Last updated: [date]

1. Who we are
This Privacy Policy explains how [Legal Entity Name] ([Registration No.]) ("KL Climbing Week", "we", "us", "our"), the organiser of KL Climbing Week — including the Asian Climbing Summit, CRANK Boulder, and associated workshops — collects, uses, and protects your personal data when you use klclimbingweek.com ("the site") or register for our events.
We are the data controller responsible for your personal data. If you have questions, contact us at [privacy email].

2. Information we collect
We may collect and process the following:

• Information you give us — name, email, phone number, billing/company details, age or date of birth (for CRANK categories), emergency contact and relevant health/medical information (for competitors), and any details you submit through forms, ticket purchases, booth bookings, or newsletter sign-ups.

• Payment information — processed securely by our payment provider(s) [Stripe / other]. We do not store your full card details on our servers.

• Information we collect automatically — device, browser, IP address, and usage data collected via cookies and similar technologies (see our Cookie Policy).

3. How we use your information
We use your personal data to:

• Process ticket purchases, event registrations, and booth bookings

• Manage your participation in CRANK Boulder, including category placement and safety

• Send you event information, confirmations, updates, and (with your consent) marketing

• Respond to your enquiries and provide customer support

• Operate, improve, and secure the site

• Comply with our legal and regulatory obligations

4. Legal basis for processing
We process your data where: you have given consent (e.g. marketing emails); it is necessary to perform a contract with you (e.g. your ticket); it is required to meet a legal obligation; or it is in our legitimate interests (e.g. improving our events), provided these do not override your rights.

5. Sharing your information
We may share your data with:

• Service providers who help us run the event — ticketing/forms (e.g. Tally), payment processing (e.g. Stripe), email platforms, and analytics

• Event partners and venues [Camp5, Sentul Depot] where necessary to deliver the event

• Authorities where required by law

We do not sell your personal data.

6. International transfers
Some providers may process data outside Malaysia. Where this happens, we take reasonable steps to ensure your data is protected in line with this policy and applicable law.

7. Data retention
We keep your personal data only as long as necessary for the purposes above, or as required by law, after which it is securely deleted or anonymised.

8. Your rights
Subject to applicable law (including the PDPA), you may have the right to access, correct, update, or request deletion of your personal data, withdraw consent, and object to certain processing. To exercise these rights, email [privacy email].

9. Security
We use appropriate technical and organisational measures to protect your data. No method of transmission over the internet is 100% secure, but we work to safeguard your information.

10. Children
Some events (e.g. CRANK youth categories) involve minors. Where a participant is under 18, registration and consent must be provided by a parent or legal guardian. We only collect a minor's data as needed to deliver the event safely.

11. Changes to this policy
We may update this policy from time to time. The latest version will always be posted here with a revised "Last updated" date.

12. Contact
[Legal Entity Name] [Registered address] Email: [privacy email]