Privacy Policy

1. Introduction

This Privacy Policy explains how [TODO: registered entity name] ("MWCC", "we", "us" or "our") collects, uses, discloses and safeguards personal data when you visit https://www.mwcc.org.my (the "Site") or submit an enquiry through our contact, membership or partnership forms.

We process personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable laws. This policy is a general-purpose draft and should be reviewed by a qualified Malaysian legal advisor before production use.

2. Who we are

Data controller details:

• Registered name: [TODO: registered entity name]
• Registration no.: [TODO: SSM registration no.]
• Registered address: [TODO: registered address]
• Email: info@mwcc.org.my
• Phone: [TODO: phone]

3. Personal data we collect

When you use our online forms, we may collect the following information that you voluntarily provide:

• Full name
• Email address
• Phone number (optional)
• Organisation or business name (optional)
• Role or profession (membership and partnership enquiries)
• Areas of interest (membership enquiries)
• Your message or enquiry details

4. How we collect data

We collect personal data directly from you when you submit a form on the Site. We do not currently use analytics or advertising tracking technologies that collect browsing behaviour across the Site.

Our forms include a honeypot field used solely to detect automated spam submissions. That field is not intended for human use and any value submitted in it is discarded for spam-filtering purposes.

5. Purposes of processing

We use your personal data to:

• Respond to contact, membership and partnership enquiries
• Assess and follow up on membership or partnership interest
• Communicate about MWCC programmes, events and collaborations when relevant to your enquiry
• Maintain internal records of enquiries and correspondence
• Protect the Site against spam, abuse and security threats
• Comply with legal or regulatory obligations

6. Legal basis

Where the PDPA applies, we process personal data based on your consent when you voluntarily submit a form, and where necessary to take steps at your request prior to entering into a membership, partnership or other arrangement, or to comply with legal obligations.

7. Where your data is stored

Valid form submissions are stored securely by MWCC for operational follow-up. When email delivery is configured, a copy of your enquiry may also be sent to our designated inbox so our team can respond.

Hosting and email service providers that process data on our behalf are required to protect it appropriately. Depending on hosting configuration, data may be processed on servers located in or outside Malaysia.

8. Retention

We retain enquiry records for as long as reasonably necessary to respond to your request, manage ongoing correspondence, and meet operational, legal or audit requirements. When data is no longer needed, we will delete or anonymise it where practicable.

9. Disclosure to third parties

We do not sell your personal data. We may share it with trusted service providers (such as hosting or email delivery providers) solely to operate the Site and handle enquiries, or where disclosure is required by law, regulation or legal process.

10. Your rights under the PDPA

Subject to the PDPA and applicable exceptions, you may request access to, or correction of, your personal data held by us. You may also withdraw consent to further processing where processing is based on consent, noting that this may limit our ability to respond to your enquiry.

To exercise these rights, contact us at info@mwcc.org.my with sufficient detail to identify your request. We may need to verify your identity before responding.

11. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children's privacy

The Site is intended for adults and organisational representatives. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us so we can take appropriate action.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will be revised when changes are published. Continued use of the Site after changes take effect constitutes acceptance of the updated policy where permitted by law.

14. Contact

For privacy-related questions or PDPA requests, email info@mwcc.org.my.