This Privacy Policy describes how NR Multigroup ("we", "us", or "our") collects, uses, and protects information when you use the NR Multigroup Manpower Management System ("MMS", "the Service") at mms.nrmultigroup.com.my.
1. Who this policy applies to
MMS is a business application for authorized staff of manpower and recruitment agencies under NR Multigroup. Access is limited to users invited or registered by an administrator. If you do not have an authorized account, you should not use the Service.
2. Information we collect
Depending on how you use MMS, we may collect:
- Account information: name, email address, role, and authentication identifiers when you sign in with email/password or Google.
- Operational data: worker records, company details, permits, passports, visas, medical (FOMEMA) data, payments, documents, and other information entered by authorized users in the course of agency operations.
- Technical data: device identifiers used for session security, browser type, IP address, and activity logs required for audit and security.
- Communications: emails or notifications sent through the system (for example login verification or system alerts).
3. How we use your information
We use collected information to:
- Authenticate users and maintain secure sessions
- Operate manpower, visa, permit, and billing workflows
- Generate reports, receipts, invoices, and notifications
- Maintain audit logs and enforce role-based access controls
- Improve reliability, security, and support of the Service
We do not sell personal information. We process data only for legitimate business purposes related to operating MMS for authorized agencies.
4. Google sign-in
If you choose "Continue with Google", Google shares basic profile information (such as your name and email) with us through Firebase Authentication. Google's use of your data is governed by Google's Privacy Policy. We receive only the information needed to identify your account and sign you in.
5. How we store and protect data
Data is stored on secure cloud infrastructure, including encrypted databases and file storage. Access is restricted by authentication, permissions, and administrative controls. While we apply reasonable technical and organizational safeguards, no online service can guarantee absolute security.
6. Data retention
We retain account and operational data for as long as needed to provide the Service, meet legal or regulatory obligations, resolve disputes, and enforce agreements. Administrators may request deletion of user accounts subject to business and legal requirements.
7. Sharing with third parties
We may share information with service providers that help us operate MMS, such as:
- Google / Firebase (authentication)
- Cloud hosting and database providers
- Email delivery services
- Document and file storage services
These providers process data on our behalf under contractual obligations. We do not share worker or agency data with third parties for their own marketing purposes.
8. Your rights and choices
Depending on applicable law, you may have the right to:
- Request access to personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account, subject to legal and operational limits
- Withdraw consent where processing is based on consent
To make a request, contact your agency administrator or email us using the contact details below.
9. Cookies and local storage
MMS uses essential cookies and browser storage for authentication sessions, security, and basic interface preferences. These are required for the Service to function and are not used for third-party advertising.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the latest version. Continued use of MMS after changes constitutes acceptance of the updated policy.
11. Contact us
For privacy-related questions about MMS, contact NR Multigroup at s.siamhossain.h@gmail.com or through your agency administrator.