YOUTH TRUST FOUNDATION (myHarapan)

PERSONAL DATA PROTECTION NOTICE

Effective Date: [12 August 2026]

myHarapan (Youth Trust Foundation) ("myHarapan", "we", "us" or "our") is committed to protecting the personal data entrusted to us and handling such information responsibly and in accordance with the Personal Data Protection Act 2010 [Act 709] ("PDPA"), its regulations, standards and applicable laws of Malaysia.

This Personal Data Protection Notice ("Notice") explains how myHarapan collects, uses, processes, stores, discloses and protects personal data in connection with our programmes, services, activities, events, research, partnerships and other organisational activities.

By providing your personal data to myHarapan, you acknowledge that you have read and understood this Notice and consent to the processing of your personal data for the purposes described below, subject to applicable laws.

1. PERSONAL DATA THAT WE MAY COLLECT

Depending on your relationship and interaction with myHarapan, we may collect and process personal data including, but not limited to:

  • Full name;

  • Contact details, including telephone number, email address and correspondence address;

  • Identification information, where necessary;

  • Date of birth or age;

  • Gender, where relevant to a programme or activity;

  • Organisational or employment information;

  • Educational and professional information;

  • Information relating to your participation in programmes, workshops, training, events, surveys or other activities;

  • Photographs, videos and other audio-visual materials;

  • Information provided through forms, applications, surveys, interviews, focus group discussions and other engagement activities;

  • Financial or payment information where required for programme administration, reimbursements, grants or other legitimate organisational purposes;

  • Information relating to your organisation, social enterprise, community or project where relevant;

  • Information contained in correspondence or communications with myHarapan; and

  • Other personal data that you voluntarily provide to us or that is reasonably necessary for the purposes described in this Notice.

Where required and permitted by applicable law, myHarapan may also process sensitive personal data for specific and legitimate purposes and subject to the applicable requirements of the PDPA.

2. HOW WE COLLECT PERSONAL DATA

We may collect personal data directly from you or from other legitimate sources, including:

  • Information provided through application, registration, nomination or participation forms;

  • Information provided during programmes, workshops, interviews, focus group discussions, consultations and other engagement activities;

  • Communications with myHarapan by email, telephone, messaging platforms or other channels;

  • Information provided by your organisation, employer, programme partner, referrer or other authorised third party;

  • Information obtained from publicly available sources, where appropriate; and

  • Information generated or collected through your interaction with our website, digital platforms or other services, where applicable.

3. PURPOSES FOR PROCESSING PERSONAL DATA

myHarapan may collect, use and process personal data for purposes including, but not limited to:

  • Administering and delivering our programmes, services, activities and events;

  • Assessing applications, participation, eligibility and programme needs;

  • Communicating with participants, beneficiaries, partners, funders, stakeholders and other relevant parties;

  • Managing programme registration, attendance, logistics and participation;

  • Providing training, mentoring, capacity-building and other support;

  • Conducting research, surveys, interviews, focus group discussions, needs assessments and community engagement;

  • Monitoring, evaluating and measuring programme outcomes and impact;

  • Conducting analysis, reporting and learning activities;

  • Maintaining organisational, programme and financial records;

  • Administering payments, reimbursements, grants, awards or other financial transactions where applicable;

  • Developing partnerships and managing relationships with funders, sponsors, donors, government agencies, corporate partners, community organisations and other stakeholders;

  • Preparing reports, presentations, publications and other communications relating to our activities;

  • Using photographs, videos, testimonials and other materials for legitimate communications, reporting, advocacy, educational and promotional purposes, where applicable and with the appropriate consent where required;

  • Complying with legal, regulatory, contractual and governance requirements;

  • Protecting the rights, property and interests of myHarapan and relevant stakeholders;

  • Managing risks, security and prevention of fraud, misuse or unauthorised activities; and

  • Any other purpose that is reasonably necessary for carrying out our organisational activities and which is communicated to you where required.

4. DISCLOSURE OF PERSONAL DATA

myHarapan may disclose or share personal data, where necessary and appropriate, with relevant parties involved in the delivery, administration or support of our activities.

These may include:

  • Programme partners and collaborators;

  • Funders, sponsors and donors;

  • Government agencies and relevant authorities;

  • Community organisations and social sector organisations;

  • Trainers, facilitators, mentors, consultants, researchers and professional advisers;

  • Service providers supporting our programmes or operations;

  • Technology, communications and data management service providers;

  • Auditors, legal advisers and other professional advisers; and

  • Other parties where disclosure is required or permitted by applicable law or where you have provided the necessary consent.

Where third parties process personal data on our behalf, myHarapan will take reasonable steps to ensure that appropriate measures are in place to protect such data.

5. TRANSFER OF PERSONAL DATA

Where necessary for the purposes described in this Notice, personal data may be transferred to or accessed by relevant parties located within or outside Malaysia, subject to applicable legal requirements.

Where such transfers take place, myHarapan will take reasonable steps to ensure that appropriate safeguards are applied to protect the personal data.

6. SECURITY OF PERSONAL DATA

myHarapan takes reasonable and appropriate steps to protect personal data against unauthorised access, collection, use, disclosure, alteration, loss, misuse, destruction or other forms of unlawful processing.

Access to personal data is limited to authorised personnel and relevant parties who require such information for legitimate purposes.

However, no method of transmission, storage or processing can be guaranteed to be completely secure. myHarapan will continue to take reasonable measures to identify, prevent and respond to risks involving personal data.

7. RETENTION OF PERSONAL DATA

myHarapan will retain personal data only for as long as reasonably necessary for the purposes for which it was collected, or as required or permitted by applicable laws, regulations, contractual obligations and legitimate organisational requirements.

When personal data is no longer required, myHarapan will take reasonable steps to securely delete, destroy or anonymise the information, where appropriate.

8. ACCURACY OF PERSONAL DATA

myHarapan takes reasonable steps to ensure that personal data in our possession is accurate, complete, not misleading and kept up to date where necessary for the purposes for which it is processed.

You are responsible for providing accurate and current information to myHarapan and for informing us when your personal information changes.

9. YOUR RIGHTS

Subject to applicable laws and any relevant exemptions, you may have the right to:

  • Request access to personal data held by myHarapan about you;

  • Request correction or updating of inaccurate, incomplete or outdated personal data;

  • Request further information about how your personal data is being processed;

  • Withdraw consent for certain processing activities, where consent is the applicable basis for processing; and

  • Raise questions, concerns or complaints regarding the processing of your personal data.

Requests may be subject to applicable legal requirements, verification of identity, reasonable administrative procedures and any permitted limitations or exemptions under the law.

10. WITHDRAWAL OF CONSENT

Where the processing of your personal data is based on your consent, you may withdraw that consent by contacting myHarapan.

Please note that withdrawal of consent may affect our ability to provide certain services, administer your participation in a programme or maintain certain aspects of our relationship with you, depending on the circumstances.

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

11. PERSONAL DATA OF THIRD PARTIES

Where you provide personal data relating to another individual to myHarapan, you are responsible for ensuring that you have the necessary authority or consent to provide such information to us and for us to process it for the relevant purposes.

12. PHOTOGRAPHS, VIDEOS AND TESTIMONIALS

myHarapan may document its programmes, events, workshops and activities through photographs, videos, recordings, testimonials and other materials.

Where such materials contain identifiable individuals, myHarapan will handle and use them in accordance with applicable requirements and, where necessary, obtain the appropriate consent.

Such materials may be used for legitimate purposes including programme documentation, reporting, impact communication, publications, presentations, social media, websites and other organisational communications.

13. CHILDREN AND YOUNG PERSONS

Where myHarapan's programmes or activities involve children or young persons, we will take appropriate steps to safeguard their personal data and obtain any consent or authorisation required under applicable laws, policies or programme requirements.

14. CHANGES TO THIS NOTICE

myHarapan may update or amend this Notice from time to time to reflect changes in our activities, data processing practices, applicable laws or regulatory requirements.

The latest version of this Notice will be made available through our official website or other appropriate communication channels.

15. CONTACT US

If you have any questions, requests or concerns regarding this Notice or the processing of your personal data by myHarapan, please contact us through:

Youth Trust Foundation (myHarapan)
Youth Trust Foundation (912397-P)
B-3A-8, Icon City
Jalan SS 8/39, 47300 Petaling Jaya, Selangor.

Email: talk@myharapan.org
Tel No: +60169576618

Last updated: 12 August 2026