Privacy Policy

PM Resources Sdn Bhd (Company No. 199801001234) (“PM Resources”, “we”, “our”, or “us”), Suite 7-05, Level 7, Wisma UOA II, Jalan Pinang, 50450 Kuala Lumpur, Malaysia, is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website (pm-resources.com), use our Client Portal, or engage with our services.

This Policy is issued in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and applies to all personal data processed by PM Resources Sdn Bhd. By accessing our website or using our services, you consent to the practices described in this Policy.

1. Personal Data We Collect

We may collect the following categories of personal data:

• Identity data: Full name, job title, position.
• Contact data: Email address, phone number, company name, business address.
• Account data: Login credentials and portal preferences for Client Portal users.
• Communication data: Messages, enquiries, and correspondence you send us via the contact form or email.
• Technical data: IP address, browser type, device information, and pages visited, collected automatically via cookies and similar technologies.
• Marketing data: Your preferences regarding receiving marketing communications from us.

We do not intentionally collect sensitive personal data (such as national identity numbers, health information, or financial account details) through our website. Where our services require such data as part of a contracted engagement, this is governed separately by the applicable service agreement and data processing agreement.

2. How We Collect Your Personal Data

• Directly from you: when you complete our contact form, register for the Client Portal, subscribe to our newsletter, or correspond with us.
• Automatically: when you visit our website, through cookies, log files, and analytics technologies.
• From third parties: where permitted by law, from business partners, referral sources, or publicly available information.

3. Purposes for Processing Your Personal Data

We process your personal data for the following purposes:

• To respond to your enquiries and provide you with requested information about our services.
• To create and manage your Client Portal account and provide access to HR updates, resources, and downloads.
• To deliver our contracted HR, payroll, accounting, and training services.
• To send you newsletters, HR updates, and service communications where you have subscribed or consented.
• To comply with our legal and regulatory obligations under Malaysian law.
• To improve our website, portal, and services through analytics and feedback.
• To prevent fraud, enforce our Terms of Use, and protect the rights and safety of PM Resources, our clients, and the public.

4. Legal Basis for Processing

We process your personal data on one or more of the following legal grounds:

• Consent: where you have given clear, voluntary consent (e.g., newsletter subscription).
• Contractual necessity: where processing is necessary to perform a contract with you or to take steps at your request prior to entering a contract.
• Legal obligation: where we must process data to comply with applicable Malaysian law.
• Legitimate interests: where processing is necessary for our legitimate business interests, provided these are not overridden by your rights.

5. Disclosure of Personal Data

PM Resources does not sell, rent, or trade your personal data to third parties. We may share your data only in the following circumstances:

• Service providers: Trusted third-party vendors who assist in delivering our services (e.g., cloud hosting, email marketing via Mailchimp, CRM, analytics), bound by contractual data protection obligations.
• Professional advisers: Lawyers, auditors, and accountants where necessary for legal or compliance purposes.
• Regulatory authorities: Government bodies, regulators, or law enforcement where required by Malaysian law or court order.
• Business transfers: In connection with any merger, acquisition, or sale of PM Resources, subject to the acquirer maintaining equivalent data protection standards.

All third parties are required to handle your data in accordance with PDPA 2010 and are not permitted to use it for any purpose other than those specified by PM Resources.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes. Retention periods vary depending on the nature of the data and the purpose of processing. Client Portal account data is retained for the duration of the client relationship and up to seven (7) years thereafter in accordance with Malaysian statutory requirements.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include industry-standard encryption (TLS/SSL), role-based access controls, secure cloud infrastructure, and regular security reviews. However, no method of internet transmission is 100% secure, and we cannot guarantee absolute security.

8. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and support portal functionality. Types of cookies we use:

• Strictly necessary cookies: Required for the website and Client Portal to function (e.g., session authentication). These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our website (e.g., page views, traffic sources). Data is aggregated and anonymised.
• Functional cookies: Remember your preferences and settings to improve your experience.

You may control non-essential cookies through your browser settings. Disabling cookies may affect some functionality of the website or Client Portal.

9. Your Rights Under PDPA 2010

As a data subject under the PDPA 2010, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Withdraw consent for processing based on consent, without affecting the lawfulness of prior processing.
• Request restriction of processing in certain circumstances.
• Object to processing for direct marketing purposes.

To exercise any of these rights, please contact us in writing at enquiries@pm-resources.com. We will respond within 21 days of receiving your request. We may require proof of identity before processing your request.

10. Links to Third-Party Websites

Our website may contain links to external websites, including pm-eschool.com and social media platforms. PM Resources is not responsible for the privacy practices or content of those sites. We encourage you to review their respective privacy policies.

11. Children's Privacy

Our website and services are directed at business professionals and are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware of such collection, we will delete that data promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. The revised Policy will be posted on this page with an updated “Last updated” date. Where changes are material, we will notify registered Client Portal users via email.

13. Contact & Complaints

For any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer:

If you are dissatisfied with our response, you may lodge a complaint with the Department of Personal Data Protection (JPDP), Malaysia.