Skip to content
Legal

Privacy Policy & PDPA Notice

Last updated: 8 November 2026

Template notice: This document is placeholder content to help you get started. Have it reviewed by a Malaysian legal professional before launch.

1. Introduction

getKerja Sdn. Bhd. (“getKerja”, “we”, “us”) respects your privacy. This Privacy Notice explains how we process personal data of job seekers who apply through our website (“Candidates”), hiring companies (“Employers”) and visitors in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and its amendments. This notice is available in English and Bahasa Malaysia; in case of inconsistency, the English version prevails.

2. Personal data we collect

  • Candidates (via the application form): name, email, phone number, city/state, CV/résumé, cover letter, LinkedIn or portfolio link, expected salary and notice period, and any personal data inside your CV.
  • Interviews: the email correspondence we exchange with you and notes our recruiters make during online interviews. We do not record interviews without your consent.
  • Employers and enquiries: name, work email, phone, company name and the details you send via our contact form.
  • Everyone: basic device and usage data, IP address (for spam prevention) and cookies. We do not operate user accounts.

We do not ask for sensitive personal data (e.g. religion, health, political opinions) and recommend you do not include your MyKad number or photo in your CV unless an employer specifically requests it.

3. Purposes of processing

  1. To receive and assess your job application and CV.
  2. To contact you by email, including sending a Google Meet link for an online interview.
  3. To share shortlisted applications with the hiring company for the role you applied to.
  4. To send newsletters you have subscribed to (you can unsubscribe anytime).
  5. To verify Employers and prevent fraud, spam and misuse.
  6. To improve our services through aggregated, anonymised analytics.
  7. To comply with legal obligations.

4. Disclosure of personal data

Your application is emailed to our recruitment team. If you are shortlisted, your CV and interview notes are disclosed only to the Employer for that job. We use service providers to run our website, email and video interviews (e.g. hosting, email delivery, Google Workspace / Google Meet) under written contracts, and may disclose data to authorities where required by law. We never sell personal data.

5. PDPA notice — the 7 principles

  • General Principle: we process personal data only with your consent or where otherwise permitted by the PDPA.
  • Notice and Choice: this notice tells you what we collect and why. Providing data is voluntary, but without it we may be unable to process your application.
  • Disclosure: we disclose data only for the purposes stated above, or with your consent.
  • Security: we take practical steps to protect data from loss, misuse, modification and unauthorised access, including encryption in transit and restricted access to our recruitment inbox.
  • Retention: we keep data only as long as necessary for the purposes collected.
  • Data Integrity: we take reasonable steps to keep data accurate, complete and up to date — email us to update your details or send a new CV.
  • Access: you may request access to and correction of your personal data.

Employers who receive candidate data act as independent data users and must process it in compliance with the PDPA, solely for recruitment.

6. Your rights

You may request to access, correct, or delete your data, withdraw consent, or limit processing (including opting out of marketing emails via the unsubscribe link). We respond within 21 days as required by the PDPA. A reasonable fee may apply for data access requests as permitted by regulations.

7. Retention & security

Applications, CVs and related emails are retained for up to 24 months after submission so we can consider you for future remote roles, then deleted. You can ask us to delete them sooner at any time.

8. Cookies

We use essential cookies (e.g. to remember your language and theme), and — with your consent — analytics cookies. You can control cookies in your browser settings.

9. Cross-border transfer

Our service providers may store data outside Malaysia. Where this occurs, we ensure the transfer complies with section 129 of the PDPA and that comparable protection applies.

10. Contact our Data Protection Officer

Data Protection Officer, getKerja Sdn. Bhd., Level 23, Menara Kerja, Jalan Ampang, 50450 Kuala Lumpur.
Email: privacy@getkerja.my · Phone: +60 3-2700 1234