PERSONAL DATA PROTECTION TERMS & CONDITIONS

  1. Introduction

    This Intranet Portal ("Portal") is operated by GoHub Group of Companies ("Company", "we", "our", or "us") for internal business and employee-related purposes.

    We are committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 and the Personal Data Protection (Amendment) Act 2024 of Malaysia ("PDPA").

    By accessing and using this Portal, you acknowledge and consent to the collection, use, processing, and disclosure of your Personal Data in accordance with these Terms & Conditions.

  2. Definition of Personal Data

    "Personal Data" refers to any information that relates directly or indirectly to an identified or identifiable individual, including but not limited to:

    • Name, NRIC/Passport number, contact details
    • Employment information (designation, department, salary range, performance data)
    • Login credentials and system usage data
    • Biometric data (if applicable), which is classified as sensitive personal data

  3. Purpose of Processing

    Your Personal Data may be collected and processed for the following purposes:

    • Employee administration and HR management
    • Payroll, benefits, and compensation management
    • Internal communication and collaboration
    • Performance management and training
    • Compliance with legal and regulatory obligations
    • IT security, system monitoring, and access control

    We will only process Personal Data for purposes that are necessary, relevant, and lawful.

  4. Consent

    By using this Portal, you:

    • Consent to the processing of your Personal Data for the purposes stated above
    • Acknowledge that certain data processing is necessary for employment obligations
    • Agree that withdrawal of consent may affect your access to the Portal or employment-related services

  5. Disclosure of Personal Data

    Your Personal Data may be disclosed to:

    • Internal departments within the Company
    • Related companies, subsidiaries, or group entities
    • Third-party service providers (e.g., IT vendors, payroll providers)
    • Regulatory authorities, where required by law

    All disclosures will be made subject to appropriate confidentiality and data protection safeguards.

  6. Data Security

    We implement reasonable technical and organisational measures to protect your Personal Data against:

    • Loss, misuse, or unauthorised access
    • Disclosure, alteration, or destruction

    Access to Personal Data is restricted to authorised personnel only.

  7. Data Retention

    Your Personal Data will be retained only for as long as necessary to fulfil:

    • The purposes stated in this policy
    • Legal, regulatory, or contractual requirements

    Thereafter, data will be securely deleted or anonymised.

  8. Your Rights

    Subject to the PDPA, you have the right to:

    • Access your Personal Data
    • Request correction of inaccurate or outdated data
    • Withdraw consent (subject to limitations)
    • Request data portability (where applicable under PDPA 2024)

    Requests can be made via the Company's designated contact below.

  9. Data Breach Notification

    In the event of a personal data breach that may result in harm, the Company will:

    • Notify the relevant authority and affected individuals where required
    • Take appropriate remedial actions

  10. Cross-Border Data Transfer

    Where Personal Data is transferred outside Malaysia, the Company will ensure that:

    • The receiving party provides an adequate level of data protection; or
    • Appropriate safeguards are in place in accordance with the PDPA

  11. Data Protection Officer (DPO)

    The Company may appoint a Data Protection Officer responsible for overseeing compliance with PDPA requirements and handling data protection matters.

    For any inquiries, please contact:

    Email: dataprotection@gohub.com.my / hr@gohub.com.my

    Contact: +60383227555

  12. Responsibilities of Employees

    By using this Portal, employees agree to:

    • Use Personal Data only for authorised business purposes
    • Not misuse, disclose, or access data without proper authorisation
    • Comply with all internal data protection and IT security policies

  13. Amendments

    The Company reserves the right to amend these Terms & Conditions from time to time to ensure compliance with legal and regulatory requirements.

  14. Governing Law

    These Terms & Conditions shall be governed by and construed in accordance with the laws of Malaysia.