Privacy Policy

1. Information We Collect

The IISSA Alumni Association (IAA) may collect personal information including your full name as stated on your IC or passport, IC or passport number, email address, role, event registrations, volunteer applications, shop orders, purchase history, collection details, payment receipts and references, payment verification records, and communications submitted through the portal. If you choose to complete the alumni census, IAA may also collect optional Malaysian residential location details for emergency and welfare outreach.

2. How We Use Information

• Manage portal accounts.
• Process event registrations.
• Process volunteer applications.
• Verify programme payments.
• Process merchandise orders, payments, collection, returns, exchanges, and refunds.
• Generate certificates, official letters, and other official portal records using the information submitted by users.
• Send programme announcements and updates.
• Contact alumni who may be affected by floods, disasters, or urgent welfare situations, where relevant information is provided.
• Improve portal services and operations.

3. Information Sharing

IAA does not sell, rent, or trade personal information. Information may only be shared where necessary with authorised committee members, the treasurer, merchandise suppliers, collection or delivery providers, portal hosting and email providers, professional advisers, or authorities where required by law.

4. PDPA Compliance

IAA processes personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Users are encouraged to submit accurate information because official documents generated through the portal may rely on the data provided.

5. Data Security

Reasonable technical and administrative safeguards are implemented to protect user information against unauthorised access or misuse.

6. Retention

IAA retains shop transaction records for at least three years and may retain financial, dispute, or statutory records for a longer period where required by applicable law. Information that is no longer reasonably required will be securely deleted or anonymised.

7. User Rights and Contact

Users may request access to, correction of, or deletion of their personal information where legally permissible. Privacy questions, correction requests, or complaints may be submitted through IAA's official portal or association contact channels.