Privacy Notice

1. Scope

This Privacy Notice applies to personal data submitted by prospective participants, learners, candidates, clients, and other users who create or maintain an account on this platform. It is intended to support GKK’s obligations under the Malaysian Personal Data Protection Act 2010 (Act 709) in relation to personal data processed in commercial transactions.

2. Personal data GKK may collect

GKK may collect and process data including:

• identity and contact details such as your full name, email address, phone number, and location;
• account credentials and authentication records;
• professional profile information such as employment history, industries, current role, skill records, proficiency information, and resume content;
• communications preferences and records of consent or acknowledgement;
• technical, audit, security, and usage records needed to protect the platform and maintain service integrity.

3. How GKK uses personal data

GKK may use personal data to:

• create and manage your account and participant profile;
• verify identity, authenticate access, and maintain platform security;
• assess programme suitability, maintain participant records, and support learning administration;
• contact you regarding registrations, programme delivery, enrolment follow-up, certification pathways, account matters, and related service communications;
• send training opportunities, programme offers, events, and promotional updates where permitted by law and your communication preferences;
• maintain audit records, investigate misuse, enforce platform rules, and comply with legal obligations.

4. Disclosure and data sharing

GKK may disclose personal data only on a need-to-know basis to employees, contractors, professional advisers, training or certification partners, platform service providers, cloud or hosting providers, payment or messaging providers, and other processors engaged to support the purposes described above. GKK does not sell personal data and does not permit unauthorised third parties to purchase participant data from this platform.

5. Cross-border processing and storage

Certain service providers or technical infrastructure used by GKK may store or process personal data outside Malaysia. Where cross-border processing occurs, GKK expects service providers to handle data subject to appropriate confidentiality, security, and contractual controls.

6. Security and retention

GKK takes reasonable administrative, organisational, and technical measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected, for operational record-keeping, dispute management, audit, and legal compliance.

7. Your rights and choices

Subject to applicable law, you may request access to your personal data, request correction of inaccurate or incomplete data, update your profile information, or withdraw consent for certain optional processing such as non-essential marketing communications. Withdrawal of consent does not affect processing already carried out before the withdrawal and may affect GKK’s ability to provide some services where the data is necessary.

8. Important limitations

This Privacy Notice is intended as an operational privacy statement for the platform. It does not create any waiver of rights by GKK, any admission of liability, or any guarantee that risk can be entirely eliminated. Nothing in this notice limits any rights, remedies, defences, or obligations available to GKK under applicable law, contract, or regulatory requirements.

9. Contact and updates

Questions, access requests, correction requests, or communication preference updates should be directed to GKK through the official contact channels made available by GKK. GKK may update this Privacy Notice from time to time, and the latest version published on this platform will apply from its stated effective date.