PRIVACY POLICY

Last updated: 16 October 2026

1. WHO WE ARE

This Privacy Policy explains how Stretchmarks Asia Sdn Bhd (Registration No. 200001003300) ("KL Climbing Week", "we", "us", "our"), the organiser of KL Climbing Week (including the Asian Climbing Summit, CRANK Boulder and associated workshops), collects, uses and protects your personal data when you use klclimbingweek.com (the "Site") or take part in our events.

We are responsible for your personal data under Malaysia's Personal Data Protection Act 2010, as amended (the "PDPA"). If you have any questions, contact us at info@asianclimbingsummit.com.

2. INFORMATION WE COLLECT

Information you give us:

• Name, email address and phone number

• Billing and company details (e.g. for exhibitors)

• Any details you submit through forms, ticket purchases, booth bookings, enquiries or newsletter sign-ups

Payment information:

• Payments are processed securely by our payment provider, Stripe. We do not store your full card details.

Information collected automatically:

• Device, browser, IP address and usage data, collected through cookies and similar technologies. See our Cookie Policy for details.

CRANK Boulder competitors:

• Competitor registration, waivers and related details (such as age, emergency contacts and health information) are collected by our venue partner under its own privacy policy, not through this Site. We may receive limited information from them, such as names, categories and results, to run the competition.

3. HOW WE USE YOUR INFORMATION

We use your personal data to:

• Process ticket purchases, event registrations and booth bookings

• Run our events, including CRANK Boulder categories and results

• Send you confirmations, event information and updates

• Send you marketing emails and newsletters, with your consent

• Measure and improve our advertising, with your consent (e.g. Meta Pixel)

• Respond to your enquiries and provide customer support

• Operate, improve and secure the Site

• Comply with our legal and regulatory obligations

4. LEGAL BASIS FOR PROCESSING

We process your personal data:

• With your consent, for example for marketing emails and marketing cookies

• Where it is necessary to perform a contract with you, for example your ticket or booth booking

• Where it is required to meet a legal obligation, for example tax and accounting records

• Where it is in our legitimate interests to run and improve our events, provided this does not override your rights

You can withdraw your consent at any time. See Section 9.

5. SHARING YOUR INFORMATION

We may share your personal data with:

• Service providers who help us run the Site and events, including forms (Tally), payment processing (Stripe), email and newsletter (Loops), website hosting and analytics (Framer) and advertising (Meta). They may only use your data to provide services to us.

• Event partners and venues, where necessary to deliver the event

• Sponsors and exhibitors, where you have agreed to this, for example by opting in or by having your badge scanned at an exhibitor's booth. Once shared, sponsors and exhibitors handle your data under their own privacy policies.

• Authorities, where required by law

We do not sell your personal data.

6. INTERNATIONAL TRANSFERS

Some of our service providers process data outside Malaysia. Where this happens, we take reasonable steps to make sure your data is protected to a standard consistent with this policy and the PDPA.

7. DATA RETENTION

We keep personal data for up to 7 years after your last interaction with us, including to meet tax and accounting requirements. After that it is securely deleted or anonymised.

If you unsubscribe from marketing, we stop sending you marketing straight away, and keep only a record that you unsubscribed.

8. SECURITY AND DATA BREACHES

We use appropriate technical and organisational measures to protect your personal data. No method of transmission over the internet is 100% secure, but we work hard to safeguard your information.

If a data breach occurs that is likely to cause you significant harm, we will notify the Personal Data Protection Commissioner and affected individuals, as required by the PDPA.

9. YOUR RIGHTS

Subject to the PDPA and other applicable laws, you may have the right to:

• Access the personal data we hold about you

• Correct or update inaccurate or incomplete data

• Withdraw your consent, including to marketing, at any time

• Ask us to limit or stop certain processing

• Request deletion of your data, where we are not required to keep it by law

• Request a copy of your data to transfer to another organisation, where available under law

To exercise any of these rights, email info@asianclimbingsummit.com. We may need to verify your identity before acting on your request.

10. CHILDREN

Some of our events involve participants under 18. Where a participant is under 18, consent must be given by a parent or legal guardian. We only collect a minor's data where needed to deliver the event safely, and we make every effort not to publish photos of children under 18.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The latest version will always be posted on this page, with the "Last updated" date above.

12. CONTACT US

Stretchmarks Asia Sdn Bhd (200001003300)
1 Utama Shopping Centre, Petaling Jaya, Selangor, Malaysia
Email: info@asianclimbingsummit.com