Effective date: 12/09/2026 Version: 1.0 Last updated: 12/09/2026
ITPro.Works is an independent publication about HR technology, HRIS integration and enterprise architecture, written and operated by Syed Mansoor Ali in Kuala Lumpur, Malaysia. You can read more about the publication and its editorial approach on the About page.
This policy explains what personal data this website collects, why it is collected, who processes it, how long it is kept, and what you can do about it. It applies to itpro.works and all pages and tools on this domain.
I am the data controller for the personal data described here. If you have a question about anything in this policy, contact me or email ma*****@***ro.works.
At a glance
- I do not sell your personal data, and I do not share or rent email lists.
- Signing up for the newsletter is optional and always requires an explicit action from you.
- You can unsubscribe at any time, and you can ask me to delete your data.
- This site uses analytics and may display advertising. Both are described below.
- The site runs on WordPress behind Cloudflare, so some technical data is processed automatically for security and delivery.
What I collect, and why
1. Newsletter subscription
What: Your email address, and your name if you choose to provide it. The date and time you subscribed, and the version of this policy in force at that moment.
How it reaches me: Only when you enter it into the subscription form and submit it. Subscription is never automatic and is never a condition of reading anything on this site.
Why: To send you articles and occasional updates about HR technology, SAP integration, AI governance and new tools.
Basis: Your consent. You can withdraw it at any time using the unsubscribe link in any email, or by emailing me.
Kept for: Until you unsubscribe or ask for deletion.
2. Comments
What: The name, email address and comment text you submit, plus your IP address and browser user-agent string. WordPress collects the IP and user-agent automatically as part of spam filtering.
Why: To publish and attribute your comment, to reply to you, and to detect spam.
Basis: Your consent, given when you submit the comment.
Important: Your name and comment are published publicly. If you tick the “save my name, email, and website” box, WordPress stores these in a cookie on your own device for convenience — that cookie is described in the Cookies section below.
Kept for: Indefinitely while the comment remains published, unless you ask for removal.
3. Contact by email
What: Your email address and whatever you choose to include in your message.
Why: To reply to you, and to handle corrections, technical questions and professional enquiries.
Basis: Your consent, and my legitimate interest in responding to correspondence.
Kept for: 24 months after the exchange ends.
4. Donations and reader contributions
What: ITPro.Works accepts voluntary contributions through the Support page, which uses the GiveWP donation plugin. Depending on the payment method, this may involve your name, email address, billing details and donation amount.
Important: Payment card details are handled directly by the payment provider. I do not receive, see or store your full card number.
Why: To process the contribution, provide a receipt, and keep financial records.
Basis: Performance of the transaction you requested, and my legal obligation to retain financial records.
Processed by:Stripe, PayPal.
Kept for: As required by Malaysian record-keeping and tax obligations.
5. Analytics
What: Pages visited, approximate location derived from IP address, referring site, device and browser type, and how you move through the site. This is aggregated statistical data and is not used to identify you personally.
Why: To understand which articles are useful and how the site performs.
Processed by: Google, via Google Site Kit.
Basis: Your consent where required by law in your location, otherwise my legitimate interest in understanding site usage.
Kept for: As governed by the retention settings in the analytics platform.
6. Advertising
ITPro.Works may display advertising to help cover the cost of operating the site. Advertising does not influence what gets written, or how any product, vendor or technology is assessed — this is also stated on the About page.
Where advertising is served by Google, Google and its partners may use cookies or similar technologies to serve and measure ads. Google’s use of advertising cookies is described in How Google uses information from sites or apps that use our services.
You can control personalised advertising from Google at Google Ads Settings.
7. Social sharing buttons
The share buttons on each article are provided by AddToAny. They load a script from a third party, and that provider may collect technical data about your device when the buttons load. AddToAny’s own privacy policy is at addtoany.com/privacy.
Nothing is shared with a social network unless you click a share button yourself.
8. Security, spam filtering and site delivery
What: Your IP address, request headers, browser user-agent and request timestamps.
Why and by whom:
- Cloudflare sits in front of this site to deliver pages and filter malicious traffic. It processes connection data automatically as part of that function.
- CleanTalk filters comment and form spam, and obscures email addresses on the site so they are harder for scrapers to harvest. It processes submitted form data to decide whether it is spam.
- The web host keeps standard server logs.
Basis: My legitimate interest in keeping the site available and free of abuse.
Kept for: Per each provider’s own retention schedule.
Cookies
A cookie is a small file stored on your device. This site uses them in the following ways:
| Type | Purpose | Set by |
|---|---|---|
| Essential | Site security, bot filtering and page delivery | Cloudflare |
| Functional | Remembering your name and email if you tick the box when commenting | WordPress |
| Analytics | Measuring how the site is used | Google Analytics |
| Advertising | Serving and measuring advertising | Google AdSense |
Essential cookies are required for the site to work. You can block or delete any cookie through your browser settings, though blocking essential cookies may prevent parts of the site from functioning.
Who else processes your data
| Processor | What they handle | Where |
|---|---|---|
| godaddy.com | Website files, database, server logs | US Datacenter |
| Cloudflare | Content delivery, security filtering | Global network |
| CleanTalk | Spam filtering, email obfuscation | Global |
| Google (Site Kit) | Analytics and/or advertising | Global |
| AddToAny | Share buttons | Global |
| Stripe | Donation payments | Stripe |
I do not sell personal data, and I do not share it with anyone other than the processors listed above.
International transfers
ITPro.Works is operated from Malaysia, and several of the processors above operate globally. This means your personal data may be processed outside Malaysia and outside your own country.
Where that happens, I rely on the safeguards those providers apply, including their own contractual data-transfer terms. Cross-border transfers from Malaysia are subject to the Personal Data Protection Act 2010 as amended by the Personal Data Protection (Amendment) Act 2024, and to the Commissioner’s Guidelines on Cross-Border Personal Data Transfer.
Your rights
Under Malaysia’s Personal Data Protection Act 2010, as amended, you have the right to:
- Access the personal data I hold about you
- Correct it if it is inaccurate, incomplete or out of date
- Withdraw consent to processing, including newsletter consent
- Prevent processing that is likely to cause you damage or distress
- Stop direct marketing at any time
- Request portability — that your data be transmitted to another controller, where that applies
If you are in the European Economic Area or the United Kingdom, you may additionally have rights of erasure, restriction of processing, objection to processing, and the right to lodge a complaint with your national supervisory authority.
To exercise any of these, email ma*****@***ro.works with a short description of your request. I will respond within 30 days. I may need to confirm your identity first, particularly for access and deletion requests.
You can unsubscribe from the newsletter at any time using the link at the bottom of every email. You do not need to contact me to do that.
Data minimisation
I collect the smallest amount of information needed to run this site. I do not build advertising profiles, I do not enrich your data from third-party sources, and I do not attempt to identify individual readers from analytics data.
Children
This site is written for HR, HRIS and technology professionals. It is not directed at children, and I do not knowingly collect personal data from anyone under 18. If you believe a child has submitted personal data here, contact me and I will delete it.
Security
Reasonable technical and organisational measures are in place to protect personal data, including HTTPS encryption across the whole site, a security and filtering layer in front of the origin server, restricted administrative access, and routine software updates.
No website can guarantee absolute security. If a personal data breach occurs that meets the notification thresholds under the amended PDPA, I will notify the Personal Data Protection Commissioner, and affected individuals where required.
Changes to this policy
This policy may be updated as the site changes — for example if a newsletter provider is added, or if member accounts are introduced.
When it changes materially, I will update the version number and effective date at the top of this page, and record the change below. Where a change affects how your data is used, and you previously gave consent, I will ask for your consent again rather than rely on the old one.
Version history
| Version | Date | Change |
|---|---|---|
| 1.0 | 12/09/2026 | First published |
Contact
For any privacy question, correction, access request or deletion request:
Email: ma*****@***ro.works Contact form: Contact About the publication: About ITPro.Works
You also have the right to complain to the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi), Malaysia, at pdp.gov.my.
Related pages
- Home
- About ITPro.Works
- Contact
- Terms of Use
- Editorial Policy
- Advertising and Affiliate Disclosure
- Tools