Strend - Mobile App

PRIVACY NOTICE PURSUANT TO

PERSONAL DATA PROTECTION ACT 2010 (“PDPA”)

This Privacy Notice (“Notice”) is issued to all prospective and existing customers, users, suppliers, vendors, independent contractors, and service providers of Tomtek Malaysia Sdn. Bhd. (Company No. 0298931K) and its subsidiaries, including JustTap (collectively referred to as “we,” “our,” or “us”), in compliance with the Malaysian Personal Data Protection Act 2010 (PDPA).


For the purposes of this Notice:


  • “Affiliates” means any enterprise, partnership, company, corporation, or organization related to Tomtek Malaysia Sdn. Bhd. and JustTap as updated from time to time.
  • “Personal Data” refers to information relating directly or indirectly to an identifiable individual, including sensitive information.
  • “Processing” means collecting, recording, storing, organizing, adapting, retrieving, consulting, using, disclosing, or otherwise handling data.

COLLECTION OF YOUR PERSONAL DATA

We collect Personal Data as part of our dealings with you, including but not limited to:

  • Identity Information: Full name, identification/passport number, nationality, date of birth, gender, and ethnicity.
  • Biometric Data: Facial image and biometric facial data collected for identity verification and clock-in / clock-out authentication.
  • Contact Details: Phone number, email address, and mailing address.
  • Employment Information: Job title, resume, certifications, preferences, and work history.
  • Financial Information: Bank account details for payment purposes.
  • Digital Data: Account credentials, IP addresses, device identifiers, and app usage data.
  • Location Data: When you enable location services on your mobile device, we collect and use your location data to facilitate job tracking and send relevant job notifications.
  • Other Information: Photos, videos, and any details you share with us through applications, social media, or other communications.

SOURCES OF PERSONAL DATA

  • Information you provide directly via forms, the JustTap app, or our website.
  • Third-party platforms such as LinkedIn, Facebook, Instagram, and other social media platforms, where consent is given.
  • Events, surveys, and questionnaires organized by us or our Affiliates.
  • Publicly available data, including online directories.
  • Business cards, interactions with consultants or professionals, and credit reference agencies.
  • Other third-party sources, including recruitment agencies and external service providers.

PURPOSES OF PROCESSING YOUR PERSONAL DATA

Your Personal Data will be collected and processed for purposes that include but are not limited to:

  • Facilitating job placements and job application processing through our platform.
  • Verifying your identity through facial recognition technology and NRIC document uploads for attendance tracking and security.
  • Communicating with you regarding job opportunities, services, and updates.
  • Tracking your real-time location during clock-in / clock-out and job related activities to ensure attendance accuracy and optimize job matching.
  • Processing payments, reimbursements, and related financial transactions.
  • Analyzing user preferences to enhance service delivery.
  • Complying with legal and regulatory requirements.
  • Monitoring app usage for fraud prevention, security, and operational efficiency.
  • Sending marketing, promotional, and seasonal communications with your consent.
  • Sharing testimonials, photos, or videos for advertising purposes (where explicitly agreed).

BIOMETRIC AND IDENTIFICATION DATA

We collect and process facial biometric data solely for the purpose of secure identity verification during clock-in and clock-out activities. Facial data is securely encrypted, stored, and used strictly within the scope of attendance and fraud prevention measures. NRIC images or details provided during registration are retained only as long as necessary to comply with onboarding, legal and audit requirements.


You have full control over your biometric and NRIC data and may request deletion subject to legal or operational limitations.

USE OF TRACKING TECHNOLOGY

We utilize tracking technology, including web analytics tools, to gather statistical insights on website traffic and user engagement. These tools help us determine the number of visitors, frequency of visits and usage patterns. However, no individual personal data or IP addresses are collected for this purpose

DISCLOSURE OF PERSONAL DATA

We may share your Personal Data with the following parties:

  • Affiliates and Partners: Including Tomtek Group companies and their employees.
  • Employers: Relevant client companies for job placement purposes.
  • Service Providers: Vendors managing IT, payment, and app-related services.
  • Legal and Regulatory Bodies: Compliance with laws, court orders, and government regulations.
  • Financial Institutions: For payment processing.
  • Marketing Agencies: With your consent, to provide targeted communications

CONSEQUENCES OF NON-PROVISION OF PERSONAL DATA

Provision of your Personal Data is voluntary. However, failure to provide required information may result in:

  • Inability to process your job applications or payments.
  • Limited access to certain services or updates.
  • Non-compliance with legal obligations.

YOUR RIGHTS

You have the right to:

  • Access Your Data: Request a copy of the Personal Data we hold about you.
  • Correct Inaccuracies: Request corrections if your Personal Data is incomplete, inaccurate, or outdated.
  • Withdraw Consent: Opt-out of marketing communications or restrict certain processing activities.
  • Data Deletion: Request the deletion of your Personal Data, subject to legal and contractual obligations.

To exercise these rights, please contact us at:


Contact Email: [email protected]

SECURITY OF YOUR PERSONAL DATA

We implement strict measures to safeguard your Personal Data against unauthorized access, alteration, and misuse, including:

  • Data encryption and secure storage.
  • Access controls for authorized personnel only
  • Regular audits and monitoring of our systems.

DATA RETENTION

We retain Personal Data for as long as necessary to fulfill the purposes outlined in this Notice, comply with legal obligations, and resolve disputes. When no longer required, data will be securely deleted or anonymized.

CHANGES TO THIS NOTICE

We may update this Privacy Notice periodically. Significant changes will be communicated through the JustTap app or our website. Continued use of our Services constitutes acceptance of the revised terms.

LANGUAGE

This Notice is available in English and Bahasa Malaysia. In case of discrepancies, the English version shall prevail.

CONTACT US

If you have questions or concerns regarding this Privacy Notice, please reach out to us:


Tomtek Malaysia Sdn. Bhd.

Contact Email: [email protected]


Last updated: 17.07.2025