Last Updated: October 2026
The National Association for Strength & Conditioning Research (NASC) respects the privacy of participants, members, trainers, customers and users of our website and services.
ROS Registration No.: PPM-013-10-01102014
Certain administrative and payment processing functions are managed on behalf of NASC by its authorised administrator, ZK Strength Sifoo Academy (SSM Registration No. 002946941-T).
This Privacy Policy explains how personal data is collected, used, disclosed, stored and otherwise processed in connection with NASC courses, certifications, websites, portals and related services.
1. Personal Data We May Collect
Depending on your interaction with NASC, we may collect:
- full name;
- identification card or passport information where required;
- date of birth;
- telephone number;
- email address;
- residential or mailing address;
- emergency contact information;
- profile photograph;
- employment or professional information;
- course registration information;
- attendance records;
- examination and assessment results;
- certification records;
- transaction and payment information;
- communications with NASC;
- portal or account information;
- information submitted through online forms;
- relevant technical information relating to use of our website or portal; and
- other information reasonably necessary to provide NASC programmes and services.
2. How We Use Personal Data
Personal data may be processed for purposes including:
- processing course registrations;
- confirming participant identity;
- processing and verifying payments;
- administering NASC programmes;
- providing access to learning materials;
- managing participant accounts;
- recording attendance;
- administering examinations and assessments;
- issuing and verifying certificates;
- maintaining certification and training records;
- communicating course information and schedule changes;
- responding to enquiries;
- providing customer support;
- maintaining accounting and transaction records;
- preventing fraud and misuse;
- maintaining website and portal security;
- improving NASC programmes and services;
- complying with applicable legal or regulatory obligations; and
- other purposes directly related to NASC programmes and services.
3. Administration and Payment Processing
Certain administrative and payment processing functions may be performed by ZK Strength Sifoo Academy as an authorised administrator acting on behalf of NASC.
Personal data may therefore be processed by authorised personnel involved in NASC and its authorised administrator where reasonably necessary to provide the relevant services.
4. Payment Information
Where third-party payment gateways, banks, e-wallet providers, Buy Now Pay Later providers or other payment services are used, relevant transaction information may also be processed by those providers according to their respective privacy policies.
NASC may not receive or retain complete card or financial account details where a transaction is processed directly by a third-party payment provider.
5. Disclosure of Personal Data
Where reasonably necessary, personal data may be disclosed to:
- authorised NASC personnel;
- NASC’s authorised administrators;
- trainers and instructors;
- authorised course organisers or co-organisers;
- payment service providers;
- technology, website and hosting providers;
- training venues;
- service providers supporting programme delivery;
- professional advisers; and
- governmental, regulatory, judicial or enforcement authorities where required or permitted by law.
NASC does not sell participants’ personal data to third parties.
6. Data Security
Reasonable administrative, organisational and technical measures will be taken to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
Users are responsible for maintaining the confidentiality of their portal credentials and passwords.
7. Data Retention
Personal data will be retained for as long as reasonably necessary for the purposes for which it was collected and for legitimate certification, administrative, accounting, legal and record-keeping purposes.
Certain training and certification records may be retained for longer periods where reasonably necessary for qualification or certification verification.
8. Communications
Participants may receive communications relating to:
- registrations;
- payments;
- classes and course schedules;
- assessments;
- certification;
- account administration; and
- other NASC services.
NASC may also send promotional or marketing communications where permitted.
Participants may request to stop receiving non-essential promotional communications.
Administrative communications necessary for an active registration, certification, transaction or account may continue to be sent.
9. Access and Correction
Subject to applicable Malaysian law, individuals may request access to or correction of their personal data.
Reasonable identity verification may be required before a request is processed.
Requests may be submitted to:
10. Personal Data Protection
Personal data will be processed in accordance with the Personal Data Protection Act 2010 (Act 709), as amended from time to time, and other applicable Malaysian data protection requirements.
Nothing in this Privacy Policy is intended to limit any data protection right that cannot lawfully be excluded.
11. Changes to this Privacy Policy
NASC may update this Privacy Policy from time to time to reflect changes to its services, operations or applicable legal requirements.
The latest version published on this website will apply from its stated effective date.
12. Contact
For privacy-related enquiries:
National Association for Strength & Conditioning Research (NASC)
ROS Registration No.: PPM-013-10-01102014
Email: nascmalaysia@gmail.com
Tel/WhatsApp: +6017 399 9125