Privacy Policy & Personal Data Protection Notice

Last Updated: 12 August 2026

INTERNATIONAL ZHENG HE RESEARCH ACADEMY SDN BHD (“we”, “us”, “our” or the “Academy”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy and Personal Data Protection Notice explains how we collect, use, disclose, store and protect personal data when you visit or interact with zhengheintl.org (“Website”), contact us, make an enquiry, register for an activity, purchase tickets, make a booking or otherwise communicate with us.

This Notice is intended to be read together with our Terms & Conditions.

1. Who We Are

INTERNATIONAL ZHENG HE RESEARCH ACADEMY SDN BHD
Company Registration No.: 202101007324 (1407623-X)
Website: zhengheintl.org

For the purposes of applicable Malaysian personal data protection laws, we are responsible for the personal data that we collect and process in connection with our Website and related activities.

2. Personal Data We May Collect

Depending on how you interact with us, we may collect personal data such as:

Full name;
Contact number;
Email address;
Mailing or correspondence address;
Organisation or company information;
Booking or ticket information;
Enquiry details;
Payment or transaction information where applicable;
Information provided when registering for events or activities;
Photographs or other media where you voluntarily provide them or where they are captured during events;
Information contained in communications with us; and
Technical information relating to your use of our Website.

We may also automatically receive certain technical information when you access the Website, such as IP address, browser type, device information, operating system, referring pages and information concerning how you interact with the Website.

3. How We Collect Personal Data

We may collect personal data through:

Forms submitted through the Website;
Contact or enquiry forms;
Ticket purchases or booking systems;
Event registrations;
Venue rental enquiries;
Email, telephone or other communications;
Surveys or feedback forms;
Applications or submissions;
Cookies and similar technologies; and
Other lawful interactions with us.

Where practical, we will indicate which information is required and which information is optional.

4. Purposes of Collection and Processing

We may collect and process your personal data for purposes including:

Responding to enquiries and requests;
Processing bookings, registrations and ticket purchases;
Managing events, exhibitions and activities;
Providing venue rental or related services;
Communicating with you about your bookings or enquiries;
Providing information about our programmes, activities and services;
Managing customer and visitor relationships;
Processing payments where applicable;
Maintaining records and administrative functions;
Improving our Website, services and user experience;
Maintaining Website security and preventing fraud or misuse;
Complying with applicable legal and regulatory requirements; and
Other purposes that are reasonably necessary for our operations or that you have otherwise consented to.

We will not use your personal data for unrelated purposes without a lawful basis or, where required, your consent.

5. Consent

Where required by applicable law, we will obtain your consent before collecting or processing your personal data.

By voluntarily submitting personal data to us, you acknowledge that your information may be collected and processed for the purposes described in this Notice, subject to applicable legal requirements.

Where processing is based on consent, you may withdraw your consent by contacting us, although withdrawal may affect our ability to provide certain services or respond to certain requests.

6. Disclosure of Personal Data

We may disclose or provide access to personal data, where necessary and permitted by law, to:

Our employees and authorised representatives;
Service providers and contractors assisting us with Website operation;
Website hosting and technology providers;
Ticketing, booking or payment service providers;
Event or venue service providers;
Professional advisers;
IT, security and technical support providers;
Government authorities, regulators or law enforcement agencies where required or permitted by law; and
Other parties where you have provided consent or where disclosure is otherwise permitted or required by law.

We do not sell your personal data to third parties.

7. Payment Information

Where online payments are available, payment transactions may be processed by third-party payment service providers.

We may receive transaction-related information necessary to confirm and administer your payment or booking. Your complete payment card or banking information may be processed directly by the relevant payment provider rather than stored by us.

You should review the privacy policy and terms of the relevant payment provider before completing a transaction.

8. Cookies and Similar Technologies

Our Website may use cookies and similar technologies to improve functionality, security and user experience.

Cookies may be used to:

Enable essential Website functions;
Remember user preferences;
Understand how visitors use the Website;
Improve Website performance;
Monitor Website security; and
Support analytics or other Website functionality.

Third-party services used on the Website may also place their own cookies or similar technologies.

You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of the Website.

9. Analytics and Third-Party Services

We may use third-party tools and services to understand Website traffic, improve performance and provide relevant functionality.

Depending on the services currently installed on the Website, these may include analytics, embedded media, maps, social media, security, booking, payment or other technology services.

These third parties may process certain technical or personal information in accordance with their own privacy policies.

10. Direct Marketing and Communications

Where permitted by applicable law, we may use your contact information to provide information about our activities, programmes, events, exhibitions or services.

Where consent is required, we will obtain appropriate consent before sending marketing communications.

You may request to stop receiving marketing communications at any time by contacting us or using the unsubscribe mechanism provided in the relevant communication.

11. Retention of Personal Data

We will retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling legal, accounting, administrative or reporting requirements.

When personal data is no longer required, we will take reasonable steps to delete, destroy or anonymise it in accordance with our applicable procedures and legal obligations.

12. Security of Personal Data

We take reasonable and appropriate measures to protect personal data against:

Unauthorised access;
Unauthorised disclosure;
Loss;
Misuse;
Alteration; and
Destruction.

However, no electronic transmission, website or storage system can be guaranteed to be completely secure.

You should also take reasonable precautions when transmitting personal information over the internet.

13. Accuracy of Personal Data

We rely on the information provided by you.

You are responsible for ensuring that personal data submitted to us is accurate, complete and up to date.

If any information changes, you may contact us to request that your information be updated or corrected.

14. Your Rights

Subject to applicable laws and any relevant exemptions, you may have rights relating to your personal data, including the right to:

Request access to personal data held by us;
Request correction of inaccurate or incomplete personal data;
Withdraw consent where processing is based on consent;
Request information about how your personal data is being processed; and
Make enquiries or complaints concerning our handling of your personal data.

Requests may be subject to applicable legal requirements, verification procedures and reasonable administrative requirements.

15. Cross-Border Data Transfers

Some of our technology, hosting, communication, payment, booking or other service providers may operate outside Malaysia.

Where personal data is transferred outside Malaysia, we will take reasonable steps to ensure that such transfers are handled in accordance with applicable personal data protection requirements.

16. Children's Privacy

Our Website is not specifically directed at children.

Where an individual under the applicable age of consent provides personal data, we encourage a parent or legal guardian to be involved in the relevant interaction.

If you believe that a child has provided personal data to us without appropriate consent, please contact us so that we can review the matter and take appropriate action where necessary.

17. Links to Other Websites

Our Website may contain links to third-party websites.

This Privacy Policy does not apply to those external websites. We encourage you to review the privacy policies of any third-party website you visit.

We are not responsible for the privacy practices, security or content of third-party websites.

18. Photographs, Events and Public Activities

The Academy may organise exhibitions, cultural programmes, conferences, public activities and other events where photography or video recording may take place.

Images or recordings captured during public events may be used for legitimate institutional, educational, cultural, archival, promotional or communication purposes, subject to applicable laws and circumstances.

Where specific consent is required, we will seek the appropriate consent.

If you have concerns about the use of an identifiable photograph or recording involving you, please contact us.

19. Data Breaches and Security Incidents

If we become aware of a personal data security incident that requires notification under applicable law, we will take appropriate steps in accordance with the applicable legal and regulatory requirements.

This may include assessing the incident, taking remedial measures and making any required notifications.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Website, services, technology, legal requirements or personal data processing practices.

Any updated version will be published on this page together with a revised “Last Updated” date.

We encourage you to review this page periodically.

21. Contact Us

If you have questions about this Privacy Policy, wish to request access or correction of your personal data, withdraw consent, or raise a privacy-related concern, please contact us using the contact information published on our Website.

INTERNATIONAL ZHENG HE RESEARCH ACADEMY SDN BHD
Company Registration No.: 202101007324 (1407623-X)
Website: zhengheintl.org

Please include sufficient information for us to understand and respond to your request.

22. Applicable Law

This Privacy Policy shall be governed by the applicable laws of Malaysia, including applicable personal data protection legislation.