Privacy Notice

1. Introduction

GoAspire Sdn Bhd ("GoAspire", "we", "us", or "our") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 ("PDPA") and all applicable laws and regulations in Malaysia. This Privacy Notice explains how we collect, use, disclose, and protect your personal data when you use our WorkStyles assessment platform and related services ("Services").

2. Personal Data We Collect

We may collect the following categories of personal data:

• Identity Information: Name, job title, department, organisation
• Contact Information: Email address
• Assessment Data: Responses to WorkStyles assessment questions, behavioural preferences, workplace style profiles
• Technical Data: IP address, browser type, device information, usage data
• Account Data: Username, password (encrypted), account preferences

3. Purpose of Processing

We process your personal data for the following purposes:

• To provide and administer the WorkStyles assessment and related services
• To generate individual and team reports based on assessment results
• To improve our services, assessment methodology, and user experience
• To communicate with you regarding your account and our services
• To comply with legal and regulatory requirements
• To create anonymised, aggregated data for research and benchmarking purposes

4. Disclosure of Personal Data

We may disclose your personal data to:

• Your Organisation: If you are using the Services through an employer or organisation, relevant team reports and insights may be shared with authorised personnel within that organisation
• Certified Facilitators: Trained facilitators who conduct workshops may access your assessment results to provide guidance
• Service Providers: Third-party vendors who assist with hosting, analytics, or technical support, under strict confidentiality agreements
• Legal Requirements: When required by law or to protect the rights, property, or safety of GoAspire, our users, or others

We do not sell your personal data to third parties.

5. Data Security

We implement appropriate security measures to protect your personal data, including:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Role-based access controls
• Secure cloud infrastructure hosted on AWS (Singapore region)
• Regular security reviews and updates

6. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, or as required by law. Assessment data is retained for the duration of your account. Upon account deletion or contract termination, your personal data will be securely deleted or anonymised within 90 days, unless retention is required for legal purposes.

7. Your Rights Under PDPA

Under the PDPA, you have the following rights:

• Right of Access: You may request access to your personal data held by us
• Right of Correction: You may request correction of any inaccurate, incomplete, or misleading personal data
• Right to Withdraw Consent: You may withdraw your consent to the processing of your personal data at any time
• Right to Limit Processing: You may request that we limit the processing of your personal data for certain purposes

To exercise these rights, please contact us at [email protected]. We will respond to your request within 21 days as required by the PDPA. A fee may apply for access requests.

8. Data Breach Notification

In the event of a personal data breach that causes or is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and affected individuals in accordance with the PDPA requirements.

9. Cross-Border Data Transfer

Your personal data may be transferred to and processed in countries outside Malaysia where our service providers are located. We ensure that any such transfer is conducted in compliance with the PDPA and that adequate safeguards are in place to protect your personal data.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyse site performance, and understand how you interact with our Services. You can manage cookie preferences through your browser settings.

11. Changes to This Notice

We may update this Privacy Notice from time to time. We will notify you of any material changes by posting the updated notice on our website. Your continued use of the Services after such changes constitutes acceptance of the updated notice.

12. Contact Us

If you have any questions about this Privacy Notice or wish to exercise your rights, please contact us:

13. Governing Language

This Privacy Notice is provided in both English and Bahasa Malaysia. In the event of any inconsistency between the English and Bahasa Malaysia versions, the English version shall prevail.