Privacy Policy

1. Introduction

Givora ("we", "us", "our") is committed to handling personal data responsibly and transparently. This Privacy Policy explains what personal data we collect from visitors to our website and from participants in our educational programmes, how we use it, and what rights you have in relation to that data.

This policy applies to all data collected through our website at givora.cyou, our contact forms, and our programme enrolment processes. We are based at Jalan Bukit Meldrum, 80300 Johor Bahru, Johor, Malaysia.

If you have questions about how we handle your information, please contact us at [email protected].

2. Data We Collect

2.1 Information You Provide

When you submit an enquiry form, enrol in a programme, or contact us directly, we may collect:

• Full name
• Email address
• Phone number (if provided)
• Organisation name and role (if provided)
• Message content from enquiry forms

2.2 Automatically Collected Data

When you visit our website, certain data may be collected automatically, including:

• Browser type and version
• Pages visited and time spent on each
• Referring website address
• IP address (anonymised where possible)
• Cookie identifiers (see Section 5)

2.3 Legal Basis for Processing

We process personal data on the following bases under the Personal Data Protection Act 2010 (PDPA) of Malaysia:

• Consent: When you submit a form or agree to cookie use.
• Contractual necessity: When processing is needed to deliver a programme you have enrolled in.
• Legitimate interests: For website analytics and improving our services, where these interests are not overridden by your rights.

2.4 Retention Periods

Enquiry data is retained for up to 24 months from the date of initial contact. Programme participant data is retained for up to 5 years from the date of programme completion, to support any follow-up questions or record-keeping requirements. Cookie data retention varies by cookie type — see our Cookie Policy for details.

3. How We Use Your Data

We use the data we collect for the following purposes:

• Responding to enquiries and providing requested information about our programmes
• Processing enrolments and delivering programme content
• Sending relevant programme materials and updates to enrolled participants
• Improving our website and programmes through aggregated analytics
• Complying with applicable legal obligations

We do not use your personal data for automated profiling or for selling to third parties. We do not send unsolicited marketing communications. Any programme-related communication we send will relate directly to a programme you have shown interest in or enrolled in.

4. Data Sharing

We do not sell or rent your personal data. We may share data with the following in limited circumstances:

• Service providers: Third-party tools used to deliver our website and programmes (such as hosting providers or email delivery services), under data processing agreements.
• Analytics services: Aggregated, anonymised data may be shared with analytics providers to help us understand website usage.
• Legal requirements: If required by law or in response to a lawful request from a competent authority in Malaysia.

5. Cookies

Our website uses cookies to support basic functionality and to help us understand how the site is being used. We do not use cookies to identify you personally without your consent. You can manage your cookie preferences at any time via our Cookie Policy page.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
• Right to limit processing: You may request that we stop using your data for purposes beyond what is strictly necessary.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days of receiving your request.

If you believe we have not handled your data appropriately, you may raise a complaint with the Personal Data Protection Department of Malaysia (JPDP).

7. Data Security

We take reasonable technical and organisational measures to protect the personal data we hold against unauthorised access, loss, or disclosure. This includes secure hosting, access controls, and regular review of our data handling practices.

In the event of a data breach that poses a significant risk to individuals, we will notify affected parties and the relevant authority as required by applicable law.

8. Third-Party Links

Our website may include links to external websites and resources. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit.

9. Children's Privacy

Our programmes are designed for adults working in nonprofit organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us so we can remove it promptly.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated date at the top of this page will reflect the most recent revision. We encourage you to review this policy periodically. Continued use of our website or programmes after an update constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions or requests, please contact:

• Givora
• Jalan Bukit Meldrum, 80300 Johor Bahru, Johor, Malaysia
• Email: [email protected]
• Phone: +60 18-706 3524