Pengendali / Operator: Feroce Fitness Centre Sdn Bhd ("Féroce") E-mel / Email: admin@ferocegoldhelloyou.com Perniagaan ditubuhkan / Business established: June 2019 Tarikh kuat kuasa / Effective date: 9 September 2026 (Asia/Kuching — tarikh penerbitan / publication date)
Notis ini disediakan dalam Bahasa Melayu dan Bahasa Inggeris seperti dikehendaki oleh Akta Perlindungan Data Peribadi 2010 dan Piawaian Perlindungan Data Peribadi 2015 / This notice is provided in Bahasa Malaysia and English as required by the Personal Data Protection Act 2010 and the Personal Data Protection Standard 2015.
1. Data yang dikumpul dan sumbernya. Féroce OS ialah platform pentadbiran dalaman. Data peribadi dikumpul daripada borang pendaftaran (diberikan oleh ahli atau ibu/bapa/penjaga bagi bawah umur), rakaman kakitangan terhadap pembayaran luar, dan rekod perniagaan terdahulu. Kategori: nama penuh, No. IC/pasport, tarikh lahir, jantina, telefon/WhatsApp, e-mel, alamat, kenalan kecemasan, penjaga (kanak-kanak), sumber rujukan, matlamat kecergasan, deklarasi kesihatan/perubatan, kehadiran, keahlian/pakej, sesi PT, jualan/invois, butiran pembayaran (kaedah, amaun, tarikh, rujukan; lampiran bukti pilihan) dan rekod pengguna kakitangan (log audit).
2. Maklumat kanak-kanak dan kesihatan (diasingkan). Kanak-kanak: bagi ahli Kids/Junior, data diberikan oleh ibu/bapa/penjaga (nama & telefon penjaga direkod) dengan deklarasi persetujuan; pakej kanak-kanak dikecualikan daripada yuran pendaftaran. Kesihatan: deklarasi perubatan dikumpul bagi tujuan keselamatan latihan; ia hanya boleh dilihat oleh kakitangan diberi kuasa dan TIDAK digunakan untuk keputusan automatik atau pemadanan jurulatih pada fasa ini. Kedua-dua kategori dilayan secara berasingan daripada data peribadi biasa.
3. Tujuan. Pendaftaran & pengesahan identiti; pentadbiran keahlian/pakej; invois & rekod pembayaran manual (tiada pengumpulan dalam talian); pengaktifan; penugasan jurulatih & sesi; pembaharuan & susulan; keselamatan; laporan & audit; pematuhan undang-undang.
4. Medan wajib vs pilihan. Wajib: nama, IC/pasport, telefon, pengesahan deklarasi. Pilihan: e-mel, alamat, matlamat, sumber rujukan, butiran penjaga (bukan bawah umur). Deklarasi kesihatan mesti dijawab (butiran hanya jika ada keadaan).
5. Penerima & pembekal. Kakitangan Féroce mengikut peranan sahaja (pemilik/pengurus/pentadbir/penerimaan). Tiada penjualan data. Pembekal infrastruktur: pelayan maya DigitalOcean, rantau nyc1 (New York, AS) — disahkan daripada rekod penempatan (nama hos pelayan + perkhidmatan metadata droplet), sebagai pemproses infrastruktur sahaja; data disimpan di luar Malaysia dan notis ini ialah pendedahan tersebut. Tiada pembekal lain memproses data.
6. Penyimpanan, sandaran & lampiran. Data disimpan pada pelayan Féroce; sandaran diambil bersama pangkalan data DAN lampiran bukti pembayaran; sandaran disimpan di pelayan dengan kawalan akses root sahaja; lampiran tidak pernah didedahkan secara awam. Tempoh simpanan sandaran mengikut kategori rekod yang disandarkan (lihat §7).
7. Pengekalan — amalan semasa dan kriteria undang-undang yang terpakai. Amalan semasa (disahkan): rekod dikekalkan selagi perlu bagi tujuan perniagaan dan pematuhan; tiada pemadaman automatik; pendua diarkibkan sebagai "Merged"; produk diarkibkan, tidak dipadam; log audit bersifat append-only sebagai kawalan teknikal — pembetulan direkod sebagai entri berpaut, bukan ganti — dan kekal tertakluk kepada semakan pengekalan yang sama. Kewajipan berkanun yang terpakai: rekod perakaunan (termasuk jualan, invois dan rekod pembayaran) mesti disimpan sekurang-kurangnya 7 tahun selepas selesainya transaksi di bawah s.245 Akta Syarikat 2016 (undang-undang persekutuan — terpakai di Sarawak); rekod cukai juga disimpan 7 tahun (Akta Cukai Pendapatan 1967). Had masa tuntutan: had masa bagi tuntutan sivil di Sarawak ditadbir oleh Ordinan Had Masa (Sarawak, Bab 49) — tempoh yang terpakai bergantung pada jenis tuntutan; Féroce akan mengekalkan rekod berkaitan bagi tempoh munasabah untuk mempertahankan tuntutan mengikut Ordinan tersebut dan nasihat undang-undang. Jadual pengekalan dalaman yang terperinci adalah cadangan di bawah semakan Pemilik dan BUKAN sebahagian notis ini.
8. Keselamatan. Akses mengikut peranan; kata laluan dicincang; sesi kakitangan tamat selepas 12 jam di pelayan (ingatan pelayan; dibersihkan pada log keluar/but semula) — penyemak imbas hanya menyimpan token sesi sehingga log keluar atau pembersihan manual; HTTPS; firewall; SSH berasaskan kunci; sandaran termasuk lampiran; log audit merekod siapa/bila.
9. Hak anda (PDPA). Hak akses, pembetulan, dan aduan kepada Pesuruhjaya Perlindungan Data Peribadi. Hubungi admin@ferocegoldhelloyou.com; identiti disahkan; respons dalam tempoh berkanun.
10. Hubungi. Sebarang soalan: admin@ferocegoldhelloyou.com. Tarikh kuat kuasa di atas ialah versi terkini yang diterbitkan.
1. What we collect and where it comes from. Féroce OS is an internal administration platform. Personal data is collected from the registration form (given by the member, or by the parent/guardian for minors), staff recording of externally-made payments, and legacy business records. Categories: full name; IC/passport; date of birth; gender; phone/WhatsApp; email; home address; emergency contact; parent/guardian (children); referral source; fitness goal; health/medical declaration; attendance; memberships/packages; PT sessions; sales/invoices; payment details (method, amount, date, reference; optional proof attachments); and staff-user records (audit log). Féroce does not collect card numbers or online-payment credentials — payments are external and recorded manually.
2. Children's and health information (separate handling). Children: for Kids/Junior members the member's and guardian's information is provided by the parent/guardian (guardian name and phone recorded) with the registration declaration; Kids packages are exempt from the registration fee. Health: the medical declaration is collected for training safety; it is visible only to authorised staff and is not used for automated decisions or coach matching in the current phase. Both categories are handled separately from ordinary personal data.
3. Purposes. Registration and identity verification; membership/package administration; invoicing and manual payment recording; activation; PT coach assignment and session tracking; renewals and follow-ups; safety; reporting and audit; legal compliance.
4. Required vs optional fields. Required: name, IC/passport, phone, declaration confirmation. Optional: email, address, goal, referral source, guardian details (where not a minor). The health declaration must be answered; details are completed only when a condition is declared.
5. Recipients and service providers. Authorised Féroce staff by role only (owner, manager, admin, reception). No data is sold. Infrastructure provider: a DigitalOcean droplet in the nyc1 region (New York, USA), verified from deployment records (server hostname and the droplet's own metadata service) and engaged solely as infrastructure processor; data is stored outside Malaysia and this notice is that disclosure. No other providers process data.
6. Storage, backups and attachments. Data is stored on Féroce's own server; backups are taken together with the database AND payment-proof attachments; backups are kept on the server under root-only access; attachments are never exposed publicly. Backup retention follows the underlying record category (§7).
7. Retention — verified current practice and applicable legal criteria. Current practice (verified): records are kept as long as needed for business purposes and compliance; no automatic deletion; duplicates are archived as "Merged"; products are archived, not deleted; the audit log is append-only as a technical control — corrections are recorded as linked entries rather than overwrites — and remains subject to the same retention review. Applicable statutory obligation: accounting records (including sales, invoices and payment records) must be retained for at least 7 years after completion of the transactions under s.245 of the Companies Act 2016 (federal law — applies in Sarawak); tax records are likewise kept 7 years (Income Tax Act 1967). Claims limitation: limitation of civil claims in Sarawak is governed by the Limitation Ordinance (Sarawak, Cap. 49); the applicable period depends on the claim type, and Féroce will retain related records for a reasonable period to defend claims under that Ordinance and on legal advice. A detailed internal retention schedule is a proposal under Owner review and is NOT part of this published notice.
8. Security. Role-based access; hashed passwords; staff sessions expire after 12 hours server-side (in-memory; cleared on sign-out or server restart) — the browser only retains the session token until sign-out or manual clearing; HTTPS; firewall; key-only SSH; backups include attachments; the audit log records who/when.
9. Your rights (PDPA). Rights of access, correction and complaint to the Personal Data Protection Commissioner. Contact admin@ferocegoldhelloyou.com; identity is verified; responses within the statutory period.
10. Contact. Questions: admin@ferocegoldhelloyou.com. The effective date above is the latest published version.
Prepared from data handling verified in the Féroce OS build (8 September 2026); hosting verified from deployment records (DigitalOcean, nyc1); retention criteria grounded in current official sources (Companies Act 2016 s.245; Income Tax Act 1967; Limitation Ordinance (Sarawak, Cap. 49) — professional legal advice should confirm claim-type periods). Internal retention-schedule proposal kept outside this published notice, pending Owner review.