Privacy Notice for PetraTworks

The following definitions explain key terms used in this privacy notice to assist users in understanding the scope and application of data handling practices.

We collect personal data that is necessary to provide the recruitment platform and related services. Data originates from candidates, employers, and automated logs generated during platform use. Collection is limited to information relevant to recruitment, identity verification, communication, and service administration.

Users may provide data directly when they register, submit profiles or applications, respond to messages, or interact with employers. Typical categories include:

• Identity and contact details: full name, email address, phone number, current address, and preferred contact information.
• Professional details: CV or resume, employment history, qualifications, certifications, role preferences, and career summaries.
• Employer information: company name, business contact details, recruitment officer names, job descriptions and job posting information.
• Application and recruitment data: application forms, interview notes, recruiter evaluations, and correspondence between candidates and employers.
• Verification and compliance data: identity documents, employment references, and any background check information when expressly provided and permitted.
• Support and feedback: messages submitted through support channels, feedback forms, and survey responses.

When users interact with the platform, PetraTworks automatically collects technical and usage data to support operation and security of the service. Common items include:

• Connection and device data: IP address, device type, browser version, and operating system.
• Usage metrics: pages visited, time on site, clicks, search queries, and feature usage statistics.
• Log data: server logs recording requests, timestamps, and error records used for troubleshooting and performance monitoring.
• Location data: coarse geolocation derived from IP address for regional content and compliance purposes.
• Cookies and tracking identifiers used to maintain sessions and remember preferences.
• Security events and audit trails required to detect and respond to misuse or unauthorized access.

PetraTworks may share personal data with third-party service providers that perform functions on our behalf. These vendors are contracted to process data in accordance with this notice and applicable data protection standards.

• Cloud hosting and infrastructure providers that store and process platform data.
• Payment processors and business services for billing and invoicing where paid services are used.
• Analytics and performance vendors that provide aggregated usage reporting and system monitoring.

We process personal data for legitimate operational reasons necessary to provide and improve the service. The main purposes include:

• Provision of the recruitment service: hosting profiles, enabling applications, and facilitating communications between candidates and employers.
• Candidate and employer verification: assessing credentials and maintaining accurate records for recruitment processes.
• Platform maintenance and security: monitoring for abuse, troubleshooting issues, and protecting systems from unauthorized access.
• Billing and account administration: processing invoices, subscriptions, and service-related communications.
• Service improvement and analytics: understanding usage patterns to enhance features and user experience through aggregated, anonymized analysis.
• Regulatory compliance: responding to lawful requests from regulators and cooperating with legal processes where required.
• Communications: sending transactional messages, role alerts, and information about account status or changes to terms.
• Job distribution and promotion: publishing job listings to connected channels and third-party job boards when requested by an employer.

Depending on the jurisdiction and the nature of the processing, PetraTworks relies on one or more lawful bases for processing personal data, including:

• Performance of a contract: processing necessary to provide recruitment services agreed with an employer or candidate.
• Consent: where users explicitly consent to processing for specific purposes, such as receiving marketing communications.
• Legal obligation: processing required to comply with applicable laws or regulatory requests.
• Legitimate interests: processing necessary for platform security, fraud prevention, and operational administration, balanced against individual rights.

PetraTworks uses cookies and similar technologies to support core platform functions, remember preferences, and collect analytics data. Cookies are categorized by purpose and duration.

Types include session cookies that expire after a visit, persistent cookies that remain for a defined period, and third-party cookies used by analytics and advertising partners where applicable.

Categories include strictly necessary cookies for site operation, performance and analytics cookies, and functional cookies that store preferences. Marketing cookies are used only with consent.

Users can manage cookie preferences via the cookie banner and browser settings. Disabling certain cookies may affect platform functionality such as session management or saved preferences.

View the full cookie policy

PetraTworks shares personal data only as required to deliver services, comply with legal obligations, or protect rights. Disclosure is limited to the minimum necessary for each purpose.

• Service providers engaged to perform platform operations, hosting, analytics, and payments.
• Employers and recruiters when a candidate applies or opts to share profile information in response to a job posting.
• Regulatory and law enforcement authorities when required by law or to respond to lawful requests.
• Third parties involved in verification or background checks, subject to user consent and applicable legal requirements.
• Business partners for job distribution, where an employer has requested publication to external job boards or recruitment channels.
• Agents and advisors engaged to provide legal, tax, or compliance advice to PetraTworks in relation to operations.

Data processed by PetraTworks may be transferred or accessed by service providers located outside Malaysia where necessary for operations. Transfers are managed to ensure an appropriate level of protection.

When transfers occur, PetraTworks implements safeguards such as contractual data processing agreements, technical controls including encryption, and where applicable, recognized transfer mechanisms to protect personal data.

Retention periods are based on the purpose of processing and legal or regulatory requirements. PetraTworks retains personal data for as long as necessary to provide services and to meet compliance obligations.

Account data for active users is retained for the duration of the account. Inactive accounts may be retained for a defined period to allow recovery or to meet audit and compliance needs.

Communications between candidates and employers, and support correspondence, are retained for operational purposes and may be preserved for a reasonable period to resolve disputes or comply with legal obligations.

System logs and security records are retained for a limited period required for incident contribute, troubleshooting, and security auditing.

Users may request deletion of their personal data in accordance with applicable law. Deletion requests are processed subject to retention requirements for legal or contractual reasons and after necessary verifications.

PetraTworks applies administrative, technical, and organizational measures to protect personal data against unauthorized access, loss, or misuse. Measures are periodically reviewed and updated to reflect industry practices and changes in risk.

• Encryption in transit using TLS and encryption at rest for stored sensitive information where applicable.
• Access controls and role-based permissions to limit internal access to personal data only to authorized personnel.
• Regular backups, security monitoring, and incident response procedures to detect and address potential security events promptly.

Subject to applicable law, users have rights regarding their personal data. PetraTworks provides mechanisms to exercise these rights and responds to requests in accordance with legal timeframes.

• Right of access: obtain a copy of personal data processed by PetraTworks and information about processing purposes.
• Right to rectification: request correction of inaccurate or incomplete personal data.
• Right to erasure or restriction: request deletion or restriction of processing where permitted by law.
• Right to object and data portability: object to certain processing activities and request transfer of personal data in a structured, machine-readable format where applicable.
• Request restriction of processing: You may ask PetraTworks to limit processing of your personal data where the accuracy of the data is contested, the processing is unlawful, or PetraTworks no longer needs the data but you require it for the establishment, exercise or defence of legal claims.
• Object to processing: You may object to processing of your personal data where processing is based on PetraTworks' legitimate interests or for direct marketing purposes. PetraTworks will assess objections in line with applicable law and will suspend processing where required while it considers the matter.
• Withdraw consent: When processing is based on consent, you can withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal and will not affect processing based on other legal grounds.
• Lodge a complaint: If you consider PetraTworks has not handled your personal data in accordance with applicable data protection law, you may lodge a complaint with a relevant supervisory authority in your jurisdiction. PetraTworks will cooperate with any such authority where appropriate.

PetraTworks complies with applicable data protection principles and, where relevant, applies safeguards aligned with international standards such as the EU General Data Protection Regulation (GDPR). This section explains how those principles are reflected in our practices for individuals whose data may be subject to GDPR requirements.

GDPR provisions may apply if you are an EU resident or if PetraTworks processes personal data subject to EU law. Where GDPR applies, PetraTworks observes rights granted by the regulation, including access, rectification, erasure, restriction, portability and objection, in accordance with the scope and limits set by law.

• Lawful basis: PetraTworks processes personal data only where there is a lawful basis such as contractual necessity, compliance with legal obligations, legitimate interests, or consent when required.
• Data minimisation: PetraTworks limits collection to data necessary for specified purposes like recruitment matching, employer screening and platform administration, and retains information only as required for those purposes.
• Security measures: PetraTworks uses administrative, technical and organisational controls to protect personal data against unauthorised access, alteration, disclosure and destruction.
• Transfers outside the EU: Where personal data is transferred outside the EU, PetraTworks implements appropriate safeguards such as standard contractual clauses or other mechanisms permitted by law to protect data in transit and at rest.

If you believe PetraTworks has processed your personal data in breach of applicable data protection law, you may contact our data protection contact listed below. You may also file a complaint with a supervisory authority in your country of residence. PetraTworks may request additional information to contribute and will record and track complaints to resolution.

To exercise your rights (access, rectification, erasure, restriction, portability or objection), submit a request to PetraTworks using the contact details below. To protect your privacy, PetraTworks may request verification information before fulfilling requests. We aim to provide a clear response that explains any action taken or reasons for refusal under applicable law.

[email protected]

PetraTworks will acknowledge receipt of a verified rights request within a reasonable period and will respond in accordance with applicable law, typically within one month. Complex requests or those requiring additional verification may take longer; PetraTworks will inform you in such cases and provide a timeline.

PetraTworks may send marketing messages about recruitment services, job alerts, and professional resources where you have consented or where such communications are permitted by law. Marketing emails and SMS will provide clear ways to opt out. PetraTworks uses professional mailing systems and tracks delivery metrics to manage campaigns responsibly.

To stop receiving marketing communications, use the unsubscribe link in any marketing email or contact PetraTworks at the address below. Opt-out requests are processed promptly; transactional messages required to provide the service may still be sent.

PetraTworks services are designed for job seekers and employers and are not directed to children. PetraTworks does not knowingly collect personal information from persons under 13. If PetraTworks becomes aware that it has collected such information without parental consent, it will take steps to delete it as required by applicable law.

PetraTworks may include links to third-party websites and services for employer tools, background checks, or professional resources. These third parties have their own privacy practices, and PetraTworks is not responsible for their content or privacy handling. Review third-party policies before providing personal information.

PetraTworks shares personal data only as required to deliver services, comply with legal obligations, or protect rights. Disclosure is limited to the minimum necessary for each purpose.

View the full cookie policy

PetraTworks may update this privacy information to reflect legal, regulatory or operational changes. Material changes will be communicated through PetraTworks.digital or other reasonable means. Please review periodically to stay informed of how PetraTworks handles personal data.