Privacy Policy

Grit Event Management (104815) – Privacy Policy

  1. Data Controller
    Grit Event Management
    Business Registration: 104815
    Address: No 46, 1st Floor, Lot 3104, Q3A Jln Tun Ahmad Zaidi Adruce, Hock Kui Commercial Centre, 93250 Kuching, Sarawak
    Email: gritevent@gmail.com
    Phone: 012-400 2890
  2. Information We Collect
    2.1. Personal Identification:Name, NRIC/Passport number, date of birth
    2.2. Contact Information:Address, email, phone number
    2.3. Transaction Data: Payment details, event history, ticket purchases
    2.4. Event-Specific Data: Dietary requirements, accessibility needs, emergency contacts
    2.5. Technical Data: IP address, browser type, pages visited (via cookies)
  3. Purposes of Processing
    We use your personal data to:
  • Process event registrations and ticket sales
  • Manage event logistics and communications
  • Process payments and issue tax invoices
  • Comply with legal obligations (tax, immigration, safety)
  • Send event updates and post-event surveys
  • Improve our services through anonymized analytics
  1. Legal Basis for Processing
  • Performance of contract (event registration)
  • Legal compliance (tax records, immigration)
  • Legitimate interests (event management, marketing similar services)
  • Explicit consent (for sensitive data, photographs, special requirements)
  1. Data Sharing & Third Parties
    We may share your data with:
  • Event Partners: Venues, caterers, hotels, transport providers
  • Payment Processors: Billplz, banks (data encrypted and PCI-DSS compliant)
  • Government Authorities: When legally required (immigration, tax, licensing)
  • Professional Advisors: Accountants, lawyers as necessary

We ensure all third parties comply with PDPA requirements through data processing agreements.

  1. Data Retention
    We retain personal data:
  • Financial transactions: 7 years (as required by Malaysian tax laws)
  • Event registrations: 2 years post-event for customer service
  • Marketing lists: Until withdrawal of consent
  • Inactive accounts: 3 years then anonymized
  1. Your PDPA Rights
    You have the right to:
  • Access your personal data
  • Correct inaccurate data
  • Withdraw consent (for marketing)
  • Request deletion (subject to legal requirements)
  • Limit processing of your data
  • Data portability (where applicable)

To exercise these rights, contact our Data Protection Officer at gritevent@gmail.com.

  1. Data Security
    We implement appropriate security measures including:
  • Secure servers and encryption
  • Limited staff access to personal data
  • Regular security assessments
  • Secure payment gateways (Billplz)
  1. International Transfers
    For events involving cross-border travel, minimal necessary data may be transferred to overseas vendors (hotels, transport) with appropriate safeguards.
  2. Cookies
    Our website uses essential cookies for functionality. We may use analytics cookies to improve user experience. You can manage cookies through your browser settings.
  3. Changes to This Policy
    We may update this policy periodically. Significant changes will be notified via email or website notice.
  4. Complaints
    If you have concerns about our data handling, please contact us first. You may also lodge a complaint with the Malaysian Personal Data Protection Commissioner.
  5. Contact Our Data Protection Officer
    Email: gritevent@gmail.com
    Phone: 012-400 2890
    Address: No 46, 1st Floor, Lot 3104, Q3A Jln Tun Ahmad Zaidi Adruce, Hock Kui Commercial Centre, 93250 Kuching, Sarawak

 

© COPYRIGHT 2024 Grit Event Management (104815)