Privacy Notice

We collect personal data about you in various ways, such as through our Sites, social media channels, at events, via phone or fax, through job applications and in-person recruitment, and in connection with our interactions with clients and vendors. The personal data we may collect (as permitted under local law) includes:

• Contact information (e.g., name, postal address, email address, telephone number)
• Username and password when you register on our Sites
• Information you provide about friends or others you would like us to contact (upon confirming their consent)
• Other information you may provide to us (e.g., via surveys or “Contact Us” forms)

If you are an associate or job candidate, or apply for a position, we may also collect:

• Employment and education history
• Language proficiencies and work-related skills
• Government-issued identification numbers (e.g., NRIC)
• Date of birth and gender
• Bank account information
• Citizenship and work authorization status
• Benefits and tax-related information
• Information provided by references
• Information contained in your resume or CV and details about your career interests and qualifications

Where required by applicable law and with your explicit consent, we may collect:

• Disabilities and health-related information
• Results of drug tests, criminal or other background checks

We may also collect information about other individuals (e.g., emergency contacts) you provide to us, acknowledging that you have obtained their consent to do so.

The Data Controller may use the personal data (as permitted under local law) for the following purposes:

• Providing workforce solutions and connecting individuals to employment opportunities
• Creating and managing online accounts
• Processing payments
• Managing business partner, client, and vendor relationships
• Sending promotional materials, job alerts, and other communications (where permitted by law)
• Administering participation in events, promotions, programs, offers, surveys, contests, and market research (where permitted by law)
• Responding to inquiries and claims
• Operating, evaluating, and improving our business, including data analytics, communications management, and internal functions such as accounting and auditing
• Protecting against, identifying, and preventing fraud and other unlawful activities
• Complying with and enforcing applicable legal requirements, contractual obligations, and our policies

If you are an associate or job candidate, these purposes include:

• Providing job placement, outplacement, and career transition services
• Offering HR services such as payroll, benefits administration, performance management, and training
• Assessing your qualifications for positions
• Performing data analytics related to workforce trends, skill sets, and employment opportunities

We may also use your information for other purposes disclosed to you at the time of collection or with your consent.

When you visit our Sites, we may collect information by automated means using technologies such as cookies, web beacons, and server logs. This may include IP addresses, browser characteristics, device IDs, operating systems, language preferences, referring URLs, actions on our Sites, and times of visits. We use these automated means to:

• Customize user experiences on our Sites
• Deliver content tailored to user interests
• Manage and improve our Sites and business operations

Your browser settings may allow you to limit or disable certain cookies. However, some features of our Sites may not function without them.

Third-party analytics services may also use automated means to collect data regarding your use of our Sites, subject to their privacy policies. CXS Analytics Sdn Bhd is not responsible for these third-party practices. Where required by law, we will seek your consent before using cookies or similar technologies.

The Data Controller may process your personal data for legitimate business purposes, such as improving our services, preventing fraud, enhancing security, understanding site usage, direct marketing, and evaluating the effectiveness of promotional campaigns. You have the right to object to such processing, and we will consider your rights whenever we process data for legitimate interests.

We process personal data for only as long as necessary to fulfill the purposes described above, consistent with our data retention policies and applicable laws. We maintain administrative, technical, and physical safeguards to protect personal data against unauthorized access, alteration, disclosure, or misuse. Security measures may include encryption of data in transit, strong user authentication, and network monitoring solutions.

We retain personal data as long as needed for the purposes for which it was collected or as required by law. Criteria for determining retention periods include:

• Legal, regulatory, or contractual requirements
• Necessity for business operations and provision of services
• Legitimate interests of the Data Controller (as described above)

We do not disclose personal data except as described in this Privacy Notice or as permitted by law. We may share personal data with:

• Vendors performing services on our behalf (under instructions and for authorized purposes)
• Our subsidiaries and affiliates
• Clients (if you are a job candidate) to evaluate and consider employment opportunities
• Business partners, placement consultants, and subcontractors to assist in finding work opportunities

We may also disclose personal data:

• To comply with legal obligations or requests by authorities
• To prevent physical harm or financial loss, or investigate suspected illegal activity
• In connection with a sale or transfer of our business or assets (including reorganizations, dissolutions, or liquidations)

Your personal data may be transferred outside of Malaysia, subject to appropriate safeguards and in compliance with applicable laws. By providing personal data, you consent to these transfers and processing in accordance with this Privacy Notice.

YOUR RIGHTS

Subject to applicable local law (including the PDPA), you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your data
• Request restrictions on data processing
• Object to data processing for specific reasons
• Withdraw consent previously given

To exercise these rights, please contact us using the contact information provided below. Please note that withdrawing consent or objecting to certain processing activities may affect our ability to provide certain services to you.

UPDATES TO OUR PRIVACY NOTICE

We may update this Privacy Notice periodically to reflect changes in our practices and legal requirements. For significant changes, we will post a prominent notice on our Sites indicating when it was most recently updated.

HOW TO CONTACT US

If you have any questions or comments about this Privacy Notice, or if you would like to exercise your rights, please contact:

CXS Analytics Sdn Bhd
A-37-7&8 Menara UOA Bangsar
5 Jalan Bangsar Utama 1, 59000 Kuala Lumpur
Attn: Data Protection Officer
Email: [email protected]

If you are located in Malaysia and have further questions, you may contact the Data Protection Officer at the above address or email for assistance in exercising your rights under the PDPA.

Subject to applicable local law (including the PDPA), you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your data
• Request restrictions on data processing
• Object to data processing for specific reasons
• Withdraw consent previously given

To exercise these rights, please contact us using the contact information provided below. Please note that withdrawing consent or objecting to certain processing activities may affect our ability to provide certain services to you.

We may update this Privacy Notice periodically to reflect changes in our practices and legal requirements. For significant changes, we will post a prominent notice on our Sites indicating when it was most recently updated.