Xpress Point Management Services ("we", "us", or "our") respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable laws.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you visit our website or use our HR services, training programmes, career applications, facility bookings, or contact forms.
1. Who We Are
Xpress Point Management Services
- Address: No.6 & 8, Jalan Berkat 12, Taman Malim Jaya, 75250 Melaka
- Phone: 016 772 1113 / 016 772 3555
- Email: hr@xpresspointservices.com
2. Personal Data We Collect
Depending on how you interact with us, we may collect:
- Identity and contact details: name, email address, phone number, IC/identification number, company name, and job position.
- Enquiry and communication data: messages, areas of interest, and correspondence submitted through our contact forms.
- Programme registration data: billing address, billing contact number, payment method preference, vehicle type and plate number (where required for venue access), dietary preferences, allergies, and how you heard about us.
- Job application data: resume/CV, cover letter, employment history, education, and other information you voluntarily submit for recruitment.
- Facility booking data: booking dates, times, purpose of use, and related contact details.
- Technical data: IP address, browser type, device information, pages visited, and similar usage information automatically collected when you use our website.
3. How We Collect Your Data
- Directly from you when you fill in forms, register for programmes, apply for jobs, book facilities, or contact us.
- From server logs when you browse our website, and from cookies or browser local storage only where our Cookie Policy says so. Most public pages do not set a cookie.
- From third parties where permitted by law (for example, referees you provide for recruitment).
4. Purpose of Processing
We process personal data to:
- Respond to enquiries and provide HR consulting, training, and related services.
- Administer programme registrations, payments coordination, and event logistics.
- Process job applications and manage recruitment.
- Manage facility bookings and related operational arrangements.
- Send service-related notices, confirmations, and updates.
- Send marketing and promotional communications about our services, training programmes, events, and offers, where you have asked us to contact you or where the law allows it. You can opt out at any time by contacting hr@xpresspointservices.com.
- Improve website performance, security, and user experience.
- Comply with legal, regulatory, and audit obligations.
- Protect our rights, prevent fraud, and maintain the integrity of our systems.
5. Legal Basis / Consent
By submitting personal data through our website or services, you consent to the collection and processing of that data for the purposes stated in this Policy. Where required, we may also process data to perform a contract with you, comply with legal obligations, or pursue legitimate business interests that do not override your rights.
6. Disclosure of Personal Data
We do not sell your personal data. We may share it only where necessary with:
- Our authorized staff and service providers who support website hosting, email delivery, IT, or administrative operations under confidentiality obligations.
- Trainers, venue operators, or partners involved in delivering a programme or booking you requested.
- Government authorities, regulators, or law enforcement when required by law.
- Professional advisers such as auditors or lawyers, where appropriate.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Job applications, programme registrations, bookings, and contact records may be retained for operational follow-up and compliance, then securely deleted or anonymized when no longer needed.
8. Data Security
We take reasonable technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. No method of transmission over the internet is completely secure; if you believe your data has been compromised, please contact us immediately.
9. Your Rights
Subject to applicable law, you may request to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete personal data.
- Withdraw consent where processing is based on consent (this may affect our ability to provide certain services).
- Limit or object to certain processing, where applicable.
- Request deletion of personal data where retention is no longer necessary or required by law.
To exercise these rights, contact us at hr@xpresspointservices.com or the address above. We may need to verify your identity before responding.
10. Cookies
We do not use cookies for marketing or promotion. Cookies and browser local storage are used only as described in our Cookie Policy.
11. Third-Party Links
Our website may contain links to third-party sites (for example LinkedIn, Facebook, Instagram, or WhatsApp). We are not responsible for the privacy practices of those sites. Please review their policies separately.
12. Children's Privacy
Our services are directed to businesses and adult professionals. We do not knowingly collect personal data from children without appropriate parental or guardian consent.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the latest revision. Continued use of our website or services after changes constitutes acceptance of the updated Policy.
14. Contact Us
If you have questions about this Privacy Policy or how we handle personal data, please contact:
- Email: hr@xpresspointservices.com
- Phone: 016 772 1113 / 016 772 355
- Address: No.6 & 8, Jalan Berkat 12, Taman Malim Jaya, 75250 Melaka