Patakaran sa privacy

Paano kinokolekta, ginagamit at pinoprotektahan ng Continental Certification Body ang inyong personal na datos sa ilalim ng Personal Data Protection Act 2010 ng Malaysia.

Personal Data Protection Notice and Privacy Policy

Last updated: 29 October 2026

This notice explains how Continental Certification Body Sdn. Bhd. (“CCB”, “we”) collects, uses and protects your personal data under Malaysia’s Personal Data Protection Act 2010 (“PDPA”). It applies to everyone who contacts us, requests a quotation, attends our training, applies to work with us or is involved in a certification audit.

1. What personal data we collect

Your name, job title, company, email address, phone or mobile number, business address, country and website, and anything you tell us in an enquiry. For audits and training we may also hold attendance, assessment and audit records. For auditor applicants we hold your CV, qualifications, audit log and expected fees. We do not ask for sensitive personal data unless the law or a certification scheme requires it.

2. How we obtain it

Directly from you through our website forms, email, WhatsApp, phone or in person; from your organisation when it engages us; and from our partner certification bodies when they need to work with us on your certificate.

3. Why we use it

To respond to your enquiry and prepare your quotation; to plan and carry out audits and training; to arrange the issue, maintenance and verification of certificates with our partner certification bodies; to assess auditor applications; to keep the records that certification and accreditation rules require; and to meet our legal obligations. We will only send you marketing messages with your consent, and you can opt out at any time.

4. Who we may share it with

Our partner certification bodies, INTERCERT Certification and BSCIC Certifications, when needed to issue or verify your certificate; accreditation bodies reviewing our work; auditors and trainers engaged by us, who are bound by confidentiality; service providers that host or support our systems; and authorities where the law requires it. We never sell your personal data.

5. Transfers outside Malaysia

Some partners and service providers are located outside Malaysia. When your data is transferred, we take reasonable steps to ensure it is protected to a standard comparable to the PDPA.

6. Is it compulsory?

Fields marked * on our forms are needed for us to respond. Providing your personal data is voluntary, but if you do not, we may be unable to answer your enquiry, prepare a quotation or provide our services.

7. Your rights

You may ask to access the personal data we hold about you and to correct it if it is inaccurate, incomplete or out of date. You may withdraw your consent, ask us to limit how we process your data, ask us to stop direct marketing and, where it applies, ask for your data to be transmitted to another organisation. We will reply within 21 days of receiving your request. A fee permitted by law may apply to access requests.

8. Security and retention

We protect your data with reasonable technical and organisational measures against loss, misuse and unauthorised access. We keep it only for as long as needed for the purposes above and for the record periods that certification and accreditation rules require, and then delete or anonymise it.

9. Data breaches

If a personal data breach occurs, we will notify the Personal Data Protection Commissioner and, where required, the people affected, as the PDPA requires.

10. How to contact us

For access, correction, withdrawal of consent or any question or complaint about your personal data, contact our Data Protection Officer at rita@concb.com or write to Continental Certification Body Sdn. Bhd., D-1-3, Avenue Two, Persiaran Suarasa 3, Bandar Tun Hussein Onn, 43200 Cheras, Selangor, Malaysia. You may also complain to the Personal Data Protection Commissioner of Malaysia.

11. Language and changes

This notice is published in English, Chinese and Malay. If the versions differ, the English version prevails. We may update this notice; the date at the top shows the latest version.

Personal Data Protection Notice and Privacy Policy

Last updated: 29 October 2026

This notice explains how Continental Certification Body Sdn. Bhd. (“CCB”, “we”) collects, uses and protects your personal data under Malaysia’s Personal Data Protection Act 2010 (“PDPA”). It applies to everyone who contacts us, requests a quotation, attends our training, applies to work with us or is involved in a certification audit.

1. What personal data we collect

Your name, job title, company, email address, phone or mobile number, business address, country and website, and anything you tell us in an enquiry. For audits and training we may also hold attendance, assessment and audit records. For auditor applicants we hold your CV, qualifications, audit log and expected fees. We do not ask for sensitive personal data unless the law or a certification scheme requires it.

2. How we obtain it

Directly from you through our website forms, email, WhatsApp, phone or in person; from your organisation when it engages us; and from our partner certification bodies when they need to work with us on your certificate.

3. Why we use it

To respond to your enquiry and prepare your quotation; to plan and carry out audits and training; to arrange the issue, maintenance and verification of certificates with our partner certification bodies; to assess auditor applications; to keep the records that certification and accreditation rules require; and to meet our legal obligations. We will only send you marketing messages with your consent, and you can opt out at any time.

4. Who we may share it with

Our partner certification bodies, INTERCERT Certification and BSCIC Certifications, when needed to issue or verify your certificate; accreditation bodies reviewing our work; auditors and trainers engaged by us, who are bound by confidentiality; service providers that host or support our systems; and authorities where the law requires it. We never sell your personal data.

5. Transfers outside Malaysia

Some partners and service providers are located outside Malaysia. When your data is transferred, we take reasonable steps to ensure it is protected to a standard comparable to the PDPA.

6. Is it compulsory?

Fields marked * on our forms are needed for us to respond. Providing your personal data is voluntary, but if you do not, we may be unable to answer your enquiry, prepare a quotation or provide our services.

7. Your rights

You may ask to access the personal data we hold about you and to correct it if it is inaccurate, incomplete or out of date. You may withdraw your consent, ask us to limit how we process your data, ask us to stop direct marketing and, where it applies, ask for your data to be transmitted to another organisation. We will reply within 21 days of receiving your request. A fee permitted by law may apply to access requests.

8. Security and retention

We protect your data with reasonable technical and organisational measures against loss, misuse and unauthorised access. We keep it only for as long as needed for the purposes above and for the record periods that certification and accreditation rules require, and then delete or anonymise it.

9. Data breaches

If a personal data breach occurs, we will notify the Personal Data Protection Commissioner and, where required, the people affected, as the PDPA requires.

10. How to contact us

For access, correction, withdrawal of consent or any question or complaint about your personal data, contact our Data Protection Officer at rita@concb.com or write to Continental Certification Body Sdn. Bhd., D-1-3, Avenue Two, Persiaran Suarasa 3, Bandar Tun Hussein Onn, 43200 Cheras, Selangor, Malaysia. You may also complain to the Personal Data Protection Commissioner of Malaysia.

11. Language and changes

This notice is published in English, Chinese and Malay. If the versions differ, the English version prevails. We may update this notice; the date at the top shows the latest version.