Personal Data Protection Notice

1. Who is responsible for your data

WONG WAI KEUN (registration no. 202503136795 (003732323-X)) operates the Kny Wong Facilitator Portal and is the data controller for the personal data described in this notice.

Address: NO. 9-2, JALAN SIERRA 12/3, SIERRA 12, BANDAR 16 SIERRA, 47120 PUCHONG, SELANGOR
Privacy contact: trainer@knywong.com

2. Data we collect

We collect account details, contact details, professional profile information, application and assignment records, communications, profile photographs, payment information when payment setup is needed, and technical or audit records needed to secure and operate the portal.

NRIC or passport details are collected separately only when required for an HRD Corp or Training Provider submission, or for a confirmed travel booking. We do not use identity details to assess facilitator applications.

3. Where the data comes from

Most data is provided directly by you. We also create records when you use the portal, apply for or accept training work, communicate with operations, submit a claim or invoice, or when an authorised administrator manages an assignment.

4. Why we use it

We use personal data to create and secure accounts, review facilitator applications, match and coordinate training work, communicate operational updates, administer HRD Corp or Training Provider requirements, arrange confirmed travel, process payments and claims, maintain accurate records, investigate problems, and meet legal or regulatory obligations.

Your name, professional introduction, expertise, delivery languages, training categories, certifications and a web-sized profile photograph will be published only if you separately choose public profile publication. Contact, payment and identity details are never public profile fields. Operational messages are not marketing messages.

5. Required and optional information

Email verification, the current Privacy Notice acknowledgement, and the required professional profile fields are necessary to use the facilitator portal. If you do not provide them, we cannot assess or maintain your facilitator membership. Bank details are only required when a payment needs to be made. Identity details are only required when the stated submission or travel purpose applies. Public profile publication is optional.

6. Who may receive it

Access is limited according to work need. Authorised operations staff may access the records needed to run programmes. Confirmed clients, Training Providers, travel providers or authorities receive only the information needed for the relevant assignment, submission, booking or legal duty. Facilitators see their own fee and necessary team information, not internal financial totals or other people's fees.

Technology providers supporting the portal include Google Firebase for authentication, database and file storage, Vercel for hosting and server processing, and Resend and recipient email providers for transactional email. WhatsApp and Google Calendar are used only for stated operational or user-initiated actions.

7. Storage, security and transfers

We apply role-based access, verified accounts, restricted file storage, audit records and data minimisation. Service providers may process data outside Malaysia under their service arrangements. We review the safeguards and disclose the relevant provider categories instead of claiming that all data remains in Malaysia.

8. Retention

We keep data only while it is needed for the stated purpose, the active facilitator relationship, payment or contractual records, dispute handling, security evidence, and applicable legal or regulatory requirements. Unverified or abandoned accounts are scheduled for early deletion. Identity and travel records are reviewed and removed when their specific purpose and required evidence period end.

9. Your choices and rights

You may request access to or correction of your personal data, withdraw an optional choice such as public profile publication, and ask about deletion or restriction where applicable. Withdrawal does not affect processing already carried out and may mean we cannot continue a service that needs the data.

Contact trainer@knywong.com. We may need to verify your identity before fulfilling a privacy request.

10. Changes to this notice

We record the notice version you acknowledged. A material change to the data, purpose or disclosure will create a new version and require a new acknowledgement or choice where appropriate. Minor wording corrections will not trigger unnecessary re-acknowledgement.