Privacy Notice

1. Who we are

The Human Capital is a recruitment and executive search firm at S-23-6, Wisma YNH, Kiara 163, Mont Kiara, 50480 Kuala Lumpur. This notice is given under section 7 of Malaysia's Personal Data Protection Act 2010 (PDPA) and explains how we handle your personal data.

2. What we collect

Candidates: your name and contact details, CV, employment history, qualifications, current and expected salary, and notes from our conversations with you.
Clients: the names, job titles and contact details of the people we work with at your organisation.
Website visitors: what you type into our enquiry form, and basic technical data such as browser type and pages visited.

We collect this from you directly, from your public professional profiles, and from referees you nominate.

3. Why we use it

To consider you for roles and contact you about them.
To present your profile to an employer, only after you have agreed to that specific role.
To run searches and provide our services to clients.
To answer enquiries sent through this website.
To meet our legal and regulatory obligations.

We share candidate data with a prospective employer only with your consent for that role. We may also use carefully chosen service providers, such as email and secure cloud storage, who process data on our instructions. We do not sell personal data.

Where data is stored or processed outside Malaysia, we take steps so that it is protected to a standard no lower than the PDPA requires.

5. How long we keep it

We keep personal data only as long as it is needed for the purposes above, or as the law requires, and then delete or anonymise it. You can ask us to delete your data sooner.

6. How we protect it

Access is limited to the consultants who need it. Data is held in access controlled systems, and we ask candidates not to send identity documents or payslips through open forms or messaging until a role requires them.

7. Your rights

Ask for a copy of the personal data we hold about you.
Ask us to correct data that is wrong or out of date.
Withdraw your consent, or ask us to stop contacting you.
Ask us to delete your data.

To make a request, email [email protected] with the subject "Personal data request". We will reply within 21 days, as the PDPA requires.

8. Language and contact

If this notice is provided in English and Bahasa Malaysia and the two differ, the English version applies. Questions or complaints about how we handle personal data can be sent to the address above. We may update this notice from time to time and will post the latest version on this page.

Last updated: November 2026