Privacy Statement

This Privacy Statement explains how Tech Talent collects personal data and how we maintain, use, control, and disclose that information. It also summarises your rights under Malaysian data protection law and our related obligations.

Except where stated otherwise, Tech Talent is the organisation that determines the purposes and means of processing personal data for the activities described here.

We only collect, use, and disclose personal data with your consent or deemed consent, or as otherwise permitted under the PDPA or other applicable laws and regulations.

The information we collect depends on our relationship with you. Typical categories include:

• Candidates — individuals who approach us or whom we engage while seeking or performing work with us or our clients;
• Clients — organisations and their representatives who engage us for recruitment, staffing, Employer of Record, payroll, training, or related services;
• Referees — individuals we contact to assess a candidate’s suitability;
• Contractors and EOR employees — individuals we employ or place under staff augmentation or Employer of Record arrangements;
• Training participants — individuals enrolled in programmes such as HRDC-related AI productivity training; and
• Website and enquiry contacts — people who browse our site, submit forms, or contact us by phone, email, or messaging.

2.1 Candidates

Where reasonably necessary to assess suitability for work with or through us, we may collect: name and contact details; date of birth; gender; information in CVs, cover letters, and application materials (skills, qualifications, work history, references, goals and interests); work-rights status in Malaysia or elsewhere; tax and payroll-related details where relevant to placement or employment; employment and performance history with or through us; assessment or screening results (including structured AI-assisted screening such as OPAL where used); background-check outcomes where legally permitted; and notes of our interactions with you and others regarding your suitability.

2.2 Clients

We typically collect business contact details, role and organisation information, hiring requirements, feedback on candidates, and records of our commercial communications needed to deliver recruitment and related services.

2.3 Referees

We typically collect contact details, job title or relationship to the candidate, and confidential opinions about a candidate’s suitability.

2.4 Contractors, EOR employees, and training

Where we employ or administer you (for example under staff augmentation or Employer of Record), or where you join a training programme, we may also collect bank and payroll details, statutory registration information (such as EPF, SOCSO, EIS, and tax identifiers), leave and attendance records, Employment Pass or work-authorisation documents where applicable, and programme enrolment details.

Personal data is collected by Tech Talent for our own use in connection with the services described on techtalent.my. Where we use service providers (for example hosting, analytics, form delivery, screening tools, or payroll systems), they process data on our instructions and for agreed purposes.

4.1 Candidates

We may collect personal data when you:

• apply via our website, careers page, contact form, email, phone, or messaging;
• attend an interview or complete registration materials;
• respond to a job advertisement or referral;
• or when we receive references, former-employer or registration checks, work-rights verification, assessment results, performance feedback, workplace complaints or accident information, or other information you or authorised parties provide.

4.2 Clients and referees

We collect information when we meet or communicate with you, when you brief a role or give candidate feedback, and when a candidate provides referee details after notifying the referee and obtaining permission to share their data with us.

4.3 Website and online

You can browse much of our website without providing personal data. When you submit a form (for example contact, salary research, or service enquiries), we collect the details you volunteer. If you apply through a third-party careers or job board, please also read that site’s privacy notice; we treat data we receive as provided with your consent for evaluating your candidacy for current or future suitable roles, unless you tell us otherwise.

Like many websites, we may record technical information such as IP address (where not used to identify you), date and time, pages viewed, referring URL, and browser or device type for security, administration, and analytics. We use Google Analytics where configured; you can control cookies through your browser settings.

5.1 Candidates and placed talent

We may process personal data to:

• assess and pursue actual or possible work placement (permanent, contract, staff augmentation, executive search, or related services);
• verify work rights and, where legally permitted, conduct background or related checks;
• administer employment, payroll, statutory contributions, and benefits when we are the employer;
• support Employment Pass or work-authorisation applications where relevant;
• manage performance, training needs, complaints, investigations, insurance, and workplace matters;
• contact you about suitable opportunities and related services; and
• run internal business processes such as quality assurance, security, and legal compliance.

5.2 Clients

We process client personal data for relationship management, recruitment and staffing delivery, marketing of our services where permitted, risk management, and statutory or contractual compliance.

5.3 Referees

We process referee data to confirm identity and authority to provide a reference and to assess candidate suitability.

5.4 Training participants

We process enrolment and contact details to deliver training, communicate schedules and materials, and support HRD Corp or related administrative requirements where applicable.

We only process sensitive personal data where you give explicit consent and/or where necessary to comply with legal obligations or otherwise permitted by law. Under the PDPA, sensitive personal data includes information about physical or mental health, certain biometric data, and the commission or alleged commission of an offence, among other categories defined by law.

Depending on the context, we may disclose personal data to:

• potential or actual clients (for candidates, usually after we advise you of our intention and obtain consent before submission);
• referees and parties you authorise;
• government departments or bodies (or their agents) for work rights, tax, social security, immigration, or other lawful purposes;
• insurers, professional advisors, auditors, and background-check providers where permitted;
• contracted service providers such as IT hosts, database and software vendors, form and email delivery providers, analytics providers, and payroll or screening platforms; and
• any person with a lawful entitlement to obtain the information, or as required for legal process, regulatory requests, or corporate transactions (for example assignees or successors).

We take reasonable steps so that service providers handling personal data for us recognise our PDPA obligations and do not process data in a way that would cause us to breach those obligations.

Some systems or storage may be located outside Malaysia. Where we transfer personal data overseas, we will do so in accordance with the PDPA, including seeking an equivalent level of protection where required.

Before you give us a referee’s personal data, you must tell the referee why Tech Talent will use their information and obtain their permission to disclose it to us for evaluating your candidacy for current or future roles.

You may refuse to provide personal data. Where information is needed to deliver a service, we may then be unable to help fully — for example, we may be limited in locating suitable work for a candidate or in completing Employment Pass support, payroll, or training enrolment.

We may use contact details to share relevant employment opportunities, market updates, and information about our services with registered candidates and clients. You can ask us to stop marketing communications at any time by contacting us using the details in section 20 or by using unsubscribe options where provided in a message.

We take reasonable steps to protect personal data from misuse, loss, and unauthorised access, modification, or disclosure. Access to systems is limited to those who need it for their role, and staff are expected to handle company and customer information confidentially. No method of transmission or storage is completely secure; we work to maintain appropriate safeguards for the nature of the data we hold.

We generally rely on personal data you (or your authorised representative) provide. Please tell us promptly if your details change so we can keep records current, complete, and accurate.

You may withdraw consent for processing your personal data by giving us reasonable notice in writing using the contact details in section 20. We may need time to process the request and to explain any impact on services we provide to you. We may also ask you to verify your identity.

You may request access to personal data we hold about you, or information about how we use or disclose it, and you may request correction of inaccurate data. Submit requests in writing using the contact details in section 20.

A reasonable fee may apply for access requests; if so, we will tell you before processing. We aim to respond as soon as reasonably practicable. If we cannot respond within twenty-one (21) days, we will inform you of the expected timeframe. Where we cannot provide data or make a correction, we will generally explain why, except where the PDPA does not require us to do so.

Opinions given by referees or clients are often provided in confidence. Disclosing those opinions may unreasonably affect another person’s privacy; we may be unable to share them without the referee’s or client’s consent.

Subject to the PDPA (including rules effective from 1 June 2025 where applicable), you may request that we transfer your personal data to another data controller of your choice, where technically feasible and where formats are compatible. Submit requests in writing using the contact details in section 20. We may need time to assess feasibility and may ask you to verify your identity.

We retain personal data only as long as needed for the purposes for which it was collected, or as required or permitted by applicable laws. When retention is no longer necessary for those purposes or for legal or business needs, we will cease to retain the data or remove the means by which it can be associated with you, within a reasonable time.

Statistical and technical data from website visits help us improve performance, security, and content. Cookies and similar technologies may be used; you can disable cookies in your browser, though some site features may then be limited.

Our website or communications may link to third-party sites (for example careers pages, screening tools, or partner sites). Those sites are outside our control; please review their privacy notices. Transmission of information over the internet carries inherent risks — assess those risks for your own situation.

We review this Privacy Statement from time to time. The current version will always be available on this page, with the last updated date shown above.

For enquiries, complaints, or requests to access, correct, limit, withdraw consent, or exercise other rights regarding your personal data, please contact:

If there is any inconsistency between language versions of this Privacy Statement, the English version prevails.