Privacy Notice

In this notice, “personal data” means any information that relates to you and from which you can be identified, directly or indirectly. It includes your name, identity card or passport number, contact number, postal address, email address, organisation and designation, nationality or country of residence, NAWEM membership number, fee category, payment status, IP address and any other information you provide to us.

We do not ask for sensitive personal data (such as health information or religious belief) except where you choose to provide it, for example dietary or accessibility requirements, in which case it is used only to meet that requirement.

Directly from you when you register for the Forum, register your interest, subscribe to updates, email or telephone the secretariat, take part in a survey, or attend the Forum and its social functions.

From your organisation when it registers you as part of a corporate or group booking, or from NAWEM when we verify a membership number for the member rate.

From our appointed professional conference organiser, Place Borneo Sdn Bhd, and from publicly available sources such as your organisation’s website or professional profile, where needed to administer the Forum.

Automatically when you use nif2027.com, through cookies and similar technologies described in section 8.

To process your registration, fee payment, invoice and receipt, and to issue your badge, delegate list entry and any invitation letter you request.

To communicate with you about the Forum by email, SMS, telephone or messaging service: confirmations, programme updates, logistics, changes and post-event materials.

To administer the Forum on site, including registration, security, seating, catering, dietary and accessibility arrangements, and the marketplace and B2B matching activities.

To send you information about future NAWEM and NIF events, programmes and activities, and about our partners’ relevant offers, where you have agreed to receive them.

To conduct research, surveys and analysis so that we can improve the Forum and our services.

To detect and prevent fraud, misuse and security incidents, and to verify eligibility for member and early-bird rates.

To comply with legal, regulatory, tax and audit obligations, and to establish, exercise or defend legal claims.

You are not obliged to provide personal data. However, the fields marked as required on our forms are necessary for the purposes above, and if you do not provide them we will be unable to complete your registration, take payment, or contact you about the Forum.

We may disclose your personal data to: NAWEM, as host of the Forum; Place Borneo Sdn Bhd, our professional conference organiser; the venue and its security and catering providers; the sponsors and partners named in the programme, where you have agreed; and our professional advisers, auditors and insurers.

We use service providers that process personal data on our behalf: Stripe, Inc. for card payments; Google LLC for website analytics; Microsoft Corporation for website usage analytics; our web hosting and email delivery providers; and Gravity Forms for form handling. These providers may only use your data to provide their service to us.

We may disclose personal data where required by law, court order, or a regulatory or law-enforcement authority, or where necessary to protect the safety of delegates and staff.

A delegate list containing name, organisation and designation (but no contact details) may be shared with delegates, speakers and sponsors to facilitate networking. You may ask to be excluded by emailing the secretariat before the Forum.

We do not sell personal data.

Some of the service providers in section 5 store or process data on servers outside Malaysia, including in Singapore, the United States and the European Union. Where this happens we take reasonable steps to ensure the data is protected to a standard comparable to the PDPA, including contractual data-processing terms with the provider.

Card payments are made through Stripe. Your card number and security code are entered on Stripe’s secure checkout and are never received or stored by us. We receive only confirmation of payment, the last four digits of the card, and the billing name and email needed to issue your receipt. Stripe’s own privacy policy applies to its processing.

nif2027.com uses cookies and similar technologies. Strictly necessary cookies keep the site and its forms working, including those set by WordPress, Gravity Forms and Stripe checkout, and cannot be switched off.

Analytics and performance cookies are used only with your consent. When you first visit, a banner asks whether to allow them. If you accept, we use Google Analytics 4 to measure visits, pages viewed, traffic sources and registrations, and Microsoft Clarity to understand how visitors use the site through anonymised session recordings and heatmaps. Google Analytics is configured with Google Consent Mode, so no analytics cookies are set unless you accept.

If we enable advertising measurement (for example a Meta Pixel to measure the effectiveness of social-media campaigns) it will likewise load only after you accept, and this notice will be updated to say so.

Your choice is stored in a cookie named mtsc_consent for 12 months. You can change or withdraw it at any time using the Cookie settings link in the site footer, or here: Cookie settings. Declining does not affect your ability to register.

Google and Microsoft may transfer and process this data outside Malaysia. Their privacy policies and opt-out tools are available at policies.google.com/privacy and privacy.microsoft.com.

The Forum is photographed and may be filmed or live-streamed. By attending, you agree that your image, likeness and voice may be captured and used by NAWEM, Tanoti Sdn Bhd and their partners in reports, publications, websites and social media relating to the Forum and future events, without payment. If you do not wish to be photographed, please tell the registration desk on arrival so that we can make reasonable arrangements.

Registration, payment and invoice records are kept for seven years after the Forum to meet Malaysian tax, accounting and audit requirements.

Registration-of-interest and enquiry records are kept until the Forum has concluded and for 12 months afterwards, unless you have agreed to receive information about future events.

Marketing contact details are kept until you withdraw consent or unsubscribe.

Website analytics data is retained by Google Analytics for up to 14 months and by Microsoft Clarity for up to 12 months, after which it is deleted or aggregated.

We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure and alteration. The website is served over HTTPS, the WordPress installation is protected by a web application firewall and regular backups, access to registration data is limited to staff and contractors who need it, and payment card data is handled entirely by Stripe, a PCI DSS Level 1 service provider.

No transmission over the internet is completely secure. If we become aware of a security breach affecting your personal data we will notify you and the Personal Data Protection Commissioner as required by law.

Under the PDPA you have the right to request access to the personal data we hold about you and to request correction of data that is inaccurate, incomplete, misleading or out of date.

You have the right to withdraw consent to the processing of your personal data, to limit the processing of your personal data, and to require us to stop processing it for direct marketing. You can unsubscribe from marketing emails using the link in any email or by writing to the secretariat.

To exercise any of these rights, write to the secretariat at the address in section 16. We will respond within 21 days of receiving a valid request, as required by the PDPA. We may need to verify your identity before acting, and the PDPA permits us to charge a prescribed fee for an access request.

Withdrawing consent or limiting processing may mean that we can no longer provide some services to you, for example completing your registration or admitting you to the Forum.

The Forum and nif2027.com are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided personal data to us, please contact the secretariat and we will delete it.

nif2027.com links to websites operated by NAWEM, our partners, sponsors and service providers. This notice does not cover those websites, which have their own privacy policies.

We may revise this notice from time to time, for example to reflect changes in the law or in our services. The current version is always published at nif2027.com/privacy/ with the date of the last update. Where a change materially affects how we use data you have already provided, we will notify registered delegates by email.

This notice is issued in English. A Bahasa Malaysia version is available on request from the secretariat. If there is any inconsistency between the two, the English version prevails.

For questions about this notice, or to exercise your rights, contact the NIF2027 Secretariat at events@nawem.org, or write to Tanoti Sdn Bhd, attention NIF2027 Secretariat. Please quote your registration reference if you have one.

You may also complain to the Personal Data Protection Commissioner of Malaysia (Jabatan Perlindungan Data Peribadi) at pdp.gov.my.