Privacy Notice

1. Scope and our commitment

This notice applies to visitors to our website and to individuals whose information we process in connection with enquiries, recruitment, onboarding, payroll, HR advisory, work permit, employee engagement, employer-of-record and related HR services.

If you interact with us for a company or other organisation, this notice also covers relevant individuals such as directors, authorised representatives, employees, candidates, beneficial owners, guarantors and business contacts. We aim to process personal information fairly, securely and only for legitimate business and service purposes.

2. Personal information we may collect

• Identity and contact details, including name, identification or passport details, date of birth, nationality, address, telephone number and email address.
• Employment, recruitment and workforce information, including qualifications, work history, references, salary, attendance, leave, performance, benefits and statutory registration information.
• Organisation and account information, including company details, authorised users, service selections, correspondence and contractual records.
• Financial and transactional information required for payroll, claims, invoicing, statutory contributions or service administration.
• Technical and usage information such as IP address, browser or device data, pages viewed, cookies, enquiry records and activity logs.
• Any other information you voluntarily provide through forms, calls, email, meetings, surveys or service interactions.

3. How we collect information

We may obtain information directly from you, from the organisation that engages us, from candidates or employees, from authorised representatives, public records, referees, professional advisers, recruitment platforms, service providers and government or statutory bodies where permitted by law.

4. How we use personal information

• To respond to enquiries, assess service needs and prepare proposals or agreements.
• To deliver and administer recruitment, HR, payroll, compliance, immigration, advisory and employer services.
• To verify identity, eligibility, credentials and submitted information.
• To manage accounts, payments, claims, statutory submissions, audits, security and service records.
• To communicate service updates, respond to complaints and improve our website, systems and client experience.
• To prevent fraud, protect legal rights and comply with lawful requests, regulatory obligations and applicable Malaysian law.
• To send relevant service or marketing communications where permitted. You may opt out of marketing communications at any time.

5. Disclosure and service providers

We may disclose information on a need-to-know basis to our employees, affiliates, professional advisers and trusted service providers, as well as payroll or banking partners, insurers, technology providers, background-screening providers and government or statutory authorities. Depending on the service, these authorities may include EPF, PERKESO/SOCSO, EIS, HRD Corp, LHDN, immigration and labour authorities.

We may also disclose information where you have authorised us to do so, where it is necessary to provide a requested service, in connection with a business transfer, or where disclosure is required or permitted by law. We do not sell personal information.

6. International transfers

Some technology providers or service partners may process information outside Malaysia. Where an overseas transfer is necessary, we take reasonable steps to require appropriate safeguards and to handle the transfer in accordance with applicable law.

7. Security and retention

We use reasonable administrative, organisational and technical measures designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure. Access is limited to people who need the information for their work or the service provided.

We retain information only for as long as reasonably necessary for the purposes described in this notice, to meet contractual or statutory requirements, to resolve disputes and to enforce our rights. Information that is no longer required is securely deleted, destroyed or anonymised where practicable.

8. Your choices and rights

Subject to applicable law and permitted exceptions, you may ask to access or correct personal information held by us, withdraw consent, object to certain processing, request deletion or restriction, or exercise other available data-subject rights. We may need to verify your identity before completing a request.

You are responsible for keeping information supplied to us accurate and current. If you provide information about another person, you confirm that you are authorised to do so and have provided any required notice or obtained any required consent.

9. Cookies and third-party sites

Our website may use cookies or similar technologies to remember preferences, understand site usage and improve performance. Browser settings can be used to block or delete cookies, although some features may then work differently.

Links to third-party sites are provided for convenience. Their collection and use of information are governed by their own privacy notices, and APPR is not responsible for their content or privacy practices.

10. Changes to this notice

We may update this notice to reflect changes in law, our services or our data-handling practices. The latest version and revision date will be published on this page.