PRIVACY

AFROMY SDN BHD (“AFROMY,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, store, and disclose your personal information in compliance with the Malaysian Personal Data Protection Act 2010 (PDPA), GDPR (where applicable), and other relevant data protection regulations. 

1. Who This Policy Applies To

• Event participants and attendees

• Sponsors, vendors, and exhibitors

• Website visitors and subscribers

• Volunteers, staff, and media professionals

2. What Data We Collect

We collect personal data through our website, social media, online forms, email, and third-party event registration platforms. This includes:

• Identity Data: Name, nationality, date of birth, passport/ID number

• Contact Data: Email, phone number, address

• Demographic Data: Country of origin, language preference

• Transaction Data: Payment history, invoices, transaction IDs

• Technical Data: IP address, browser type, device, geolocation, cookies

• Social Media Data: Public social handles, engagement data

• Sensitive Data: Dietary preferences or accessibility requirements (only if voluntarily disclosed)

3. Legal Basis for Processing (under GDPR)

We process personal data under the following legal bases:

• Consent – when you agree to receive updates or register for events

• Contract – to fulfill our obligations for ticketing or sponsorship agreements

• Legal Obligation – to comply with tax or regulatory duties

• Legitimate Interest – for event organization, analytics, marketing (non-intrusive)

4. How We Use Your Data

We use your information for the following purposes:

• To register you for our event(s)

• To respond to your inquiries or requests

• To process payments and issue confirmations

• To communicate changes to event schedules

• To market future events and send newsletters (only with your consent)

• To comply with legal or regulatory requirements

• To enhance user experience and site functionality through analytics

5. Data Retention

We retain your personal data only for as long as necessary:

• Event-related data – retained for up to 5 years

• Financial records – retained for 7 years (in accordance with tax law)

• Marketing data – retained until opt-out or request for deletion

Data no longer needed will be securely deleted or anonymized.

6. Sharing of Data

We do not sell or rent your data. However, we may share your information with:

• Internal departments of AFROMY SDN BHD

• Event co-organizers and verified partners

• Web service providers, payment processors, or cloud storage vendors

• Regulatory authorities, if required by law

All third parties are under strict confidentiality agreements and data processing contracts.

7. International Data Transfers

Your data may be stored or processed outside Malaysia, including in the EU or the US. In such cases, we ensure adequate protection via:

• Standard Contractual Clauses (SCCs)

• Data Processing Addenda with third parties

• Compliance with PDPA and GDPR requirements

8. Your Rights (PDPA & GDPR)

You have the right to:

• Request access to your data

• Correct or update your data

• Withdraw consent at any time

• Request erasure (right to be forgotten)

To exercise your rights, contact:

📧 info@afromyevents.com.my

📞 +60 111 932 1299 

Last updated August 2025