Privacy Policy

English

Introduction

Proforall Security Services & Consultancy Sdn. Bhd. (“Proforall”, “we”, “us”, or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, transfer, store, and protect your personal data when you interact with us — including through our website at proforall.org, our enquiry and job-application forms, and our security services.

We process personal data as a data controller in accordance with the Personal Data Protection Act 2010 (“PDPA”) of Malaysia, as amended by the Personal Data Protection (Amendment) Act 2024, together with its regulations and the guidelines issued by the Personal Data Protection Commissioner. By providing your personal data to us, you confirm that you have read and understood this Policy.

1. The seven Personal Data Protection Principles

Our handling of personal data is governed by the seven principles under the PDPA: the General Principle, Notice and Choice, Disclosure, Security, Retention, Data Integrity, and Access. This Policy is structured to give effect to each of them.

2. Personal data we collect

• Identity and contact data — name, job title, employer/organisation, email address, telephone number, and business or site address.
• Enquiry and service data — details of your premises, security requirements, and any information you include in an enquiry, quotation request, or security assessment.
• Recruitment data — where you apply for a role: your CV, employment history, qualifications, and references. Some of this may constitute sensitive personal data; we process it only where necessary and with your explicit consent or as permitted by law.
• Technical and usage data — IP address, browser type, device information, and pages visited, collected automatically via cookies and analytics.

3. Purposes for which we process your personal data

We process personal data to: respond to enquiries and provide information, proposals, and quotations; conduct security assessments and deliver our security services; administer client relationships, contracts, billing, and support; receive, assess, and process job applications; operate, secure, and improve the website and our services; send service updates and, where you have consented, marketing communications; and comply with legal, regulatory, licensing, and contractual obligations.

4. Legal basis

We rely on your consent and on the other lawful bases recognised under the PDPA (including where processing is necessary for the performance of a contract, for compliance with a legal obligation, or for our legitimate interests). Where we rely on consent, you may withdraw it at any time.

5. Direct marketing

We will only send you marketing communications where you have given consent (which, for direct marketing, is recorded), and each communication will include an easy way to opt out. You have the right at any time to require us to stop processing your personal data for direct-marketing purposes.

6. Disclosure of personal data

We do not sell your personal data. We may disclose it to authorised personnel within Proforall; service providers and processors acting on our behalf (e.g. website hosting, IT, security, communications, and analytics providers) under confidentiality and data-protection obligations; professional advisers (auditors, insurers, legal advisers); and regulators, authorities, and law-enforcement agencies where required or permitted by law.

7. Cross-border transfers

Where we transfer personal data outside Malaysia, we do so only in accordance with Section 129 of the PDPA and the Cross-Border Personal Data Transfer Guidelines (2025) — including, where applicable, conducting a transfer impact assessment and ensuring the destination provides protection substantially similar to, or an adequate level comparable with, Malaysian law, or that another permitted condition applies.

8. Your rights

Subject to the PDPA, you have the right to access the personal data we hold about you; correct inaccurate, incomplete, or out-of-date data; withdraw consent; limit the processing of your personal data; request data portability (transmission to another data controller, where technically feasible); and prevent processing for direct marketing. To exercise any right, contact us using the details in Section 12.

9. Data retention

We retain personal data only for as long as necessary to fulfil the purposes in this Policy, to satisfy legal, regulatory, tax, accounting, or licensing requirements, or to establish, exercise, or defend legal claims. When no longer required, personal data is securely destroyed or anonymised.

10. Cookies

Our website uses cookies and similar technologies to enable core functionality, remember your preferences, and understand how the website is used. Essential cookies are necessary for the site to function. Non-essential cookies (such as analytics) are used only where you permit them. You can manage cookies through our cookie banner or your browser settings.

11. Data security and breach handling

We take practical organisational and technical steps to protect personal data against loss, misuse, unauthorised access, modification, or disclosure — including access controls, secure hosting, firewalling, and encryption in transit. In the event of a personal data breach, we will assess it and, where required under the PDPA and the 2025 Data Breach Notification Guidelines, notify the Commissioner within 72 hours of becoming aware of it, and notify affected data subjects without undue delay where the breach is likely to cause significant harm.

12. Data protection contact

For any question, request, or complaint regarding this Policy or your personal data, contact: Proforall Security Services & Consultancy Sdn. Bhd., No. 44-1, Jalan Sg. Burung AA32/AA, Seksyen 32, Bukit Rimau, 40460 Shah Alam, Selangor. Attn: [Data Protection Officer / Person in charge]. Email: [dpo@proforall.org / info@proforall.org] · Tel: 03-5525 8519.

13. Children’s data

Our website and services are directed at organisations and are not intended for children. We do not knowingly collect the personal data of children without appropriate parental or guardian consent.

14. Third-party links

Our website may link to third-party websites. We are not responsible for their content or privacy practices, and we encourage you to review their policies.

15. Changes to this Policy

We may update this Policy from time to time. The current version, with its effective date, will always be available on this page.

Cookie Notice

Proforall uses cookies to make the website work, remember your preferences, and measure performance. Essential cookies are always active. Non-essential cookies (e.g. analytics) are set only with your permission. You can accept or decline non-essential cookies via the cookie banner, and change your choice at any time through your browser settings.

Bahasa Malaysia

Pengenalan

Proforall Security Services & Consultancy Sdn. Bhd. (“Proforall”, “kami”) komited untuk melindungi privasi dan keselamatan data peribadi anda. Dasar Privasi ini menerangkan cara kami mengumpul, menggunakan, mendedahkan, memindah, menyimpan, dan melindungi data peribadi anda apabila anda berurusan dengan kami — termasuk melalui laman web kami di proforall.org, borang pertanyaan dan permohonan kerja, serta perkhidmatan keselamatan kami.

Kami memproses data peribadi sebagai pengawal data selaras dengan Akta Perlindungan Data Peribadi 2010 (“APDP”) Malaysia, sebagaimana dipinda oleh Akta Perlindungan Data Peribadi (Pindaan) 2024, berserta peraturan dan garis panduan yang dikeluarkan oleh Pesuruhjaya Perlindungan Data Peribadi.

1. Tujuh Prinsip Perlindungan Data Peribadi

Pengendalian data peribadi kami tertakluk kepada tujuh prinsip di bawah APDP: Prinsip Am, Notis dan Pilihan, Pendedahan, Keselamatan, Pengekalan, Integriti Data, dan Akses.

2. Data peribadi yang kami kumpul

• Data identiti dan hubungan — nama, jawatan, majikan/organisasi, e-mel, nombor telefon, dan alamat perniagaan atau lokasi.
• Data pertanyaan dan perkhidmatan — butiran premis, keperluan keselamatan, dan maklumat dalam pertanyaan, sebut harga, atau penilaian keselamatan anda.
• Data pengambilan pekerja — bagi permohonan jawatan: resume, sejarah pekerjaan, kelayakan, dan rujukan. Sebahagiannya mungkin data peribadi sensitif; diproses hanya apabila perlu dan dengan kebenaran nyata anda atau seperti dibenarkan undang-undang.
• Data teknikal dan penggunaan — alamat IP, jenis pelayar, maklumat peranti, dan halaman dilawati, melalui kuki dan analitik.

3. Tujuan pemprosesan

Kami memproses data peribadi untuk menjawab pertanyaan dan memberi maklumat, cadangan serta sebut harga; menjalankan penilaian keselamatan dan menyampaikan perkhidmatan; mentadbir hubungan pelanggan, kontrak, bil, dan sokongan; menerima dan menilai permohonan kerja; mengendali, melindungi, dan menambah baik laman web; menghantar kemas kini dan (dengan kebenaran) komunikasi pemasaran; serta mematuhi kewajipan undang-undang, kawal selia, pelesenan, dan kontrak.

4. Asas undang-undang

Kami bergantung pada kebenaran anda dan asas sah lain di bawah APDP (termasuk apabila pemprosesan perlu untuk kontrak, kewajipan undang-undang, atau kepentingan sah kami). Anda boleh menarik balik kebenaran pada bila-bila masa.

5. Pemasaran langsung

Kami hanya menghantar komunikasi pemasaran dengan kebenaran anda (yang direkodkan bagi pemasaran langsung), dan setiap komunikasi menyertakan pilihan berhenti melanggan. Anda berhak menghendaki kami berhenti pada bila-bila masa.

6. Pendedahan data peribadi

Kami tidak menjual data anda. Kami mungkin mendedahkannya kepada kakitangan Proforall yang diberi kuasa; penyedia perkhidmatan dan pemproses (cth. hosting, IT, keselamatan, komunikasi, analitik) di bawah kerahsiaan; penasihat profesional; serta pengawal selia dan pihak berkuasa apabila dikehendaki undang-undang.

7. Pemindahan merentas sempadan

Apabila kami memindahkan data ke luar Malaysia, kami mematuhi Seksyen 129 APDP dan Garis Panduan Pemindahan Data Peribadi Merentas Sempadan (2025), termasuk penilaian impak pemindahan dan semakan kecukupan jika berkenaan.

8. Hak anda

Tertakluk kepada APDP, anda berhak mengakses data anda; membetulkan data yang tidak tepat atau lapuk; menarik balik kebenaran; menghadkan pemprosesan; meminta kemudahalihan data; dan menghalang pemprosesan bagi pemasaran langsung. Hubungi kami melalui Seksyen 12.

9. Pengekalan data

Kami menyimpan data hanya selama yang perlu untuk tujuan Dasar ini, kewajipan undang-undang, cukai, perakaunan, atau pelesenan, atau untuk menuntut hak undang-undang. Apabila tidak diperlukan, ia dimusnahkan atau dilindung-namakan dengan selamat.

10. Kuki

Laman web kami menggunakan kuki untuk membolehkan fungsi teras, mengingati keutamaan, dan memahami penggunaan laman. Kuki penting diperlukan untuk laman berfungsi. Kuki bukan penting (analitik) digunakan hanya dengan kebenaran anda.

11. Keselamatan data dan pengendalian pelanggaran

Kami mengambil langkah organisasi dan teknikal yang praktikal — kawalan capaian, hosting selamat, tembok api, dan penyulitan semasa penghantaran. Sekiranya berlaku pelanggaran data peribadi, kami akan menilainya dan, jika dikehendaki di bawah APDP dan Garis Panduan Pemberitahuan Pelanggaran Data 2025, memberitahu Pesuruhjaya dalam tempoh 72 jam, dan memberitahu subjek data terjejas tanpa kelewatan apabila kemudaratan ketara berkemungkinan.

12. Hubungan perlindungan data

Untuk sebarang pertanyaan atau aduan, hubungi: Proforall Security Services & Consultancy Sdn. Bhd., No. 44-1, Jalan Sg. Burung AA32/AA, Seksyen 32, Bukit Rimau, 40460 Shah Alam, Selangor. Perhatian: [Pegawai Perlindungan Data]. E-mel: [dpo@proforall.org / info@proforall.org] · Tel: 03-5525 8519.

13. Data kanak-kanak

Laman web dan perkhidmatan kami ditujukan kepada organisasi dan bukan untuk kanak-kanak. Kami tidak mengumpul data kanak-kanak secara sedar tanpa kebenaran ibu bapa atau penjaga.

14. Pautan pihak ketiga

Laman web kami mungkin memaut ke laman pihak ketiga. Kami tidak bertanggungjawab terhadap kandungan atau amalan privasi mereka.

15. Perubahan pada Dasar ini

Kami mungkin mengemas kini Dasar ini dari semasa ke semasa. Versi semasa, dengan tarikh berkuat kuasanya, akan sentiasa tersedia di halaman ini.