Privacy

What we collect

• Account data — name and email address when you sign up; profile image if you sign in via Google, Facebook, or LinkedIn.
• Assessment responses — the answers you give to capability assessments, tied to your account.
• Order data — items purchased, billing name, email, phone, and payment reference (no card data — see "Third parties" below).
• Server logs — IP address, user agent, and request path, retained for up to 30 days for security and troubleshooting.

How we use it

Account data lets you sign in. Assessment responses let us compute your results and recommendations. Order data is used to deliver what you purchased, send receipts, and meet Malaysian tax record-keeping requirements. We do not sell personal data to third parties.

Third parties

• iPay88 — payment processing. Card data is handled entirely by iPay88; we receive a payment reference, not your card details.
• OAuth providers (Google, Facebook, LinkedIn) — only when you choose social sign-in. We receive a basic profile (name, email, image) and do not request additional permissions.
• Email relay — outbound mail (verification, receipts, password reset) is sent through an SMTP relay provider. They process the recipient address and message body in transit.

Cookies

We set a session cookie when you sign in. We do not use advertising or analytics cookies, and we do not embed third-party scripts beyond an optional Google Maps iframe on event pages.

Retention

Account and assessment data is kept while your account is active. Order records are kept for 7 years to satisfy Malaysian Inland Revenue requirements. Server logs roll off after 30 days. You can request earlier deletion of personal data (see "Your rights" below) — we will honour it unless we are legally required to retain a specific record.

Your rights

Under Malaysia's Personal Data Protection Act 2010 (and comparable regimes), you can ask us to: access the personal data we hold about you, correct it, delete it, or limit how we use it. Email us at the address below and we will reply within 30 days.

Contact

Privacy enquiries: privacy@kitaworkshub.com.