Privacy Policy

This Privacy Policy explains how Taming Tech Sdn Bhd (Company No. 201701004303), the owner and operator of TPtoc ("we", "us", or "our"), collects, uses, discloses, and protects your personal data when you access or use our platform at tptoc.com (the "Platform").

By using the Platform, you consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree, please discontinue use of the Platform.

This Privacy Policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia.

1. Data Controller

The data controller responsible for your personal data is:

Taming Tech Sdn Bhd
Malaysia
Email: hello@tptoc.com

2. Personal Data We Collect

We collect personal data that you voluntarily provide to us and data generated through your use of the Platform.

2.1 Data You Provide Directly

• Account information: full name, email address, password (stored in encrypted form)
• Profile information: job title, area of expertise, biography, profile photo, company or organisation name
• Training records: courses attended, certifications earned, training history
• Payment information: billing name, billing address, and transaction references (card numbers are not stored; payments are processed by SecurePay Sdn Bhd, our third-party payment provider)
• Communications: messages or enquiries you send to us

2.2 Data Collected Automatically

• Usage data: pages visited, features used, time and date of access
• Device and browser data: IP address, browser type and version, operating system
• Cookies and similar technologies: session tokens, preference cookies (see Section 9)

2.3 Data from Third-Party Sign-In Services

You may choose to register or sign in using a third-party identity provider such as LinkedIn. When you do, the third-party service shares certain profile data with us in accordance with the permissions you grant on that service. The data we receive typically includes:

• Full name
• Email address
• Profile photo
• A unique identifier from the third-party service

We request only the minimum data necessary to create and manage your account. We do not post to your social media profile, access your connections, or perform any actions on your behalf on third-party platforms without your explicit consent.

3. Purposes of Processing

We process your personal data for the following purposes:

• To create, maintain, and manage your account on the Platform
• To facilitate your registration and participation in training programmes
• To issue and manage training certificates
• To process payments for training or subscription services
• To send transactional communications (e.g., enrolment confirmations, certificate notifications)
• To send service and platform updates where you have not opted out
• To respond to your support requests and enquiries
• To improve and develop the Platform through aggregated and anonymised analytics
• To comply with applicable Malaysian law, including the PDPA 2010
• To detect, investigate, and prevent fraud, abuse, or security incidents

4. Legal Basis for Processing

Under the PDPA 2010, we process your personal data based on:

• Your consent, given when you register for an account or connect a third-party sign-in service
• Contractual necessity, where processing is required to provide you with the services you have requested
• Legitimate interests, such as improving the Platform and preventing fraud, where those interests are not overridden by your rights
• Legal obligation, where processing is required to comply with Malaysian law

5. Disclosure of Personal Data

We do not sell, rent, or trade your personal data. We may disclose your personal data to:

• Service providers: third-party vendors who process data on our behalf, including cloud hosting providers, email delivery services, and payment processors (including SecurePay Sdn Bhd for payment processing in Malaysia). These parties are contractually bound to process data only as instructed by us and in accordance with applicable law.
• Training providers: where you have enrolled in a programme offered by a third-party training provider on the Platform, we share relevant enrolment and profile data necessary to facilitate your participation.
• Professional advisers: lawyers, auditors, and insurers where necessary in the course of professional services.
• Regulatory and law enforcement authorities: where we are required to do so by applicable Malaysian law or a valid legal order.

Any cross-border transfer of personal data, if applicable, will be carried out in accordance with Section 129 of the PDPA 2010.

6. Data Retention

We retain your personal data for as long as your account remains active or as necessary to provide you with the services. When your account is closed or your data is no longer required, we will securely delete or anonymise it, unless retention is required by law (e.g., financial records under the Companies Act 2016).

7. Your Rights Under the PDPA 2010

As a data subject under the PDPA 2010, you have the right to:

• Access your personal data that we hold
• Correct any inaccurate or incomplete personal data
• Withdraw consent to the processing of your personal data, subject to any legal or contractual restrictions
• Request the cessation of processing of your personal data for direct marketing purposes

To exercise any of these rights, please contact us at hello@tptoc.com. We will respond to your request within 21 days in accordance with the PDPA 2010.

8. Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include encrypted data storage, HTTPS transmission, and access controls. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Cookies

The Platform uses cookies and similar tracking technologies to maintain your session, remember your preferences, and improve your experience. You may configure your browser to refuse cookies; however, some features of the Platform may not function correctly if cookies are disabled.

10. Third-Party Links

The Platform may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will take steps to delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Personal Data Protection Officer:

Taming Tech Sdn Bhd
Attention: Personal Data Protection Officer
Email: hello@tptoc.com