Privacy Policy

1. Who We Are

Our website address is: https://rfc-global.com.

2. What Personal Data We Collect and Why We Collect It

2.1 Comments

When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to help with spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here. After approval of your comment, your profile picture is visible to the public in the context of your comment.

2.2 Media

If you upload images to the website, avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

2.3 Cookies

  • If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies. These cookies are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
  • If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
  • When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for one year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
  • If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after one day.

2.4 Embedded Content from Other Websites

Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

3. How We Use Your Data

We may use your data to:

  • Provide and manage your access to our site.
  • Process your registration for tournaments and other events.
  • Process payments for your registration and any related services.
  • Respond to your inquiries and support requests.
  • Analyze site usage and improve user experience.
  • Send you updates, promotions, and other communications you have opted into.

4. Payment and Registration Data

When you register for a tournament or event through our website, we collect personal information necessary to process your registration and payment. Payments are handled through our payment partner, Offroad & Xpedition Sdn. Bhd., which acts as our payment collector and escrow service. Your payment details, including personal data, are processed by Offroad & Xpedition Sdn. Bhd. according to their own privacy policy.

We ensure that our payment partner complies with applicable data protection regulations, but you should review their privacy policy directly for more information on how your data is managed.

5. Legal Basis for Processing Your Data (GDPR Compliance)

We process your personal data on the following legal bases:

  • Consent: You have provided clear consent for us to process your data for a specific purpose.
  • Contract: Processing is necessary for a contract we have with you, such as event registration, or because you have asked us to take specific steps before entering into a contract.
  • Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
  • Legitimate Interests: Processing is necessary for our legitimate interests, except where such interests are overridden by your data protection rights.

6. Who We Share Your Data With

We do not sell or share your personal information with third parties except in the following cases:

  • If you request a password reset, your IP address will be included in the reset email.
  • We may share data with service providers to facilitate the operation of our website, such as hosting providers, payment processors, or analytics services.
  • We may share data where required by law or to respond to legal processes.
  • Payment data is shared with Offroad & Xpedition Sdn. Bhd., our payment partner, for processing your payments securely.

7. How Long We Retain Your Data

  • If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
  • For users that register on our website, we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
  • Payment and registration details are retained for as long as necessary to fulfill the purpose for which they were collected, or as required by applicable laws.

8. What Rights You Have Over Your Data

Under the GDPR and PDPA, you have the following rights regarding your personal data:

  • Access: You can request access to the personal data we hold about you.
  • Correction: You can request that we correct any inaccurate or incomplete data.
  • Erasure: You can request that we erase your personal data, except where we need to retain it for legal reasons.
  • Object: You can object to the processing of your data in certain circumstances.
  • Data Portability: You can request to receive a copy of your data in a commonly used format.

To exercise these rights, please contact us at [insert contact details].

9. Where Your Data Is Sent

Visitor comments may be checked through an automated spam detection service. We may also store and process your data on servers located outside your country, provided that such transfers comply with applicable data protection laws.

10. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. However, no method of data transmission or storage is 100% secure.

11. Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify users of significant changes by posting the updated policy on this site.

12. Contact Information

For any questions or concerns about this privacy policy, or to exercise your rights, please contact us at info@rfc-global.com.