Privacy Policy

Effective Date: 20nd July 2025

GKK Consultants (“we”, “us”, “our”) is committed to protecting your privacy and personal data in compliance with Malaysia’s Personal Data Protection Act (PDPA), including the latest amendments effective June 2025. This policy explains how we collect, use, disclose, and safeguard your information.

1. Collection of Personal Data

We collect personal data that you voluntarily provide when you:

- Register for courses or events
- Subscribe to newsletters
- Contact us via our website or other channels

Types of data may include your name, contact details, company, job title, and payment information.

2. Use of Personal Data

Your data is used to:

- Process registrations and payments
- Provide requested services and customer support
- Send updates, marketing, or event information (with your consent)
- Comply with legal obligations

3. Disclosure of Personal Data

We may disclose your data to:

- Our partners, trainers, and service providers for course delivery and support
- Regulatory authorities as required by law
- Third parties only with your explicit consent or as required by law

4. Data Security

We implement strict security measures (both electronic and physical) to protect your data against unauthorised access, disclosure, or loss, in line with PDPA standards.

5. Data Retention

Personal data is retained only as long as necessary for the purposes stated or as required by law.

6. Data Subject Rights

You have the right to:

- Access and correct your personal data
- Withdraw consent at any time
- Request deletion or restriction of your data
- Data portability (from June 2025)

7. Data Breach Notification

In the event of a data breach, we will notify affected individuals and the Personal Data Protection Department (JPDP) within 72 hours, as required by law.

8. Appointment of Data Protection Officer (DPO)

We have appointed a Data Protection Officer. For inquiries or to exercise your rights, contact:

Email: gilbert@gkkconsultants.com