Privacy Policy

Last updated: 18 September 2026

[REGISTERED BUSINESS NAME] (Company/Business Registration No. [SSM No.]) (“Vempower”, “we”, “us” or “our”) operates the website vempower.com.my and provides training programmes, seminars and related services.

We are committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the rights available to you. It is issued in accordance with the Personal Data Protection Act 2010 of Malaysia and its subsequent amendments (the “PDPA”).

By providing your personal data to us, registering for a programme, or continuing to use the Website, you consent to the processing of your personal data as described in this Policy.

1. Who Is Responsible for Your Data

We act as the data controller in respect of the personal data described in this Policy. Our contact details are set out in Section 14.

2. Personal Data We Collect

Depending on how you interact with us, we may collect:

a) Identity and contact data Full name, salutation, job title, employer or organisation name, department, business and personal email address, mobile and office telephone number, mailing address.

b) Booking and transaction data Programmes registered for, attendance records, dietary or accessibility requirements you tell us about, invoices, receipts, purchase order numbers, billing address, payment status, partial card details (such as card type and last four digits) and transaction references supplied to us by our payment provider.

c) Learning data Pre-course questionnaires, assessment or quiz responses, assignments, feedback forms, evaluation scores, certificates issued, and course progress or completion records for online content.

d) Employer-related data Where your employer registers you, we may receive your details from them, together with information such as your department, grade or HRD Corp claim reference.

e) Technical and usage data IP address, browser type and version, device type, operating system, time zone, referring URL, pages visited, time spent, and clicks. This is collected through cookies and similar technologies (see Section 9).

f) Communications data Emails, WhatsApp or chat messages, enquiry forms, call records where applicable, and your marketing preferences.

g) Images and recordings Photographs, video or audio recordings taken at our events or during online sessions, where applicable.

We generally do not seek sensitive personal data (such as information about health, religious beliefs or political opinions). Where you voluntarily disclose such information — for example, a medical or dietary requirement relevant to your attendance — we will process it only for that purpose and with your consent.

3. How We Collect Your Data

Directly from you, when you complete a registration or enquiry form, subscribe to our mailing list, communicate with us, or attend a programme.
From your employer or the person who registers you.
Automatically, through cookies and analytics tools when you use the Website.
From third parties such as our payment gateway, event platforms, or publicly available professional sources.

4. Why We Use Your Data

We process your personal data for the following purposes:

To register you for programmes, allocate seats and issue confirmations, joining instructions and reminders.
To process payments, issue invoices and receipts, and maintain accounting records.
To deliver the programme, including preparing name badges, attendance lists, materials and certificates.
To respond to your enquiries and provide customer support.
To assess learning needs and evaluate and improve the quality of our programmes.
To administer refunds, transfers, cancellations and complaints.
To support employer-funded training claims, including HRD Corp grant applications where relevant.
To send you administrative notices, such as changes to a programme’s date or venue.
With your consent, to send you marketing about upcoming seminars, new programmes and offers.
To operate, secure, maintain and improve the Website, and to detect and prevent fraud and misuse.
To comply with legal, tax, audit and regulatory obligations, and to establish, exercise or defend legal claims.

5. Consequences of Not Providing Data

Where personal data is marked as mandatory on our forms, it is necessary for us to accept your booking, process payment or deliver the programme. If you choose not to provide it, we may be unable to register you or provide the Services. Optional information is used only to improve your experience.

6. Disclosure of Your Data

We may disclose your personal data to the following categories of recipients, on a need-to-know basis:

Trainers, facilitators, coaches and consultants engaged to deliver a programme.
Venues, hotels, caterers and event organisers, for attendance, access and catering arrangements.
Payment service providers — RAZORPAY CURLEC — and banks, for processing payments, refunds and chargebacks.
Technology service providers, including website hosting, email delivery, customer relationship management, video conferencing, learning management and analytics providers.
Your employer or the organisation that registered or sponsored you, in respect of attendance, participation and completion.
HRD Corp or other government or statutory bodies, where required for claims, accreditation or compliance.
Professional advisers such as auditors, accountants, insurers and lawyers.
Regulators, law enforcement or courts, where we are required or permitted by law to do so.
A purchaser or successor in the event of a merger, acquisition or restructuring of our business.

We do not sell or rent your personal data to third parties.

7. Cross-Border Transfer of Data

Some of our service providers (for example, cloud hosting, email and video conferencing providers) may store or process data on servers located outside Malaysia. Where personal data is transferred outside Malaysia, we take reasonable steps to ensure that the recipient provides a standard of protection comparable to that required under the PDPA, including through contractual safeguards.

8. Data Security

We apply reasonable practical, technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, modification or disclosure. These include encrypted connections (HTTPS), access controls, restricted staff access on a need-to-know basis, and contractual obligations on our service providers. No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

In the event of a personal data breach that meets the thresholds under the PDPA, we will notify the Personal Data Protection Commissioner and, where required, affected individuals, within the timeframes prescribed by law.

9. Cookies and Analytics

Our Website uses cookies and similar technologies to enable core functionality (such as your shopping cart and session), to remember your preferences, to measure traffic and performance, and — where you consent — for advertising and remarketing.

You may disable or delete cookies through your browser settings, but some parts of the Website may not function properly as a result.

Analytics and marketing tools we use include: Google Analytics, Meta Pixel, Google Ads

10. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described above, including:

Booking and attendance records: for the duration of our relationship and thereafter as required for audit and accreditation purposes.
Financial and tax records: at least 7 years, in line with Malaysian tax and accounting requirements.
Marketing contacts: until you withdraw your consent or unsubscribe.
Website analytics data: typically 24 months.

When data is no longer required, we will securely delete or anonymise it.

11. Marketing Communications

Where you have consented, we may send you information about upcoming programmes and offers by email, SMS, WhatsApp or telephone. You may withdraw your consent at any time by clicking the unsubscribe link in any email or by writing to us at privacy@vempower.com.my. We will continue to send you essential service messages relating to bookings you have made.

12. Your Rights

Subject to the PDPA and any applicable exemptions, you have the right to:

Access the personal data we hold about you and be informed how it is being processed.
Correct personal data that is inaccurate, incomplete, misleading or out of date.
Withdraw your consent to the processing of your personal data, in whole or in part.
Limit or object to processing, including for direct marketing or where processing is likely to cause you distress.
Request data portability, that is, to have your personal data transmitted to another data controller where technically feasible and as permitted under the PDPA.

To exercise any of these rights, please contact us using the details in Section 14. We may ask you to verify your identity, and a small prescribed fee may apply to data access requests. We will respond within the period required under the PDPA. Please note that withdrawing consent may mean we can no longer provide certain Services to you.

13. Children

Our Services are directed at working professionals and are not intended for individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Contact Us and Complaints

For any question, request or complaint relating to your personal data, or to exercise any of your rights, please contact:

[REGISTERED BUSINESS NAME] Attention: [Data Protection Officer / Privacy Contact] [FULL REGISTERED ADDRESS] Email: privacy@vempower.com.my Telephone: +6012-2408887

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi, JPDP), Malaysia.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be published on this page with a revised “Last updated” date. Material changes will be communicated to you by email or a notice on the Website where appropriate.