Introduction

BMP Services Sdn Bhd (together and/or individually referred to as “us” or “we” or “our”) provides professional merchandising, field force management, payroll and recruitment services. We respect your privacy and are committed to protecting your Personal Data in accordance with the Personal Data Protection Act 2010 (“PDPA”) of Malaysia and other applicable laws.

This Privacy Notice outlines how we collect, use, disclose and safeguard your Personal Data when you interact with us—whether online, through our services or during your employment or engagement with us (via phone, email, in-person, or other channels).

What is Personal Data?

“Personal Data” refers to any information that identifies you or could reasonably be used to identify you. This includes but is not limited to your name, NRIC, passport, contact details (address, phone number, email), date of birth, gender, employment details, bank account, payment information, photograph, resume and any other data that can directly or indirectly identify you.

In addition, we may collect Personal Data belonging to individuals who are associated with our clients, vendors, service providers or other business partners. This may include the names, job titles, business contact numbers, email addresses, and other information of company representatives or employees. While PDPA does not apply to company or organisation data, we will handle any Personal Data of individuals received in the course of business dealings with the same level of care and compliance.

Personal Data may also include sensitive information such as health information, religion, criminal records, biometric data, if required by law or necessary for specific purposes.

If you are under the age of 18, you must obtain consent from your parent or legal guardian before providing us with your Personal Data. By submitting your Personal Data, you confirm that such consent has been obtained where required.

If you provide us with Personal Data of other individuals, you hereby represent that you have obtained consent from that individual prior to providing their Personal Data to us.

What We Collect

We collect personal data from a variety of individuals in the course of our business operations, including but not limited to job applicants, candidates, employees, interns, contractors, clients, business partners, service providers, and suppliers.

The types of Personal data we may collect include (but are not limited to):

- Identification details – Full name, NRIC/passport number, date of birth, gender, nationality, and photograph

- Contact information – Residential or mailing address, phone number, and email address

- Professional and employment-related information – Resumes/CVs, academic qualifications, certifications, employment history, salary expectations, references, job titles, company affiliations, and working permits

- Emergency contact information – Names and contact details of individuals to be notified in the event of an emergency

- Banking and financial data – Bank account details, EPF/SOCSO/Income Tax numbers (for employment or payment purposes)

- Technical and online data – Device information, IP address, browser type, cookies, and usage data from visits to our websites or digital platforms

- Public or third-party data – Information obtained from publicly accessible sources (e.g., LinkedIn, company websites, public registries) or third-party providers with lawful rights to share such data

In the case of business partners, clients, or suppliers, we may also collect the Personal Data of individuals acting as contact persons, authorised representatives, signatories, or beneficial owners. This includes business contact details, designation, identification information (where necessary), and any other personal data required for due diligence, contractual engagement, or regulatory compliance.

Why We Collect

We collect and process your Personal Data for various legitimate business and operational purposes, including but not limited to the following:

- To deliver our services – including merchandising, field force deployment and activation, tester management and warehousing, mobile app and BI reporting, payroll and recruitment, retail audits, market surveys and analytics

- To evaluate your suitability – for job applications, assignments, internships, contract roles, or employment opportunities, whether with us or our clients

- To manage employment relationships – including onboarding, contract administration, performance management, training, benefits administration, and termination processes

- To engage and manage business relationships – with clients, service providers, vendors, suppliers, and other business partners

- To facilitate communication – including responding to enquiries, sending important updates, or sharing relevant information about assignments, projects, events, or services

- To comply with legal and regulatory requirements – such as audits, statutory reporting, tax and EPF/SOCSO contributions, background screenings, and anti-money laundering obligations

- To support internal operations – including IT administration, data analytics, website or system enhancements, and service improvements

- For safety and security purposes – such as monitoring premises via CCTV, managing access controls, and maintaining workplace safety

- For marketing or promotional purposes – to inform you about services, opportunities, or events that may be of interest

- To respond to disputes or legal claims – or to establish, exercise, or defend our legal rights.

Your Personal Data is processed only when necessary and in accordance with applicable data protection laws, with appropriate safeguards in place.

Consequences of Not Providing Personal Data

The provision of your Personal Data is necessary for us to deliver our services and fulfil our contractual, operational, and legal responsibilities. If you choose not to provide the requested personal data, or object to our processing of it for the purposes outlined in this Privacy Notice, please be aware of the following:

- Access to Services: We may be unable to offer you certain services, features, or support. In some cases, this may require you to discontinue your use of our platforms, products, or services, or refrain from engaging with us.

- Incomplete Transactions or Engagements: Without certain essential Personal Data, we may not be able to proceed with your application, provide employment or placement services, or maintain a working relationship with you.

- Legal Compliance: Certain Personal Data is required for us to comply with statutory and regulatory obligations. Failure to provide such data may result in non-compliance with legal requirements that could affect both you and us.

Disclosure of Personal Data

We treat your Personal Data as confidential. However, in order to support our operations and comply with legal or contractual obligations, you acknowledge and agree that your Personal Data may be disclosed to the following categories of parties, where relevant and appropriate:

- Authorities and regulators – including government agencies, law enforcement bodies, statutory authorities, or other parties as required by law or in response to lawful requests

- Our corporate group – including our subsidiaries, affiliated entities, and associated companies (whether located within or outside Malaysia), including those established in the future

- Strategic and commercial partners – including our business affiliates, associates, and partners who provide products or services in support of or in connection with our business activities

- Professional advisors – such as our appointed auditors, legal counsel, accountants, consultants, or other professional advisors engaged by us

- Regulatory bodies and industry oversight entities – for compliance, reporting, or governance purposes

- Authorised third-party service providers – including sub-contractors, vendors, technology service providers, and others we engage to support our operations, systems, or business services

Where data is shared with third parties, we take reasonable steps to ensure that your Personal Data is protected and processed in accordance with applicable data protection laws.

Consent to Use and Disclosure of Personal Data

By submitting your Personal Data to us, you are deemed to have given your consent for us to process your data for the purposes outlined in this Privacy Notice.

You also consent to the disclosure of your Personal Data to our clients, business partners, and other third parties with whom we collaborate in the course of providing our services. We will take reasonable steps to ensure that any such parties are contractually obligated to maintain the confidentiality and security of your personal data.

Additionally, you acknowledge and agree that your Personal Data may be transferred to and processed in jurisdictions outside of Malaysia. While these jurisdictions may not offer the same level of data protection as Malaysian law, we will implement appropriate safeguards to ensure your data remains protected.

Cookies & Tracking

We use cookies, web beacons, and analytics tools to enhance your site experience. You may disable cookies, but doing so might limit some features.

Retention & Security

We retain data only as long as needed for legitimate business, legal, or regulatory purposes. Data is secured with appropriate technical and organizational measures. We also anonymize or securely dispose of data when no longer required.

Data Breach Response

If a security incident occurs and poses a risk to your data, we will promptly investigate, notify authorities as required, and inform affected individuals as appropriate.

Your Rights & Choices

You have the right to:

- Access, correct, or request deletion of your Personal Data

- Object to or restrict processing of your data

- Withdraw previously given consent where applicable

- Opt-out of receiving marketing communications

You may request us to cease communications by contacting us through the details provided below.

Voluntary Disclosure of Personal Data

Unless stated otherwise in this Privacy Notice, the provision of your Personal Data is entirely voluntary. However, choosing not to provide certain requested information may impact our ability to offer you specific services, process your application, or fulfil our obligations to you. Further details on the implications of not providing your data are outlined in the section titled “Consequences of Not Providing Personal Data.”

Contact Us

For enquiries, complaints, or exercising your rights:

Data Protection Officer

BMP Services Sdn Bhd

202401014126 (1559976-P)

Suite 822, Level 8, Block A4,

Leisure Commerce Square, No. 9, Jalan PJS 8/9,

46150, Petaling Jaya, Selangor, Malaysia.

Phone: 011-6311 9288

Email: [email protected]

Pengenalan

BMP Services Sdn Bhd (yang dirujuk secara bersama atau berasingan sebagai “kami”) menyediakan perkhidmatan peragaan barangan, pengurusan tenaga kerja lapangan, pemprosesan gaji dan pengambilan pekerja. Kami menghormati privasi anda dan komited untuk melindungi Data Peribadi anda selaras dengan Akta Perlindungan Data Peribadi 2010 (“PDPA”) Malaysia serta undang-undang lain yang berkenaan.

Notis Privasi ini menerangkan cara kami mengumpul, menggunakan, mendedahkan dan melindungi Data Peribadi anda apabila anda berinteraksi dengan kami — sama ada secara dalam talian, melalui perkhidmatan kami, atau semasa tempoh pekerjaan atau penglibatan anda dengan kami (melalui telefon, e-mel, bersemuka, atau saluran lain).

Apakah itu Data Peribadi?

“Data Peribadi” merujuk kepada sebarang maklumat yang mengenal pasti anda atau boleh digunakan secara munasabah untuk mengenal pasti anda. Ini termasuk, tetapi tidak terhad kepada, nama, nombor kad pengenalan (NRIC), pasport, maklumat perhubungan (alamat, nombor telefon, e-mel), tarikh lahir, jantina, maklumat pekerjaan, akaun bank, maklumat pembayaran, gambar, resume, dan sebarang data lain yang boleh mengenal pasti anda secara langsung atau tidak langsung.

Selain itu, kami mungkin mengumpul Data Peribadi milik individu yang dikaitkan dengan pelanggan, vendor, pembekal perkhidmatan, atau rakan perniagaan kami. Ini termasuk nama, jawatan, nombor telefon pejabat, alamat e-mel, dan maklumat lain wakil atau pekerja syarikat berkenaan. Walaupun PDPA tidak terpakai kepada data syarikat atau organisasi, kami akan mengendalikan sebarang Data Peribadi individu yang diterima dalam urusan perniagaan dengan tahap penjagaan dan pematuhan yang sama.

Data Peribadi juga mungkin termasuk maklumat sensitif seperti data kesihatan, agama, rekod jenayah, atau data biometrik sekiranya dikehendaki oleh undang-undang atau perlu untuk tujuan tertentu.

Sekiranya anda berumur di bawah 18 tahun, anda mesti mendapatkan kebenaran daripada ibu bapa atau penjaga sah sebelum memberikan Data Peribadi anda kepada kami. Dengan menyerahkan Data Peribadi anda, anda mengesahkan bahawa kebenaran tersebut telah diperoleh jika diperlukan.

Sekiranya anda memberikan kami Data Peribadi milik individu lain, anda dengan ini mengesahkan bahawa anda telah mendapatkan persetujuan daripada individu tersebut sebelum menyerahkan Data Peribadi mereka kepada kami.

Tujuan Pengumpulan Data

Kami mengumpul dan memproses Data Peribadi anda untuk pelbagai tujuan perniagaan yang sah, termasuk tetapi tidak terhad kepada perkara berikut:

Untuk menyampaikan perkhidmatan kami – termasuk peragaan barangan, penempatan dan aktivasi tenaga kerja lapangan, pengurusan penguji produk dan pergudangan, aplikasi mudah alih dan pelaporan BI, pemprosesan gaji dan pengambilan pekerja, audit runcit, tinjauan pasaran dan analitik.

Untuk menilai kesesuaian anda – bagi permohonan kerja, latihan industri, peranan kontrak atau peluang pekerjaan bersama kami atau pelanggan kami.

Untuk mengurus hubungan pekerjaan – termasuk proses kemasukan, pentadbiran kontrak, pengurusan prestasi, latihan, faedah, dan penamatan.

Untuk mengurus hubungan perniagaan – dengan pelanggan, pembekal perkhidmatan, vendor, dan rakan kongsi perniagaan lain.

Untuk memudahkan komunikasi – termasuk menjawab pertanyaan, menghantar makluman penting, atau berkongsi maklumat berkaitan tugasan, projek, acara, atau perkhidmatan.

Untuk mematuhi keperluan undang-undang dan peraturan – termasuk audit, pelaporan statutori, sumbangan cukai dan KWSP/PERKESO, semakan latar belakang, dan kewajipan pencegahan pengubahan wang haram.

Untuk menyokong operasi dalaman – termasuk pentadbiran IT, analisis data, peningkatan laman web atau sistem, dan penambahbaikan perkhidmatan.

Untuk tujuan keselamatan – termasuk pemantauan premis melalui CCTV, kawalan akses, dan keselamatan tempat kerja.

Untuk tujuan pemasaran atau promosi – bagi memaklumkan anda tentang perkhidmatan, peluang, atau acara yang mungkin relevan.

Untuk menangani pertikaian atau tuntutan undang-undang – termasuk menegakkan atau mempertahankan hak undang-undang kami.

Data Peribadi anda hanya akan diproses apabila perlu dan selaras dengan undang-undang perlindungan data yang berkuat kuasa, dengan perlindungan sewajarnya.

Kesan Jika Data Tidak Diberikan

Penyediaan Data Peribadi anda adalah perlu bagi kami untuk melaksanakan perkhidmatan serta memenuhi tanggungjawab kontrak, operasi, dan undang-undang kami. Sekiranya anda memilih untuk tidak memberikan data yang diminta, atau membantah pemprosesannya, sila maklum bahawa:

Akses kepada Perkhidmatan – Kami mungkin tidak dapat menyediakan perkhidmatan atau sokongan tertentu. Dalam sesetengah kes, anda mungkin perlu berhenti menggunakan platform atau perkhidmatan kami.

Transaksi Tidak Lengkap – Tanpa data penting, kami mungkin tidak dapat memproses permohonan, menyediakan pekerjaan atau perkhidmatan penempatan, atau mengekalkan hubungan kerja dengan anda.

Pematuhan Undang-undang – Kegagalan menyediakan data yang diperlukan boleh menyebabkan ketidakpatuhan terhadap keperluan undang-undang yang memberi kesan kepada anda dan kami.

Pendedahan Data Peribadi

Kami menganggap Data Peribadi anda sebagai sulit. Namun, untuk menyokong operasi kami dan mematuhi kewajipan undang-undang atau kontrak, anda bersetuju bahawa Data Peribadi anda mungkin didedahkan kepada pihak-pihak berikut, jika berkaitan:

Pihak berkuasa dan pengawal selia – termasuk agensi kerajaan, badan penguatkuasa undang-undang, atau pihak lain seperti yang dikehendaki oleh undang-undang.

Kumpulan korporat kami – termasuk anak syarikat, entiti berkaitan dan syarikat sekutu (dalam atau luar Malaysia).

Rakan strategik dan komersial – termasuk rakan niaga yang menyediakan produk atau perkhidmatan berkaitan aktiviti perniagaan kami.

Penasihat profesional – seperti juruaudit, peguam, akauntan, perunding, atau penasihat profesional yang dilantik.

Badan kawal selia industri – bagi tujuan pematuhan, pelaporan atau tadbir urus.

Penyedia perkhidmatan pihak ketiga yang diberi kuasa – termasuk vendor, subkontraktor, penyedia perkhidmatan teknologi, dan lain-lain yang menyokong operasi kami.

Kami akan mengambil langkah munasabah untuk memastikan Data Peribadi anda dilindungi dan diproses mengikut undang-undang yang berkenaan.

Persetujuan untuk Penggunaan dan Pendedahan Data

Dengan menyerahkan Data Peribadi anda kepada kami, anda dianggap telah memberikan persetujuan untuk kami memproses data anda bagi tujuan yang dinyatakan dalam Notis Privasi ini.

Anda juga bersetuju bahawa Data Peribadi anda boleh didedahkan kepada pelanggan, rakan kongsi perniagaan, dan pihak ketiga lain yang bekerjasama dengan kami dalam penyampaian perkhidmatan. Kami akan memastikan pihak-pihak tersebut terikat secara kontrak untuk mengekalkan kerahsiaan dan keselamatan data anda.

Anda turut mengakui bahawa Data Peribadi anda mungkin dipindahkan dan diproses di luar Malaysia. Walaupun bidang kuasa lain mungkin tidak mempunyai tahap perlindungan yang sama seperti undang-undang Malaysia, kami akan melaksanakan langkah perlindungan sewajarnya bagi menjamin keselamatan data anda.

Kuki & Penjejakan

Kami menggunakan kuki, suar web (web beacons), dan alat analitik untuk meningkatkan pengalaman laman web anda. Anda boleh mematikan kuki, namun tindakan itu mungkin mengehadkan fungsi tertentu.

Penyimpanan & Keselamatan

Kami menyimpan data hanya selama yang diperlukan bagi tujuan perniagaan, undang-undang, atau peraturan. Data dilindungi dengan langkah teknikal dan organisasi yang sewajarnya, dan akan dinyahnamakan atau dilupuskan dengan selamat apabila tidak lagi diperlukan.

Tindakan terhadap Pelanggaran Data

Sekiranya berlaku insiden keselamatan yang menjejaskan data anda, kami akan menjalankan siasatan segera, memaklumkan pihak berkuasa berkaitan, dan memaklumkan individu yang terjejas jika perlu.

Hak & Pilihan Anda

Anda mempunyai hak untuk:

Mengakses, membetulkan, atau meminta pemadaman Data Peribadi anda;

Membantah atau mengehadkan pemprosesan data anda;

Menarik balik persetujuan yang telah diberikan (jika berkenaan);

Menolak penerimaan komunikasi pemasaran.

Anda boleh meminta kami menghentikan komunikasi dengan menghubungi kami melalui maklumat di bawah.

Pendedahan Sukarela Data Peribadi

Melainkan dinyatakan sebaliknya, penyediaan Data Peribadi anda adalah secara sukarela. Walau bagaimanapun, kegagalan memberikan maklumat tertentu boleh menjejaskan keupayaan kami untuk menawarkan perkhidmatan, memproses permohonan, atau memenuhi tanggungjawab kami kepada anda. Maklumat lanjut dinyatakan dalam seksyen “Kesan Jika Data Tidak Diberikan”.

Kemas Kini Notis Privasi

Notis ini mungkin dikemas kini dari semasa ke semasa. Versi terkini akan dipaparkan di laman ini bersama tarikh kuat kuasa.

Dengan terus menggunakan perkhidmatan, platform atau produk kami selepas perubahan dibuat, anda dianggap telah bersetuju dengan sebarang pindaan terhadap Notis Privasi ini.

Hubungi Kami

Untuk sebarang pertanyaan, aduan, atau pelaksanaan hak anda, sila hubungi:

Pegawai Perlindungan Data

BMP Services Sdn Bhd

202401014126 (1559976-P)

Suite 822, Level 8, Block A4,

Leisure Commerce Square, No. 9, Jalan PJS 8/9,

46150, Petaling Jaya, Selangor, Malaysia.

Telefon: 011-6311 9288

E-mel: [email protected]