DataWorks Sdn Bhd Data Protection Policy

DataWorks Sdn Bhd (“Company” or “we”) collects, uses, discloses, processes and cares for (collectively, “processes”) personal data in accordance with the Personal Data Protection Order 2025 (“PDPO”). This Data Protection Policy (“Policy”) explains how we process personal data while meeting the requirements of the PDPO.

Contact Information

Queries, requests for access to or correction of personal data, notices (e.g., for withdrawal of consent), and complaints relating to your personal data may be sent in writing to us in the following manner:

By Post:
The Data Protection Officer
DataWorks Sdn Bhd
Unit no 10, 2nd Floor, Block C, Madang Cove,
Lot 58178, Kg Madang, Mukim Berakas,
Bandar Seri Begawan, BC3715, Negara Brunei Darussalam.

Via Email: enquires@dataworks-bn.com

How We Collect Personal Data

The term “personal data” refers to information about an identifiable individual.

We may collect personal data under the following circumstances:

• Enrollment in our trainings
• Engaging with our consultancy services
• Engaging with our assessments
• Participation in our events and exhibitions

Types of personal data we may collect include:

• Full name, NRIC information, position
• Employee details
• Contact Information
• Findings from assessments and consultancy
• Survey responses from consultancy services
• Legal and compliance documentation
• Feedbacks or evaluations from training and consultancy
• Videos and photos
• Emergency contact information

Why We Collect, Use, and Disclose Your Personal Data

Purposes:

• Coordination of training, evaluation, reporting, and development tracking
• Administrative purposes
• Effective delivery of consultancy services

We may disclose your data to our partner: Drew & Napier

Consent and Withdrawal of Consent

We may collect, use, and disclose personal data with your consent or where required by law. You may withdraw your consent by giving thirty (30) days written notice with the following details:

• Full name
• Address, telephone number, or email
• Data affected by the withdrawal
• Activities or purposes from which consent is withdrawn

Access to and Correction of Personal Data

You may request access to or correction of your personal data. Requests must include:

• Full name
• Contact details
• Statement that request is made under PDPO
• Access or correction details

Care of Personal Data

Accuracy

We ensure data is accurate if it affects decisions or will be disclosed. Direct submissions are assumed accurate.

Protection and Breach Notification

We implement reasonable security measures and will notify you of any significant data breach in accordance with PDPO.

Retention

Data is retained as long as necessary for business and legal purposes.

Transfer Outside Singapore

Transfers will only occur if the recipient country offers comparable protection under the PDPO.

Amendments

This policy may be amended from time to time. Please refer to dataworks.com for the latest version.

Date Issued: 19 May 2025 / Last Updated: 19 May 2025