Privacy Policy

1 Who We Are

This Privacy Policy applies to MAHA Training & Consultancy (referred to as "MAHA", "we", "us", or "our"), an HRD Corp Accredited Training Provider registered in Malaysia (TP Reg 202303013091).

We are committed to protecting your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and its seven Data Protection Principles.

2 Personal Data We Collect

We collect personal data that you provide directly to us through our registration form, email, or other communications. This includes:

• Full name
• Work email address
• Phone / WhatsApp number
• Company name and job role
• Programme preferences and enquiry details

We do not collect sensitive personal data (e.g. IC/passport numbers, financial account details) unless required for HRDC claim processing, in which case separate consent will be obtained.

3 Why We Collect Your Data

Your personal data is collected and processed for the following purposes:

• To respond to your programme enquiry
• To process your registration for the LEAP Framework programme
• To communicate programme details, schedules, and updates
• To assist with HRD Corp ELEVATE 2026 claim applications
• To send relevant training resources and post-programme support
• To improve our services and programme offerings

4 Legal Basis for Processing

We process your personal data based on your express consent, which you provide by ticking the consent checkbox on our registration form. You have the right to withdraw this consent at any time by contacting us (see Section 9).

In some cases, processing may also be necessary to fulfil our contractual obligations to you (e.g. delivering the programme you have registered for).

5 How We Store Your Data

Your personal data is stored securely using industry-standard practices. We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, misuse, or disclosure.

We retain your personal data for as long as necessary to fulfil the purposes stated in this policy, or as required by Malaysian law, after which it will be securely deleted or anonymised.

6 Sharing Your Data

We do not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

• With HRD Corp / HRDC for the purpose of training grant applications, where you have requested our assistance
• With our service providers (e.g. email platforms, Zoom) who process data on our behalf under strict confidentiality
• Where required by Malaysian law or regulation

7 Cookies & Website Data

Our website (mahatraining.com.my) may use basic analytics to understand visitor behaviour (e.g. page views, referral sources). We do not use tracking cookies for advertising purposes.

You may disable cookies in your browser settings at any time without affecting your ability to use our registration form.

8 Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights:

• Right of Access — request a copy of the personal data we hold about you
• Right of Correction — request correction of inaccurate or incomplete data
• Right to Withdraw Consent — withdraw your consent to processing at any time
• Right to Limit Processing — request that we limit how we use your data

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 9.

10 Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

Continued use of our services after changes are posted constitutes your acceptance of the updated policy.