Privacy Policy
Last updated: 16 June 2026
This Privacy Policy explains how BR Innovate Future Sdn. Bhd. (“we”, “us”, the operator of BR HRMS) handles personal data in the BR HRMS web application and mobile app (the “Service”).
BR HRMS is a workplace HR and payroll system used by employers. Your employer is the data controller of the employee information processed through the Service; we act as the data processor on the employer’s behalf. If you are an employee, please also refer to your employer’s own privacy notice.
1. Information we collect
| Category | Examples |
|---|---|
| Account | Name, work email, role, encrypted password. |
| Employee profile | Full name, identification (IC/passport), contact details, bank account, and statutory numbers (EPF/KWSP, SOCSO/PERKESO, EIS/SIP, income tax) — used for payroll and statutory compliance. |
| Attendance | Clock-in/out times. Location (GPS) and a selfie photo may be captured at clock-in only if your employer enables it, to verify attendance. |
| HR records | Leave, claims, overtime, payslips, performance reviews and related approvals. |
| Device & technical | Push notification token (if enabled), IP address, device/app version, and audit logs of key actions. |
2. How we use it
- To provide HR functions: attendance, leave, claims, overtime, payroll and payslips.
- To compute and support statutory contributions and filings (EPF, SOCSO, EIS, PCB/LHDN) for your employer.
- To verify attendance (location/photo) where your employer has enabled it.
- To send service notifications you have opted into.
- To secure the Service and maintain audit trails.
3. Location & camera
Location and camera access are used solely for clock-in attendance verification, and only when your employer turns the feature on. Capture happens at the moment you clock in — we do not track your location in the background. You may decline these device permissions; clock-in may then be unavailable or limited per your employer’s policy.
4. Sharing
We do not sell personal data. Data is isolated per employer and is shared only:
- with your employer and its authorised HR/payroll administrators;
- with Malaysian statutory authorities (e.g. LHDN, KWSP, PERKESO) as part of your employer’s submissions;
- with infrastructure and payment providers strictly to operate the Service;
- where required by law.
5. Storage, security & retention
Data is transmitted over encrypted connections (HTTPS/TLS), passwords are hashed, and sessions are encrypted. Access is role-based and tenant-isolated. We retain data for as long as your employer uses the Service and as required by Malaysian employment and tax law; your employer controls deletion of its records.
6. Your rights (PDPA 2010)
Under Malaysia’s Personal Data Protection Act 2010, you may request access to or correction of your personal data. As we process data on your employer’s behalf, please direct such requests to your employer’s HR department first; we will assist the employer in fulfilling valid requests.
7. Children
The Service is intended for use by employees and is not directed at children under 13.
8. Changes
We may update this policy and will revise the “Last updated” date above. Material changes will be communicated through the Service.
9. Contact
BR Innovate Future Sdn. Bhd.
Email: cs@brinnovatefuture.com
Kajang, Selangor, Malaysia