Privacy Policy

This Privacy Policy explains how KLAE PLT ("we", "us", "our") collects, uses, discloses and protects your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, as amended, when you use this website, register for our training programmes, use our Learning Portal, purchase products from our online store, or otherwise interact with us.

1. Personal Data We Collect

Depending on how you interact with us, we may collect:

• Identity and contact data — name, NRIC/passport number (where required for certification), company name, designation, email address and phone number. A billing address is collected only if you choose to provide one for your invoice.
• Training and certification data — qualifications, employment details, assessment results and certification records required for programmes such as IECEx CoPC.
• Learning Portal data — your login details (passwords are stored only in encrypted, hashed form and are never visible to our staff), course progress, mock test answers and trainer feedback.
• Transaction data — products purchased, invoice details and payment status. Card and online banking details are entered directly on our payment gateway's secure page and are never received or stored by us. If we refund you by bank transfer, we keep only the last four digits of your account number on our records.
• Technical data — IP address, browser type, device information and pages visited. Your IP address is recorded with orders and form submissions to help prevent fraud and abuse.

2. How We Use Your Personal Data

• To process training registrations, assessments and certification applications;
• To provide your Learning Portal account, course materials and mock test results;
• To process orders and payments, and to arrange collection of products you purchase;
• To respond to enquiries submitted through our contact forms, email or phone;
• To administer HRD Corp levy claims (SBL-Khas Scheme) on behalf of your employer, where applicable;
• To send you information about upcoming courses, events or community activities, where you have consented to receive them;
• To prevent fraud and keep this website, our systems and your data secure;
• To understand how visitors use this website so we can improve it (see section 7); and
• To comply with legal, tax, regulatory and certification-body requirements (including IECEx and HRD Corp).

3. Disclosure of Personal Data

We do not sell your personal data. We may disclose personal data to:

• Companies within the KLAE Group of Companies for the purposes described above;
• Certification and regulatory bodies (e.g. IECEx certification bodies, HRD Corp) where required for your training or certification;
• Billplz Sdn Bhd, our payment gateway, which processes online payments and refunds;
• Service providers who support our operations — email delivery, web hosting, and the analytics providers listed in section 7 — under appropriate confidentiality obligations;
• A rider or courier you send to collect your order, to the extent needed to confirm the collection (we release orders only to a person who quotes the order number and the name on the order); and
• Any party where disclosure is required by law, court order or a governmental authority.

Some of these service providers (including Google, Meta and Microsoft) may process data on servers outside Malaysia. Where this happens, we take reasonable steps to ensure your data receives a level of protection comparable to that required under the PDPA.

4. How We Protect Your Data

We use technical and organisational measures appropriate to the data we hold, including:

• Encrypted connections (HTTPS) across the entire website;
• Online payments handled entirely by our payment gateway, with every payment confirmation cryptographically verified before an order is marked paid;
• Order status pages reachable only through a secure, unguessable link sent to you by email;
• Passwords stored only in hashed form, and limits on repeated login and form attempts to block automated attacks;
• Access to customer and participant records restricted to authorised staff; and
• Collecting only the data we need — for example, keeping just the last four digits of a refund bank account.

No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs that is likely to cause you significant harm, we will notify the Personal Data Protection Commissioner and affected individuals as required under the PDPA.

5. Data Retention

We retain personal data only for as long as necessary for the purposes it was collected for. Invoices and related financial records are kept for seven (7) years to meet Malaysian tax and accounting requirements. Training and certification records may be retained for longer where required by certification schemes. Data no longer needed is deleted or anonymised.

6. Your Rights

Under the PDPA, you have the right to:

• Request access to the personal data we hold about you;
• Request correction of inaccurate, incomplete or outdated personal data;
• Withdraw consent to the processing of your personal data (subject to legal and contractual restrictions);
• Limit the processing of your personal data, including for direct marketing purposes; and
• Request that your personal data be transmitted to another organisation, where this right applies under the PDPA.

To exercise any of these rights, contact us using the details below. We may charge a prescribed fee for access requests as permitted under the PDPA.

7. Cookies and Analytics

This website uses cookies that are strictly necessary for it to function, such as session and security cookies. It also uses the following analytics and advertising tools:

• Google Analytics — measures visits and how pages are used;
• Microsoft Clarity — produces heatmaps and session recordings of how pages are used. Text you type into forms is masked and not recorded; and
• Meta Pixel — measures the effectiveness of our Facebook and Instagram advertising.

These tools set their own cookies and receive technical data such as your IP address, device details and the pages you visit. They are not loaded on your private order status pages. You can block or delete cookies in your browser settings, opt out of Google Analytics with Google's browser add-on, and manage Meta advertising in your Facebook or Instagram ad preferences. Our Contact page also embeds Google Maps, which may set Google's own cookies.

8. Third-Party Links

This website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with the "Last updated" date revised accordingly.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your personal data:

• KLAE PLT — No. 53, Jalan Metro 1/1, Bandar Metro Puchong, 47160 Puchong, Selangor, Malaysia
• Email: sales@KLAE-PLT.com
• Phone: +60 3-8076 7818

Notis Bahasa Malaysia (Ringkasan)

Selaras dengan Seksyen 7 Akta Perlindungan Data Peribadi 2010, notis ini turut disediakan dalam Bahasa Malaysia. KLAE PLT mengumpul dan memproses data peribadi anda (seperti nama, maklumat hubungan, maklumat syarikat, rekod latihan dan rekod pembelian) bagi tujuan pendaftaran kursus, pensijilan, Portal Pembelajaran, pemprosesan pembayaran dan pengambilan pesanan, tuntutan levi HRD Corp dan komunikasi berkaitan perkhidmatan kami. Pembayaran dalam talian diproses oleh Billplz; kami tidak menyimpan maklumat kad atau perbankan dalam talian anda. Laman web ini menggunakan Google Analytics, Microsoft Clarity dan Meta Pixel untuk analisis dan pengiklanan. Anda berhak untuk mengakses dan membetulkan data peribadi anda, serta menarik balik persetujuan anda, dengan menghubungi kami di sales@KLAE-PLT.com atau +60 3-8076 7818.