Issued under the Personal Data Protection Act 2010 (Malaysia). Last updated: this notice is reviewed periodically — the version in effect is the one published here.
This notice explains how INFINITY HUB (SSM: 202603190379) collects, uses, and protects personal data through INFINITY HR & Payroll System, the HR and payroll system described on this site, and its stationery shop. It applies to:
Depending on how INFINITY HR is used, this may include:
This notice does not cover data about minors — INFINITY HR is a workplace HR system and is not directed at, or knowingly used to collect data from, children.
Personal data is processed to:
Where processing relies on consent rather than another legal basis, consent is obtained at the relevant point of collection — for example, when a licensed customer's administrator first enters an employee's details into INFINITY HR (obtained by the employer as data controller, per Section 5), or when a shop customer places an order. Consent can be withdrawn at any time by contacting the relevant party under Section 12 — an employee should approach their employer first, since withdrawing consent for HR data processing may affect the employer's ability to administer that employee's pay and statutory contributions.
For HR and payroll data, INFINITY HUB acts as a data processor — the licensed employer using INFINITY HR is the data controller and remains responsible for the personal data of their own employees, including obtaining any consent required and responding to their employees' data subject requests in the first instance. The terms of this relationship for each licence are set out in that licence's Data Processing Agreement.
Personal data may be disclosed to:
Personal data is not sold, and is not disclosed to third parties for their own marketing purposes.
Personal data is not knowingly transferred outside Malaysia, except where a hosting or infrastructure provider under Section 6 operates servers located outside Malaysia. Where that happens, INFINITY HUB takes reasonable steps to ensure the data continues to receive a standard of protection comparable to the PDPA 2010, consistent with Section 129 of the Act governing transfers of personal data outside Malaysia.
Access to personal data within INFINITY HR is restricted by account-based access controls, so an employee's HR data is only visible within their own employer's licensed account. Administrative access to the underlying system is limited to authorised personnel. No method of storage or transmission is completely secure, but reasonable technical and organisational measures are taken to protect personal data against loss, misuse, and unauthorised access. In the event of a personal data breach likely to affect data subjects, affected licensed customers are notified without undue delay in line with the Data Processing Agreement for their licence.
Personal data is retained for as long as the licence under which it was collected remains active, and afterward only as long as needed to meet legal, regulatory, or accounting retention requirements (Malaysian payroll and statutory records are commonly required to be kept for at least 7 years). Data is deleted or anonymised once no longer required.
Under the PDPA 2010, a data subject has the right to:
Employees should direct these requests to their own employer (the data controller) in the first instance, since the employer manages the employee's HR account. Licensed customers and shop customers can contact INFINITY HUB directly using the details in Section 12. A reasonable fee may apply to an access request, and a response is provided within 21 days as required by the PDPA 2010.
A complaint about how personal data has been handled should first be raised with the relevant data controller — an employee's own employer, or INFINITY HUB directly for licensed-customer or shop-customer data (see Section 12). If a complaint is not resolved satisfactorily, it can be referred to the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi, JPDP), Ministry of Communications, Malaysia.
Questions, access requests, correction requests, or complaints relating to this notice can be sent to:
INFINITY HUB
17, Jalan Wawasan 2/4, Pusat Bandar Puchong 2, 47100, Puchong, Selangor Malaysia
Email: support@ifhub.app
Phone: +60142338277
This website may use strictly necessary cookies or similar local storage to keep you signed in and remember basic preferences (such as light/dark mode). It does not use these to track you across other websites. If analytics or marketing cookies are ever introduced, this section will be updated to describe them and how to opt out.
Supplying the personal data described above is necessary to use INFINITY HR's HR and payroll functions, or to place an order through the shop — without it, the corresponding service (payroll processing, statutory reporting, order fulfilment) cannot be provided.
This notice may be updated from time to time to reflect changes in how personal data is handled or in applicable law. The current version is always the one published at this page.
INFINITY HR