonymised.

6. Security

Personal data is stored on managed infrastructure with encryption in transit and at rest, access restricted to staff who need it for their role, and row-level access controls on our database. We review access periodically and require staff to use individual accounts.

7. Your rights

Under the Act you may:

• request access to the personal data we hold about you;
• request correction of data that is inaccurate, incomplete or out of date;
• withdraw your consent to marketing communications at any time;
• limit our processing of your data for direct marketing, and ask us to stop processing where it causes unwarranted damage or distress.

To exercise any of these rights, email hello@yourdomain.com. We will respond within twenty-one days. Note that we cannot delete records we are required to retain for a claim, tax or audit purpose until the applicable period has expired.

8. Cookies

This website uses only the cookies necessary for it to function, including a session cookie for staff who sign in to the administration area. We do not use advertising cookies. If we add analytics in future, this policy will be updated and consent obtained where required.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes affecting how we use your data will be notified to you directly where we hold your contact details.

10. Contact

Questions about this policy or how we handle personal data should be sent to hello@yourdomain.com or by post to the address in section 1.