DataWorks Sdn Bhd ("we", "us", or "our") is committed to protecting the
privacy and security of your personal data. This Data Protection Policy
("Policy") explains how we collect, use, disclose, and care for your
personal data in accordance with the Brunei Personal Data Protection
Order 2025 ("PDPO").
1. The Personal Data We Collect
"Personal Data" refers to any data about an individual who can be
identified from that data. We may collect the following types of
personal data from you:
Identity data: Full Name, Work Position, Organisation
Name
Financial data: Billing details and payment records
(e.g. bank transfer details) for programme fees and refunds.
Contact data: Work Email Address, Personal Phone
Number, Work Phone Number
Transaction data: Programmes registered for,
attendance records, feedback and assessment responses, and
certificates issued.
Visual/Audio data: Photos and videos taken during our
training programmes, seminars and events
2. Protected Individuals (Minors and Vulnerable Groups)
In accordance with the PDPO 2025, we exercise extra care when processing
the data of "Protected Individuals," which includes children (minors)
and individuals who may lack the legal capacity to provide consent.
We do not knowingly collect personal data from children under the age
of 18 without verifiable parental or legal guardian consent.
Consent for processing of a Protected Individual’s data is obtained
from the parent or legal guardian at the point of registration for our
programmes or events.
3. How We Collect Your Data
We collect data through various channels:
Direct Interactions: We may collect personal data
directly from you when you communicate with us through email,
WhatsApp, or other communication channels, including when you make an
enquiry, request information, register for our services or training
programmes, or communicate with us regarding our services.
Online Forms and Surveys: We may collect personal
data when you complete registration forms, feedback forms, surveys, or
other forms provided by us in connection with our services and
training programmes.
Events and Training Activities: We may collect
personal data when you participate in our training programmes,
seminars, events, or other activities organised or supported by us,
including photographs and video recordings taken during these
activities.
From Your Organisation or Third Parties: We may
receive your personal data from your employer, organisation or our
training partners when they nominate or register you for our
programmes or events.
4. Purpose of Processing
We process your personal data for the following purposes (as may be
applicable):
Service Provision: To fulfil our obligations to you,
including providing consultancy and training services, administering
registrations, and processing payments.
Enquiries and Communications: To respond to your
enquiries, requests, feedback, or other communications relating to our
services.
Keeping You Informed: To keep you informed of
relevant services, training programmes, events, updates, and other
information that may be of interest to you, only where you have given
your express (opt-in) consent. We will also use your contact details
to respond to your enquiries or feedback.
Quality and Training Records: To evaluate and improve
our programmes using your feedback and assessment responses, record
attendance, and issue certificates.
Event Documentation and Publicity: To document our
programmes and events, and to use photographs and videos in our
reports, website and social media, only where you have given your
consent.
Compliance: To comply with legal and regulatory
requirements in Brunei Darussalam, such as those of AITI.
5. Disclosure to Third Parties
We do not sell your personal data. However, we may disclose your
personal data to:
Our Staff: Our employees, directors and authorised
staff, on a need-to-know basis, to provide our services and carry out
our work.
Your Employer or Sponsoring Organisation: Attendance
records, assessment results and certificates for programmes they have
nominated or registered you for.
Trainers and Training Partners: Associate trainers,
facilitators and training partners who deliver our programmes, for
that purpose only.
Data Processors: Service providers who handle data on
our behalf (e.g. email and cloud hosting, online form and
video-conferencing platforms, and payment processing).
Public Agencies or Regulatory Authorities: Such as
AITI, when required by the laws of Brunei Darussalam.
6. Transfer of Data Outside Brunei Darussalam
If we transfer your personal data to a country or territory outside of
Brunei Darussalam, we will obtain your consent and we will ensure that
it is protected to a standard of protection that is comparable to the
protection under the Brunei PDPO. Our cloud hosting service provider and
our email, cloud storage, online form and video-conferencing services
may be hosted on servers outside Brunei Darussalam.
7. Care and Security of Your Data
Protection: We protect personal data in our
possession or under our control by making reasonable security
arrangements to prevent loss, unauthorised access, collection, use,
disclosure, copying, modification, disposal, or similar risks.
Physical files are kept in locked cabinets. Digital data is stored on
password-protected computers and software, with appropriate security
measures such as malware protection, secure networks, multi-factor
authentication, and access limited to authorised staff on a
need-to-know basis.
Accuracy: We take reasonable steps to ensure that
personal data we collect is accurate and complete where it is likely
to be used or disclosed. Where you provide your personal data directly
to us, we may rely on the information provided by you. Please notify
our DPO if your personal data changes or if you become aware that the
information we hold is incorrect.
Retention: We will keep your personal data only for
as long as it is necessary for the purposes for which it was
collected, or where we are required to keep it for legal or business
purposes. We retain financial records for seven (7) years, and
training records (registration, attendance, assessment results and
certificates) for seven (7) years after the programme ends. When
personal data is no longer required, we will securely delete, destroy,
or otherwise dispose of it in an appropriate manner.
8. Data Breach Notification
We shall notify you in accordance with the PDPO in the event of a data
breach affecting your personal data which may cause significant harm.
9. Your Rights
Access: You may request to see what data we hold
about you and how it has been used or disclosed in the past year.
Correction: You may request to fix errors or
omissions in your data. We will respond to access and correction
requests within thirty (30) days.
Withdrawal of Consent: You may withdraw your consent
for us to use your data at any time by giving us ten (10) days'
written notice to our DPO clearly stating your name, contact details,
the specific personal data involved, and activity/purpose for which
you are withdrawing consent. Note that this may result in us being
unable to continue providing certain services to you.
10. Contacting Our Data Protection Officer (DPO)
If you have any questions, feedback, or wish to exercise your rights,
please contact our appointed DPO:
Attn: Data Protection Officer, By Post:
DataWorks Sdn Bhd
Unit no 10, 2nd Floor, Block C, Madang Cove,
Lot 58178, Kg Madang, Mukim Berakas,
Bandar Seri Begawan, BC3715, Negara Brunei Darussalam. By Email:enquires@dataworks-bn.com By Phone:+673 7420003
11. Updates To This Data Protection Policy
We may update this Data Protection Policy from time to time. Please
periodically review this Policy to stay informed on how we are
protecting your information. The latest version is published on our
website www.dataworks-bn.com.
In case there are inconsistencies on how we collect or use your personal
data between this Data Protection Policy and the terms and conditions of
your specific product or service or other contractual documents, the
terms and conditions of your specific product or service or other
contractual documents shall prevail.
Date Issued: 6 October 2026 / Last Updated: 6 October 2026
Contact Us
Address
Unit 10, 3rd Floor, Block C, Madang Cove, Jln Madang, Kg Madang,
Mukim Berakas B, Bandar Seri Begawan, BC3715, Brunei Darussalam.
