Welcome to https://compassi.org.my (the "Website"). We are committed to protecting the privacy and security of your personal data. This Privacy Policy is formulated in accordance with the Malaysian Personal Data Protection Act 2010 ("PDPA").

This Policy explains how we collect, use, disclose, process, and protect your personal data when you visit our Website or interact with us. By using this Website, you consent to the processing of your personal data as described in this Policy.

1. What Personal Data We Collect

We only collect personal data that is reasonably necessary for us to provide our services, maintain the Website, or communicate with you. The types of data we may collect include:

Information You Provide Voluntarily
When you interact with certain features of our Website (e.g., contact forms, donation pages, newsletter sign-ups), we may collect:

Identification Data: Name, NRIC/Passport number (if necessary for donations/official receipts).

Contact Information: Email address, phone number, mailing address.

Financial Information: Credit card details or bank account numbers (collected securely via third-party payment gateways for donations).

Information Collected Automatically
When you browse our Website, we automatically collect certain technical information:

Device Data: IP address, browser type, operating system, device type.

Usage Data: Pages viewed, time spent on pages, referral sources, and clicking behavior (using Cookies).

2. Purpose of Collecting Personal Data

We process your personal data only for legitimate purposes related to our organization’s activities, including:

• Communication: To respond to your inquiries, feedback, or requests submitted via our forms.

• Donations & Support: To process your donations, issue official tax-exempt receipts (where applicable), and maintain donor records.

• Outreach: To send you newsletters, updates, and information about our causes, events, or campaigns (only if you have consented to receive these).

• Website Optimization: To analyze usage trends and improve the functionality, user experience, and security of our Website.

• Compliance: To comply with legal obligations, regulatory requirements, or law enforcement requests within Malaysia.

3. Disclosure of Personal Data

We do not sell or rent your personal data to third parties. However, we may disclose your personal data to the following entities, both within and outside Malaysia, for the purposes stated above:

Service Providers: Third-party vendors who provide services such as web hosting, payment processing (e.g., Stripe, PayPal, local Malaysian banks), data analysis, and email delivery. These providers are contractually obligated to protect your data.

Regulatory/Government Bodies: When required by law (e.g., Inland Revenue Board of Malaysia for tax receipts) or by court order.

Professional Advisers: Such as lawyers, auditors, or accountants for legitimate business purposes.

4. Cookies and Tracking Technologies

Our Website uses "cookies" to enhance your browsing experience.

What are cookies? Small data files stored on your device that help us remember your preferences and understand how you use our site.

How we use them: We use analytical cookies (e.g., Google Analytics) to track visitor behavior.

Your choice: You can choose to accept or decline cookies through your browser settings. However, disabling cookies may prevent you from taking full advantage of the Website.

5. Data Security and Retention

We take the security of your data seriously and implement appropriate technical and organizational measures to prevent unauthorized access, accidental loss, or destruction. However, please be aware that no method of transmission over the internet is 100% secure.

Retention Period: We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, regulatory, and internal policy requirements.

6. Transfer of Data Outside Malaysia

Your personal data may be transferred to, and stored at, a destination outside Malaysia. For instance, this may happen if our servers or service providers are located overseas. By submitting your personal data, you agree to this transfer, storing, or processing. We will take steps to ensure that your data is treated securely and in accordance with this Privacy Policy and the PDPA.

7. Your Rights Under the PDPA

As a data subject in Malaysia, you have certain rights regarding your personal data:

Access: You have the right to request a copy of the personal data we hold about you.

Correction: You have the right to request that we correct any inaccurate or incomplete personal data.

Withdraw Consent: You may withdraw your consent to our processing of your personal data at any time (this may limit our ability to provide certain services to you).

Prevent Processing for Direct Marketing: You have the right to ask us not to process your personal data for marketing purposes.

To exercise any of these rights, please contact our Data Protection Officer (details below). We may charge a prescribed fee for processing an access request as permitted under the PDPA.

8. Third-Party Links

Our Website may contain links to third-party websites (e.g., social media pages, partner organizations). We do not control these websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

9. Updates to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The "Last Updated" date at the top of this page will indicate when it was last revised. We encourage you to review this Policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a complaint regarding how we handle your personal data, please contact us at:

Email: admin@compassi.org.my
Phone: +60125851108