Your information
Privacy notice.
How The Trustees of YTM Foundation Registered handles personal data when you use this website or communicate with us.
1. Who we are
The Trustees of YTM Foundation Registered (“YTM Foundation”, “we”, “us” or “our”), Registration No. PPAB-03/2025, is the data controller responsible for personal data described in this notice. Our registered address is B-08-03, Plaza Kelana Jaya, Jalan SS 7/13a, SS 7, 47301 Petaling Jaya, Selangor, Malaysia..
2. Information we may process
Depending on how you interact with us, we may process contact details and correspondence that you voluntarily send by email or through social media. Our hosting provider may also process routine technical information such as IP address, browser type, access time, requested pages, and security logs to deliver and protect the website.
Please do not send identity documents, financial details, health information, or other sensitive personal data unless we have specifically requested it through an authorised process.
3. Why we process information
We may process personal data to respond to communications, administer Foundation activities, maintain accurate records, protect our website and systems, prevent misuse, comply with legal obligations, and establish or defend legal rights. Where required, processing is based on consent; otherwise it may be necessary for legitimate administration, security, or compliance purposes permitted by applicable law.
4. Programme applications
The Bloom Programme application is administered with Messrs Clarissa Tan & Wong and requests personal, educational, household, financial, bank, and—where applicable—medical or bereavement information. Applications sent to aid@ctwlaw.my are handled through that external process. Applicants should read the consent and terms in the programme PDF before submitting supporting documents.
5. Disclosure and service providers
We may disclose information only where reasonably necessary to authorised personnel, professional advisers, website and email service providers, programme partners, regulators, law-enforcement bodies, or other parties required or permitted by law. Service providers are expected to protect information and use it only for authorised purposes.
6. International transfers
Some website, email, cloud, or social-media service providers may store or process data outside Malaysia. Where a cross-border transfer occurs, we will take reasonable steps to ensure it is made in accordance with applicable Malaysian data-protection requirements.
7. Security, accuracy, and retention
We take practical technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. We retain information only for as long as reasonably required for the relevant purpose or legal obligation, then securely delete or anonymise it. Please inform us if information you provided is inaccurate or out of date.
8. Your choices and rights
Subject to the Personal Data Protection Act 2010 and applicable exceptions, you may ask to access or correct your personal data, withdraw consent, prevent certain processing, or request data portability where the statutory requirements apply. We may need to verify your identity before acting on a request.
9. Data incidents and governance
Where required by Malaysian law, we will notify the Personal Data Protection Commissioner and affected individuals of a personal data breach. We will appoint or register a data protection officer if the applicable legal thresholds are met.
10. Cookies and external links
This website is designed without non-essential advertising or analytics cookies. Essential hosting or security technologies may still be used to deliver and safeguard the site. External services such as Instagram and third-party websites operate under their own privacy notices once you follow their links.
11. Contact us
For privacy questions or requests, email ytmfoundation@outlook.com and mark the subject “Privacy Request”. You may also lodge a complaint with Malaysia’s Personal Data Protection Commissioner.
12. Updates
We may revise this notice to reflect legal, operational, or service changes. The latest version will appear on this page with an updated date.
View the supplied bilingual PDPA notice