Privacy Policy

1. Personal data we collect

We collect personal data that you provide to us voluntarily. Through this website, this is primarily the information you submit via our enquiry form:

• your full name;
• your organisation, where relevant;
• your email address;
• your contact telephone number; and
• the subject and content of your enquiry.

We also collect limited technical information automatically, such as your IP address, browser type, device type and the pages you visit. This information is used in aggregate to maintain the security and performance of the website.

2. How we use your personal data

We process your personal data for the following purposes:

• to respond to your enquiry and route it to the relevant division;
• to provide information about the Industrial Collaboration Programme (ICP), Performance-Based Contracting (PBC) and other TDA programmes you have asked about;
• to process applications, registrations and submissions you make to us;
• to maintain records required for governance, audit and statutory reporting; and
• to operate, secure and improve this website.

We do not use your personal data for marketing purposes without your consent.

3. Legal basis and consent

By submitting personal data through this website, you consent to our processing of that data for the purposes set out above. Where processing is necessary for the performance of a contract, for compliance with a legal obligation, or for the performance of a public function, we rely on those bases as permitted under the PDPA.

You may withdraw your consent at any time by contacting us using the details in section 9. Withdrawing consent may limit our ability to respond to your enquiry or process your application.

4. Disclosure of personal data

We do not sell or rent personal data. We may disclose your personal data to:

• the Ministry of Finance Malaysia and other government ministries, agencies or regulators, where required in connection with our mandate;
• service providers who host, maintain or support our systems, and who are bound by confidentiality and data protection obligations;
• professional advisers such as auditors and legal counsel; and
• any party where disclosure is required by law, court order or a lawful request by a public authority.

5. Data security

We apply appropriate organisational, physical and technical measures to protect personal data against accidental or unlawful loss, misuse, unauthorised access, alteration or disclosure. Access to personal data is limited to personnel who require it to perform their duties. No transmission over the internet can be guaranteed to be completely secure, and any transmission is at your own risk.

6. Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting and reporting requirements. When personal data is no longer required, it is securely deleted or anonymised.

7. Your rights

Subject to the PDPA, you have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate, incomplete or out-of-date personal data;
• withdraw your consent to further processing;
• limit the processing of your personal data for direct marketing; and
• enquire about how your personal data has been disclosed.

We may charge a prescribed fee for an access request and may require verification of your identity before acting on a request.

8. Cookies and analytics

This website uses cookies and similar technologies to keep the site functioning correctly, remember your preferences and understand how the site is used. You can set your browser to refuse cookies or to alert you when cookies are being sent. Disabling cookies may affect parts of the website.

9. Third-party links

This website may contain links to external websites operated by other parties. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of every website you visit.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The revised policy takes effect when published on this page, and the effective date above will be updated accordingly.

11. Contact us

If you have questions about this Privacy Policy, or wish to exercise any of your rights, please contact us through our Contact Us page.