Personal Data Protection Notice (PDPA)
Notis Perlindungan Data Peribadi

This notice explains how Easy Latih Consultancy collects, uses, discloses, stores and otherwise processes personal data in connection with its website, Trainer Collaboration Portal, training programmes, consultancy activities, enquiries and related commercial transactions. It is issued in accordance with the Personal Data Protection Act 2010 [Act 709], as amended from time to time.

Effective version / Versi berkuat kuasa: 9 September 2026

Bahasa Malaysia

1. Data peribadi yang kami kumpul

Bergantung kepada urusan anda dengan EasyLatih, kami boleh mengumpul nama, e-mel, nombor telefon/WhatsApp, negeri/lokasi, pautan profil profesional, maklumat kepakaran, biodata profesional, cadangan dan maklumat program latihan, komen portal, pilihan latihan dan perjalanan, gambar profil, nombor kad pengenalan/pasport, bangsa, kelayakan akademik, pensijilan profesional, pengalaman kerjaya dan latihan, status HRD Corp TTT atau pengecualian TTT, CV/resume, dokumen sokongan, maklumat pembayaran yang diperlukan, rekod persetujuan serta rekod penggunaan portal.

Kami juga boleh memproses maklumat teknikal yang munasabah untuk keselamatan dan operasi sistem seperti alamat IP, masa log masuk, rekod aktiviti, jenis pelayar/peranti dan maklumat sesi.

2. Sumber data

Data biasanya diperoleh terus daripada anda melalui borang, portal, e-mel, WhatsApp, panggilan atau dokumen yang anda serahkan. Data tertentu juga boleh terhasil daripada aktiviti portal, semakan dalaman EasyLatih, maklum balas peserta atau pelanggan, atau sumber profesional awam yang munasabah apabila berkaitan dengan penilaian atau pelaksanaan tugasan.

3. Tujuan pemprosesan

Data digunakan untuk membuka dan mengurus akaun; mengesahkan identiti; menilai cadangan program; mengurus onboarding, waiting list, trainer pool dan consultant pool; menilai kelayakan dan dokumen; memadankan peluang latihan atau konsultansi; berkomunikasi dengan anda; menyediakan sebut harga, cadangan dan bahan pemasaran yang berkaitan; mengurus eTRiS/HRD Corp dan keperluan pematuhan; mengurus tugasan, pembayaran dan rekod operasi; menjaga keselamatan sistem; menyelesaikan pertikaian; serta memenuhi kewajipan undang-undang atau kontrak.

4. Data wajib dan data pilihan

Medan yang ditanda sebagai wajib diperlukan untuk tujuan pendaftaran, semakan, onboarding, pematuhan atau pelaksanaan tugasan yang berkaitan. Jika data wajib tidak diberikan, EasyLatih mungkin tidak dapat membuka akaun, melengkapkan onboarding, menilai permohonan, mendaftarkan trainer/program, membuat pembayaran atau menawarkan tugasan. Maklumat yang ditanda sebagai pilihan, termasuk persetujuan pemasaran, adalah sukarela.

5. Pendedahan data

Data boleh didedahkan setakat yang perlu kepada kakitangan atau wakil EasyLatih; pelanggan atau bakal pelanggan bagi tujuan pemilihan trainer/consultant dan pelaksanaan tugasan; HRD Corp, eTRiS atau pihak berkuasa berkaitan apabila berkenaan; penyedia teknologi, hosting, pangkalan data, e-mel dan penyimpanan fail; juruaudit, akauntan, peguam atau penasihat profesional; serta pihak berkuasa apabila dikehendaki oleh undang-undang. EasyLatih tidak menjual data peribadi anda.

6. Gambar, profil profesional dan pemasaran

Nama, gambar profesional, biodata, kepakaran dan kelayakan trainer/consultant hanya digunakan pada profil, proposal, laman program, poster, media sosial atau bahan pemasaran berkaitan EasyLatih apabila penggunaan tersebut sesuai dengan status kolaborasi dan persetujuan yang direkodkan. Persetujuan pemasaran umum adalah pilihan dan boleh ditarik balik.

7. Penyimpanan dan keselamatan

EasyLatih mengambil langkah keselamatan yang munasabah, termasuk kawalan akses dan pemisahan rekod terhad daripada profil awam apabila sesuai. Data disimpan selama diperlukan bagi tujuan ia dikumpul, pengurusan hubungan kontrak, audit, perakaunan, operasi, penyelesaian pertikaian atau kewajipan undang-undang. Data yang tidak lagi diperlukan akan dipadam, dinyahpengenalan atau diurus mengikut proses penyimpanan yang munasabah.

8. Pemprosesan rentas sempadan

Sesetengah penyedia perkhidmatan teknologi yang digunakan EasyLatih mungkin memproses atau menyimpan data melalui infrastruktur di luar Malaysia. EasyLatih akan mengurus pemindahan dan penggunaan penyedia tersebut mengikut keperluan undang-undang perlindungan data Malaysia yang terpakai.

9. Hak anda

Tertakluk kepada undang-undang yang terpakai, anda boleh meminta pengesahan sama ada data anda diproses, akses kepada data, pembetulan data yang tidak tepat, menarik balik persetujuan bagi pemprosesan yang bergantung kepada persetujuan, dan meminta supaya pemasaran langsung dihentikan. Anda juga boleh menghubungi EasyLatih jika anda percaya pemprosesan tertentu menyebabkan kerosakan atau tekanan yang tidak wajar. Sesetengah data mungkin perlu dikekalkan jika diperlukan oleh undang-undang, kontrak, audit atau kepentingan perniagaan yang sah.

10. Cara membuat permintaan atau pertanyaan

Untuk permintaan akses, pembetulan, penarikan persetujuan pemasaran atau pertanyaan berkaitan data peribadi, hubungi:

11. Perubahan notis

EasyLatih boleh mengemas kini notis ini apabila terdapat perubahan pada undang-undang, sistem, vendor atau aktiviti pemprosesan. Versi berkuat kuasa dan tarikh kemas kini akan dipaparkan pada halaman ini. Jika perubahan adalah material dan memerlukan tindakan pengguna, EasyLatih boleh meminta pengakuan atau persetujuan baharu melalui portal.

English

1. Personal data we collect

Depending on your interaction with EasyLatih, we may collect your name, email, phone/WhatsApp number, state/location, professional profile links, expertise information, professional biography, training programme proposals and details, portal comments, training and travel preferences, profile photo, identity card/passport number, race, academic qualifications, professional certifications, career and training experience, HRD Corp TTT or TTT exemption status, CV/resume, supporting documents, necessary payment information, consent records and portal usage records.

We may also process technical information reasonably required for system security and operation, such as IP address, login timestamps, activity records, browser/device information and session information.

2. Sources of personal data

Personal data is generally obtained directly from you through forms, the portal, email, WhatsApp, calls or documents you submit. Certain information may also arise from portal activity, EasyLatih internal reviews, participant or client feedback, or reasonable public professional sources where relevant to assessment or delivery of an engagement.

3. Purposes of processing

We process personal data to create and manage accounts; verify identity; assess programme proposals; manage onboarding, waiting lists, trainer pools and consultant pools; review qualifications and documents; match training or consultancy opportunities; communicate with you; prepare quotations, proposals and relevant marketing materials; support eTRiS/HRD Corp and compliance requirements; administer engagements, payments and operational records; secure our systems; resolve disputes; and meet legal or contractual obligations.

4. Mandatory and optional information

Fields marked as required are necessary for registration, assessment, onboarding, compliance or the relevant engagement. If required data is not provided, EasyLatih may be unable to create an account, complete onboarding, assess an application, register a trainer/programme, process payment or offer an assignment. Information marked optional, including general marketing consent, is voluntary.

5. Disclosure of personal data

Personal data may be disclosed where necessary to EasyLatih personnel or representatives; clients or prospective clients for trainer/consultant selection and engagement delivery; HRD Corp, eTRiS or relevant authorities where applicable; technology, hosting, database, email and file-storage providers; auditors, accountants, lawyers or professional advisers; and authorities where required by law. EasyLatih does not sell your personal data.

6. Images, professional profiles and marketing

A trainer's or consultant's name, professional photo, biography, expertise and credentials are used in profiles, proposals, programme pages, posters, social media or other EasyLatih marketing materials only where consistent with the collaboration status and recorded consent. General marketing consent is optional and may be withdrawn.

7. Retention and security

EasyLatih takes reasonable security measures, including access controls and separation of restricted records from public profiles where appropriate. Personal data is retained for as long as necessary for the purpose collected, contractual management, audit, accounting, operations, dispute resolution or legal obligations. Data no longer required will be deleted, de-identified or otherwise handled under reasonable retention processes.

8. Cross-border processing

Some technology service providers used by EasyLatih may process or store data using infrastructure outside Malaysia. EasyLatih will manage such transfers and service providers in accordance with applicable Malaysian data protection requirements.

9. Your rights

Subject to applicable law, you may request confirmation of processing, access to your personal data, correction of inaccurate data, withdrawal of consent where processing relies on consent, and cessation of direct marketing. You may also contact EasyLatih if you believe certain processing causes unwarranted damage or distress. Certain records may need to be retained for legal, contractual, audit or legitimate business-record purposes.

10. Requests and enquiries

For access, correction, marketing-consent withdrawal or other personal-data enquiries, contact:

11. Updates to this notice

EasyLatih may update this notice where laws, systems, vendors or processing activities change. The effective version and update date will be shown on this page. Where a change is material and requires user action, EasyLatih may request a new acknowledgement or consent through the portal.