Privacy Policy

1. Roles

The business that subscribes to Hadir (“the Employer”) is the data controller of its employees' personal data. We act as the data processor, processing that data only to provide the Service on the Employer's instructions.

2. Data we process

• Account data: names, email addresses, phone numbers, roles.
• Attendance data: clock-in/out times, method used, and — where the Employer enables it — GPS location and photos (including facial images for face recognition).
• HR data: departments, positions, leave records, shifts, and salary figures for payroll.

3. Biometric & location data

Face images and GPS location are only collected when the Employer switches on those clock-in methods. Employers are responsible for obtaining their employees' consent before enabling them, as required by the PDPA.

4. Purpose & disclosure

Data is used solely to operate attendance, leave, scheduling, payroll and reporting features. We do not sell personal data. We do not disclose it to third parties except as needed to run the Service (e.g. email delivery) or where required by law.

5. Security & retention

Data is stored on access-controlled infrastructure and transmitted over HTTPS. Passwords and PINs are hashed. Data is retained while the Employer's account is active and deleted on request after account closure.

6. Your rights

Employees may request access to or correction of their data through their Employer. Employers may export or request deletion of their account data by contacting us.

7. Contact

[Your Registered Business Name]
Email: muhammadshafiq457@gmail.com
WhatsApp: [Your WhatsApp number]
[Your business address, Malaysia]