Privacy Policy

Last updated: 01 Aug 2026   |   Effective date: 01 Sep 2026

myindianz (“myindianz”, “we”, “us” or “our”) respects your privacy and is committed to handling personal data responsibly. This Privacy Policy explains how MYINDIANZ ASIA HUB, Company No. 202603226103 (KT0620068-W), operates myindianz.com and related websites, mobile applications, services, job-matching tools, communications and features (collectively, the “Platform”).

This Policy applies when you visit or use the Platform, create an account, upload a résumé or profile, apply for a role, post a job, contact us, or otherwise provide personal data to us.

1. Our role and contact details

For the purposes of the Personal Data Protection Act 2010 of Malaysia (“PDPA”), myindianz is generally the data controller of personal data processed through the Platform.

If we are required to appoint a Data Protection Officer under applicable law, that person’s business contact details will be made available through the Platform or on request.

2. Personal data we collect

We collect personal data that you provide directly, that is generated by your use of the Platform, and that we receive from authorised third parties.

2.1 Candidate and job-seeker data

• Name, email address, telephone number, home city or address, date of birth, nationality, work-authorisation status and account credentials;
• Résumé/CV, cover letters, work history, education, qualifications, skills, salary expectations, work preferences, portfolio links, professional references and application history;
• Profile information, photographs, video or audio content, where you choose to provide them;
• Communications with myindianz, employers, recruiters or customer support;
• Identity-verification information where reasonably necessary to prevent fraud, meet legal requirements, or protect Platform users; and
• Technical, device, cookie, log, IP-address, browser, usage and approximate-location data.

2.2 Employer, recruiter and business-user data

• Name, work email, telephone number, position, employer name, business registration details and billing/contact details;
• Job postings, recruitment activity, candidate interactions, recruitment decisions and communications;
• Account-access, device, log and usage information; and
• Information supplied to verify an employer’s identity, authority, business legitimacy, or compliance with our Terms of Use.

2.3 Sensitive personal data

A résumé may contain sensitive personal data, including health or disability information, religious beliefs, political opinions, information concerning alleged or actual criminal conduct, or other information protected by law. We do not require candidates to include sensitive personal data unless it is necessary for a specific lawful purpose.

Please do not upload NRIC/MyKad copies, passport copies, bank-account details, tax information, medical records, passwords, or other highly sensitive information unless myindianz specifically requests it through a secure process and explains why it is required.

Where we process sensitive personal data, we will seek explicit consent where required and apply additional safeguards appropriate to the nature and risk of the information.

3. Why we use personal data

We process personal data for the following purposes:

1. To create, operate, maintain and secure accounts and the Platform;
2. To enable candidates to create profiles, upload résumés, search roles, apply for jobs and communicate with employers or recruiters;
3. To enable employers and recruiters to post jobs, search or review candidate information where permitted, manage applications and communicate with candidates;
4. To provide matching, search, recommendation and platform-personalisation features;
5. To verify identities, detect fraud, prevent misuse, enforce our Terms of Use, and protect users, our systems and our rights;
6. To respond to enquiries, provide customer support, send service-related communications and administer the Platform;
7. To conduct analytics, testing, research, service improvement and security monitoring, using personal data only to the extent reasonably necessary;
8. To comply with legal, regulatory, tax, audit, accounting, insurance, dispute-resolution and record-keeping obligations;
9. To send marketing communications only where permitted by law and, where required, with your consent; and
10. For any other purpose notified to you at or before collection, or otherwise permitted by applicable law.

We do not sell personal data.

4. Consent, choice and marketing

By creating an account, submitting data, uploading a résumé, or using the Platform, you consent to our processing of your personal data for the purposes described in this Policy and any notice presented to you at collection.

Where consent is required, we will seek it in a clear and recorded manner. You may withdraw consent at any time by contacting us or using available account settings. Withdrawal will not affect processing already carried out lawfully before withdrawal. Withdrawal may mean that we cannot provide some Platform features.

Marketing communications are optional. You may opt out at any time by using the unsubscribe link in the communication, changing your account settings, or contacting us. We may still send essential, non-marketing messages about your account, applications, security, legal notices or the Platform.

5. Sharing and visibility of résumés

5.1 Candidate choices

Your résumé and profile visibility are controlled by the options shown on the Platform. Unless you actively select a broader visibility option, we intend for your résumé to be shared only with employers or recruiters for roles to which you apply, or where you otherwise direct us to share it.

If you choose to make your profile searchable or visible to employers/recruiters, your selected profile information may be viewed by authorised business users of the Platform. You may change your visibility settings or request removal, subject to reasonable processing time and any legal or legitimate retention requirements.

5.2 Recipients

We may disclose personal data to:

• Employers, recruiters and hiring organisations where you apply, direct us to share data, or have chosen a searchable/visible profile setting;
• Companies within our corporate group, if any;
• Service providers that support our Platform, including hosting, cloud-storage, security, communications, analytics, payment, identity-verification, customer-support, legal, audit and professional-service providers;
• Professional advisers, insurers, banks, auditors and regulators;
• Government authorities, law-enforcement bodies, courts or other parties where required or permitted by law, legal process, or to establish, exercise or defend legal rights;
• A buyer, successor, investor, or adviser in connection with a merger, financing, sale, restructuring or transfer of all or part of our business, subject to appropriate confidentiality protections; and
• Any other party with your consent or as separately notified to you.

We require service providers that process personal data on our behalf to process it only for authorised purposes and to implement appropriate security and confidentiality measures.

5.3 Employer responsibility

Once your data is shared with an employer, recruiter, or hiring organisation, that recipient may process it under its own privacy practices and legal obligations. myindianz is not responsible for that recipient’s independent handling of your data. We encourage you to review the recipient’s privacy notice before providing additional information directly to it.

6. International transfers

Our service providers or business partners may process personal data outside Malaysia, including in [list countries or regions where data is hosted/processed, e.g., Singapore, United States, European Economic Area].

When personal data is transferred outside Malaysia, we will take reasonable steps to ensure the transfer is permitted under applicable law. Depending on the circumstances, these steps may include assessing the destination’s level of protection, using appropriate contractual safeguards, conducting due diligence on the recipient, obtaining consent where appropriate, and maintaining relevant transfer records.

We will inform you through this Policy or another written notice where cross-border processing is relevant to your data.

7. Cookies and similar technologies

We use cookies, pixels, local storage and similar technologies to operate the Platform, remember preferences, maintain sessions, improve security, understand usage and, where permitted, measure marketing effectiveness.

You can manage certain cookies through your browser settings or our cookie-preference tool, where available. Disabling some cookies may affect Platform functionality. For further detail, see our Cookie Notice at www.myindianz.com, if applicable.

8. Automated tools and matching

We may use automated tools to organise, search, rank, recommend or match job listings and candidate profiles based on information such as skills, experience, location, preferences, job requirements and Platform activity.

These tools are intended to assist users and do not guarantee any particular recruitment outcome. We will not make a solely automated decision that has a significant legal or similarly significant effect on you unless permitted by law and supported by appropriate safeguards. You may contact us to request information about material automated processing involving your data, where applicable.

9. Security

We use reasonable technical, organisational and physical measures designed to protect personal data from loss, misuse, unauthorised access, disclosure, alteration or destruction. These measures may include encryption in transit and at rest where appropriate, access controls, multi-factor authentication for privileged access, audit logging, secure-development practices, malware scanning, backup controls, staff confidentiality duties and incident-response procedures.

No online service or transmission is completely secure. You are responsible for keeping your password confidential, using secure devices and networks, and notifying us promptly if you suspect unauthorised access to your account.

10. Data retention and deletion

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, to meet legal obligations, resolve disputes, enforce agreements, maintain security, and establish or defend legal claims.

Our general retention approach is:

• Active candidate account and résumé data: retained while your account remains active and for up to 36 months after your last meaningful activity, unless you renew or extend your consent;
• Application and employer-recruitment records: retained forever after the relevant recruitment process ends, subject to legal, audit, anti-fraud and dispute requirements;
• Business-account and transaction records: retained for the period required by applicable law or reasonably necessary for business records; and
• Security and system logs: retained for [period], unless a longer period is needed to investigate an incident or comply with law.

When personal data is no longer required, we will delete, anonymise, aggregate, or securely dispose of it. Some information may remain in backups for a limited period before routine deletion.

11. Your rights and choices

Subject to the PDPA and applicable law, you may have the right to:

• Ask whether we process your personal data;
• Request access to personal data we hold about you;
• Request correction of inaccurate, incomplete, misleading or outdated personal data;
• Withdraw consent, subject to the consequences explained above;
• Request that we stop processing personal data that may cause damage or distress, where applicable;
• Object to direct-marketing processing;
• Request deletion or closure of your account, subject to legal and legitimate retention requirements; and
• Complain to the Malaysian Personal Data Protection Commissioner if you believe your rights have been infringed.

To make a request, contact info@myindianz.com. We may ask for information needed to verify your identity and may charge a reasonable fee where permitted by law. We will respond within the period required by applicable law.

12. Children and minors

The Platform is not intended for persons under 18 years old unless we expressly state otherwise. If we knowingly collect personal data from a person under 18, we may require verified consent from a parent, guardian or other person with lawful authority, where required by law.

If you believe that a child has provided personal data without appropriate authorisation, contact us and we will take appropriate steps.

13. Third-party links and services

The Platform may link to third-party sites, tools or services. We do not control those third parties and are not responsible for their privacy practices. Please review their privacy notices before providing personal data to them.

14. Changes to this Policy

We may update this Policy from time to time to reflect changes in our services, technology, legal obligations or privacy practices. We will post the updated version on the Platform and revise the “Last updated” date. Where changes are material, we will provide additional notice or obtain consent where required.

15. How to contact us