This Data Protection Notice (“Notice”) sets out how Warfa Sdn Bhd (“we”, “us”, or “our”) collects, uses, discloses, and processes personal data in accordance with the Personal Data Protection Act 2010 of Malaysia (PDPA). This Notice applies to personal data in our possession or under our control, including personal data held by service providers we have appointed to process data on our behalf.

​

1. Definition of Personal Data

For the purposes of this Notice:

• “Customer” refers to any individual who has contacted us, made an enquiry, or engaged with us regarding any of our products, services, or training programmes.

• “Personal data” means any information that relates directly or indirectly to an individual who is identified or identifiable from that information or from that and other information in our possession.

Depending on the nature of your interaction with us, personal data collected may include your name, NRIC/passport number, contact details, residential address, date of birth, gender, email, occupation, employer name, photographs, and financial or billing information.

​

2. Collection and Use of Personal Data

We only collect personal data from you or your authorised representative when:

• You provide it voluntarily (e.g., registration, contact forms, surveys); or

• It is required or permitted under Malaysian law.

We may collect and use your personal data for the following purposes:

• To deliver and administer our products, services, and training programmes

• To verify your identity

• To manage and communicate with you regarding your account or service usage

• To process payments and invoices

• To respond to inquiries, complaints, or feedback

• To comply with regulatory, legal, and statutory requirements

• For internal administrative, business, or operational purposes

• To engage third parties (including certification or training partners, government agencies, etc.) in connection with any of the above

​

3. Disclosure of Personal Data

We may disclose your personal data to:

• Our employees and authorised representatives

• Service providers or business partners involved in delivering our services

• Certification bodies and training affiliates (e.g., TÜV SÜD, SEGi, UTM Space)

• Government authorities or regulators, where required

All parties are bound by strict confidentiality and data protection obligations.

​

4. Consent

By providing your personal data to us, you consent to the collection, use, and disclosure of your data for the purposes stated in this Notice. If you provide personal data on behalf of another individual (e.g., a dependent), you represent that you have their consent to do so.

​

5. Withdrawing Consent

You may withdraw your consent at any time by contacting us in writing at the details below. Upon receiving your request, we may inform you of the potential consequences (e.g., our inability to continue providing certain services). Withdrawal does not affect our right to retain data where required under law.

​

6. Access and Correction Requests

You may submit a written request to access or correct your personal data by contacting our Data Protection Officer. A processing fee may apply for access requests. We will respond within 21 days as required under Malaysian PDPA regulations.

​

7. Security of Personal Data

We implement reasonable administrative, technical, and physical safeguards to protect your personal data from unauthorised access, misuse, loss, or disclosure. However, no data transmission over the Internet is 100% secure.

​

8. Accuracy and Updates

You are responsible for ensuring that the personal data you provide is accurate and up to date. Please inform us of any changes to your information.

​

9. Retention

We retain personal data for as long as necessary to fulfil the purposes outlined above or as required by law. When data is no longer needed, we will securely delete or anonymise it.

​

10. Transfers Outside Malaysia

If your personal data needs to be transferred outside Malaysia, we will obtain your consent and ensure appropriate protection consistent with Malaysian data protection laws.

​

11. Contact Us

If you have questions about this Notice or wish to submit a request, please contact:

 

Data Protection Officer

Warfa Sdn Bhd
Phone: +6011 3898 2732
Email: info@warfa.asia

​

12. Changes to This Notice

This Notice may be updated periodically. We encourage you to check our website or contact us for the latest version. Continued use of our services signifies your acceptance of any changes.

​

Effective Date: 03/04/2024
Last Updated: 24/07/2025

​

​

​

​

​