Privacy Policy

1. Who we are

This website, www.rqc.edu.my, is operated by RQC Management Sdn. Bhd. (Company No. 893389-U), No. 53-2, Jalan Anggerik Vanilla T31/T, Kota Kemuning, 40460 Shah Alam, Selangor, Malaysia ("RQC", "we", "us"). We are a training and consultancy provider and the party responsible for the personal data described in this policy, in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

2. Personal data we collect

Data you give us directly

• Enquiry and program registration forms: full name, contact number, email address, company name, position, type of enquiry, how you found us, your message, and any CV or supporting document you choose to attach.
• Feedback forms: your name (if provided), course ratings, comments, and optional email and mobile number.
• WhatsApp, phone and email: your number or email address, profile name, the content of your messages and any files you send us.

Data collected automatically when you visit

• IP address, approximate location, device and browser type, language, referring website, pages viewed, time on page, and clicks or scrolling behaviour.
• Identifiers stored through cookies and similar technologies (see section 6).

You are not required to give us your personal data, but we may not be able to reply to your enquiry or register you for a program without it.

3. How we use your data

• To respond to enquiries, send quotations and proposals, and confirm program registrations.
• To organise and deliver training, issue attendance records and certificates, and, where you or your employer use HRD Corp or PERKESO schemes, to support the related claim or application.
• To collect and analyse course feedback and improve our programs.
• To keep in touch about upcoming sessions and offers you have asked about. You can opt out of marketing messages at any time.
• To understand how the website is used, fix issues and keep it secure.
• To measure and improve our advertising on Google, Meta and other platforms, including showing relevant ads to people who have visited our site.
• To meet legal, accounting and regulatory obligations.

4. Consent and legal basis

We process your personal data with your consent, which you give when you submit a form on this website, message us on WhatsApp, or accept the use of cookies. We may also process data where it is necessary to perform a contract with you or your employer, or where the law requires it. You can withdraw your consent at any time (see section 11); withdrawal does not affect processing already carried out.

5. WhatsApp and phone communication

If you contact us through the WhatsApp links on this website, your messages are handled by WhatsApp (Meta) under its own terms and privacy policy, and are received by our staff on our business number. We use the details you share only to answer you and to follow up on your enquiry or registration. Please avoid sending sensitive information such as identity card numbers, bank details or passwords over WhatsApp unless we have specifically asked for it for a registration or claim. Phone calls are not recorded unless we tell you so.

6. Cookies, analytics and advertising

Cookies are small files placed on your device. We and our partners also use similar technologies such as tracking tags and pixels. We use them for the following purposes:

How to opt out or control these tools

• Browser settings: block or delete cookies through your browser settings. Some parts of the site may work less smoothly as a result.
• Google: manage personalised ads at adssettings.google.com and install the Google Analytics opt-out add-on.
• Meta: manage ad preferences at facebook.com/adpreferences.
• Microsoft: see the Microsoft Privacy Statement for Clarity controls.
• You can also visit youronlinechoices.com or optout.aboutads.info to opt out of interest-based advertising from many providers at once.

Google uses cookies, including the DoubleClick cookie, to serve ads based on your visits to this and other websites. Third-party vendors, including Google, show our ads on sites across the internet.

7. Who we share data with

We do not sell your personal data. We share it only with:

• Our staff, trainers and consultants who need it to handle your enquiry or deliver your training.
• Service providers such as website hosting, email and messaging providers, and the analytics and advertising platforms listed in section 6, who process data on our behalf.
• HRD Corp, PERKESO and other government or regulatory bodies where needed to process a claim, application or compliance requirement related to your training.
• Professional advisers, auditors or authorities where required by law or to protect our legal rights.

If RQC is ever restructured or sold, personal data may be transferred to the new owner, who must continue to protect it under this policy.

8. Transfers outside Malaysia

Some of the providers above (for example Google, Microsoft, Meta and WhatsApp) store or process data on servers outside Malaysia. By using this website and submitting your details you consent to such transfers. We take reasonable steps to ensure these providers protect your data.

9. How long we keep data

We keep personal data only as long as needed for the purposes in this policy and to meet legal, tax, audit and HRD Corp record-keeping requirements. As a guide, enquiries that do not lead to a booking are kept for up to 2 years, and training and claim records are kept for the period required by the relevant scheme or law, usually up to 7 years. After that we delete or anonymise the data. Analytics and advertising data is kept according to the settings of each provider.

10. Security

We use reasonable technical and organisational measures to protect your data, including access controls on our administration system, password protection and secure (HTTPS) connections. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. If a data breach is likely to cause you significant harm, we will notify you and the authorities as required by law.

11. Your rights

Under the PDPA you may:

• request access to the personal data we hold about you;
• ask us to correct data that is inaccurate, incomplete or out of date;
• withdraw your consent, or ask us to stop using your data for marketing or limit how we process it;
• ask us to delete your data where we no longer need it.

To make a request, email info@rqc.edu.my or call 03-5131 6131. We may need to verify your identity first, and we aim to respond within 21 days. If you are unhappy with how we handle your data, please contact us first; you may also contact the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi) Malaysia.

12. Children

Our website and programs are intended for working adults and organisations. We do not knowingly collect personal data from anyone under 18 without parental or guardian consent. If you believe a child has given us data, please contact us and we will delete it.

13. Links to other websites

This website links to other sites such as WhatsApp, YouTube, Facebook and Google. We are not responsible for their content or privacy practices, so please read their policies.

14. Changes to this policy

We review this policy from time to time, including when we add new advertising or analytics partners or when the law changes. The "Last updated" date at the top of this page shows when it was last revised. Please check back occasionally. Continued use of the website after an update means you accept the revised policy.

15. Contact us

For questions about this policy or to exercise your rights: