Geowell Sdn Bhd (“Geowell”) is committed to protecting the personal data and privacy of all individuals we interact with, especially our employees and related stakeholders. This Privacy Notice explain what personal data we collect, when and why we collect it, and outlines how we collect, use, disclose and safeguard personal data in the course of our business operations.

This Privacy Notice covers both our online and offline collection activities, including personal data that we collect through platforms such as websites, applications, third party social networks or our online and physical events or through other third parties that we work with.

1.  Scope of The Privacy Notice

This Notice applies to all employees, job applicants, clients/customers, vendors, service providers, government agencies, regulator or law enforcement agency and any third parties with whom Geowell may engage during its business operations.

2. What Personal Data We Collect

We may collect the following categories of personal data from employees and other individuals:

•Full name, NRIC/Passport Number, Nationality, Birth Date, Gender, Religion etc.

For most appointment of board of director, job applicant or appointment of employees, we do collect their CV or résumé which may include more details such as home address, email address and telephone number, education information (field of study, university and country of study, academic scores and achievements, personal certifications), racial or ethnic origin, photographs or profile picture and any other supporting documents or information as submitted during the application process. We carry out pre-screening of applicants to whom we intend to make an offer of employment or internship (as appropriate). We may also undertake criminal records or financial probity checks or other independent searches to assess the suitability for the position were permitted by, and in accordance with, applicable law. Some sensitive data may be processed strictly in accordance with applicable local laws.

•Contact details.

•Bank account details.

•Employment history and educational background.

•Medical and health-related information (e.g. for pre-employment or offshore fitness)

•Emergency contact information.

•Work-related performance records, certifications and disciplinary history.

•Biometric data (if required for offshore or client platform access).

•Any other data deemed necessary for operational or legal requirements.

3. Purpose of Data Collection

Personal data is collected and processed for legitimate purposes, including but not limited to:

•Recruitment, employment administration, payroll, benefits, insurance, account payables etc.

•Compliance with Government agencies, law enforcement agencies, courts, tribunals, regulatory/professional bodies, industry regulators, ministries, and/or statutory agencies or bodies, offices or municipality in any jurisdiction, if required or authorized to do so, to satisfy any applicable law, regulation, order or judgment of a court or tribunal or queries from the relevant authorities.

•Offshore clearance and security vetting.

•Client audits and performance evaluations.

•Legal obligations under applicable law in Malaysia or oversea where we engage with international supplier or other stakeholders.

•For our auditors, consultants, lawyers, accountants or other financial or professional advisers appointed in connection with our business on a strictly confidential basis and when necessary, only.

•Emergency or crisis response (e.g. injury, repatriation, HSE incidents).

•Data analytics and workforce planning.

•Due diligence with vendors and suppliers or Know Your Customer (KYC) screening activities.

4. Access and Disclosure of Data

Access to personal data is strictly limited to;

• Geowell’s authorised employee from related department mainly Human Resources, IT & Data Management, Finance, HSE, and any other relevant officer(s) on a need-to-know basis.

•Appointed third party service providers, e.g. Human Resources, IT or Accounting system processors and medical service provider who are bound by confidentiality and PDPA-compliant agreements.

•Regulatory authorities and statutory bodies such as Companies Commission of Malaysia, Inland Revenue Board, KWSP, PERKESO, DOSH etc as required by law.

•PETRONAS and other Oil companies (Geowell’s clients) only with assurance that they will comply with PDPA and not use the data beyond the contractual or legal requirement.

We do not disclose personal data to third parties without prior consent unless legally required or for the fulfilment of contractual obligations under confidentiality.

5. Retention Period

Geowell retains personal data for as long as necessary to fulfill the purpose it was collected for or up to 7 years after the cessation of employment and contract for service, or longer if required for legal or regulatory obligation to comply with operational, legal, tax or accounting requirements. Data will be securely disposed of through deletion or destruction upon expiry of the retention period.

6. Security Measures

Geowell implements appropriate technical and organisational measures to protect personal data, including:

•All information you provide to us is stored on our secure servers or on the servers of third-party IT service providers. We maintain appropriate administrative, technical and physical safeguards to protect against loss, misuse or unauthorized access, disclosure, alteration or destruction of the personal data you provide to us in accordance with applicable laws.

•Restricted access to Human Resources Management System (HRMS) and personnel files (online and offline).

•Controlled document storage (physical and digital).

•Confidentiality clauses in all employment and vendor contracts.

•Password-protected systems and encrypted communications where required, monitored by IT and Data Management Manager.

7. Third Parties and External Communications

When engaging with:

•Suppliers or subcontractors, Geowell ensures they sign confidentiality agreements and data protection clauses before access to any sensitive or personal data is granted.

•Government agencies such as Customs, Immigration, e-Perolehan under Ministry of Finance, Malaysia Anti-Corruption Commission (MACC), Bursa Malaysia etc, only the necessary minimum data is shared to meet regulatory compliance.

•Any request for employee data for travel or clearance from customs/immigration/police officers must be verified in writing through official correspondence.

•Clients or partners, Geowell requires assurance in writing that any shared data will be used strictly for the intended purpose and remain confidential.

•Countries outside of the EEA and UK may not provide the same level of protection for your personal data as provided for under European and UK data protection laws. However, when we transfer your information outside of the EEA or UK in this way, we take steps to ensure that appropriate safeguards, required by law, are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Privacy Notice. You can obtain further details about the transfer safeguards we use by contacting us at the contact details set out below.

If we transfer your personal data, we will always do so under strict conditions of confidentiality and similar levels of security safeguards.

8. Work Data and Business Confidentiality

All employees and contractors of Geowell are bound by confidentiality obligations under their employment or service agreements. They are prohibited from disclosing operational, technical, or commercial information related to Geowell, its clients, suppliers or its projects to unauthorized parties, including on social media or public forums. Departing employees are required to return or destroy any work-related data upon resigning or leaving their employment from Geowell.

Work-related data, such as project details, job assignments, client correspondence, and internal assessments, are considered company intellectual property and must be protected accordingly.

9. Your Rights

You have the right to access and correct your personal data held by Geowell, withdraw consent (subject to legal or contractual limitations) and lodge a complaint with the Department of Personal Data Protection if you believe your rights have been violated.

Any questions and requests regarding this Privacy Notice or your personal data should be addressed to: 
Human Resources Department
Geowell Sdn Bhd
No 151 Jalan Aminuddin Baki, Taman Tun Dr Ismail,

60000 Kuala Lumpur.
Email: HR@geowell.com.my

10. Review and Continuous Improvement

This Privacy Notice shall be reviewed periodically to ensure it meets the evolving needs for the privacy and security of data within the company. Any changes we make to our Privacy Notice in the future will be posted on this page. Please check back frequently to see any updates or changes.