Privacy Notice

Who holds your data

badgeGrit is an early-stage product built in Penang. It isn't an incorporated company yet, so the data controller is Neoh Yee Ling, at badgegrit.com. If that changes, we'll tell you before your details move anywhere.

What we collect

Only what you type into the beta form — your name, work email, organisation and type, rough certificate volume, what you told us about your current process, and the features you ticked. When you submit, we also record your IP address and browser, purely to block spam.

No analytics, no advertising, no tracking cookies. Please don't put IC numbers, bank details or health information in the free-text box — we don't want them.

What we do with it

Assess your application, reply to you, and work out what training providers actually need. Nothing else. We won't sell it, and we won't add you to a marketing list.

You're giving it voluntarily, by consent — but without it we can't assess or answer your application.

Who else touches it

Our Malaysian hosting provider stores the database. Google receives your IP and browser details through the reCAPTCHA check on the form and through the fonts this page loads — that data leaves Malaysia, under the Google Privacy Policy. Otherwise, only us, and anyone the law compels.

How long we keep it

For as long as you're in the beta. If you don't join, or the programme ends, we delete your application within twelve months — sooner if you ask.

Your rights

Email hello@badgegrit.com to get a copy of what we hold, correct it, limit how we use it, or have it deleted. We'll action it within 21 days, free. Unhappy with how we handle it? Tell us first — then the Personal Data Protection Department (JPDP) if we don't put it right.