Privacy Policy
Version: 2.0
Effective Date: 01 September 2026
Last Updated: 01 September 2026
​
1. Introduction
GASOFFSHORE respects the privacy of individuals and is committed to protecting personal data in accordance with applicable laws and industry best practices.
This Privacy Policy explains:
-
What personal data we collect
-
How we collect and use personal data
-
Why we process personal data
-
How we disclose personal data
-
How we protect personal data
-
How long we retain personal data
-
Your rights regarding your personal data
-
How to contact us regarding privacy matters
By providing your personal data to GASOFFSHORE, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, disclosure, storage, transfer, retention, and processing of your personal data in accordance with this Privacy Policy and applicable laws.
​
2. Data Controller
GASOFFSHORE and, where applicable, its affiliated companies involved in recruitment, employment, crew management, and workforce deployment activities may collect, use, process, and disclose personal data in accordance with this Privacy Policy.
​
For privacy-related enquiries, please refer to Section 18.
​
3. Scope
This Privacy Policy applies to:
-
Job applicants
-
Candidates
-
Crew members
-
Employees
-
Contractors
-
Consultants
-
Clients
-
Referees
-
Emergency contacts
-
Website users
-
Any individual whose personal data is processed by GASOFFSHORE
4. Legal Basis for Processing
GASOFFSHORE may process personal data where necessary for:
-
Recruitment and employment activities
-
Personnel deployment and workforce management
-
Compliance with legal, regulatory, and contractual obligations
-
Verification of qualifications, certifications, identity, and work eligibility
-
Protection of legitimate business interests
-
Fraud prevention and security management
-
Establishing, exercising, or defending legal rights and claims
-
Purposes for which consent has been provided
5. Collection of Personal Data
Personal data may be collected through:
-
Job applications
-
Recruitment portals
-
Company website submissions
-
Email communications
-
Interviews
-
Employee referrals
-
Client referrals
-
Training providers
-
Background verification providers
-
Direct communications with individuals
Failure to provide required personal data may affect our ability to process applications, provide employment opportunities, mobilize personnel, or fulfil contractual obligations.
​
6. Categories of Personal Data Collected
Depending on the purpose of processing, GASOFFSHORE may collect:
a. Personal Identification Information
-
Full name
-
Photograph
-
Date of birth
-
Gender
-
Nationality
-
Citizenship
-
Marital status
-
National Identification Number
-
Passport details
b. Contact Information
-
Residential address
-
Correspondence address
-
Email address
-
Mobile number
-
Telephone number
c. Employment Information
-
Resume/CV
-
Employment history
-
Position preferences
-
References and referee details
-
Employment records
d. Educational and Professional Information
-
Academic qualifications
-
Professional qualifications
-
Training certificates
-
Offshore competency certificates
-
Professional licenses
-
Professional memberships
e. Offshore and Marine Information
-
Seaman Book details
-
Vessel experience
-
Offshore experience
-
Project experience
-
Visa information
-
Travel documentation
-
Mobilization history
f. Medical and Fitness-for-Work Information
Where required for recruitment, employment, offshore deployment, health and safety, insurance, regulatory, or client compliance purposes, GASOFFSHORE may collect:
-
Medical fitness certificates
-
Fitness-for-work assessment outcomes
-
Offshore medical examination clearance or status
-
Health declarations
-
Work-related medical restrictions or accommodations
-
Vaccination or health compliance information where legally required
GASOFFSHORE seeks to collect only the medical information necessary for the relevant purpose. Depending on applicable laws, regulations, client requirements, and occupational health requirements, this may be limited to fitness-for-work status, certificate validity, and operational restrictions rather than detailed medical records, diagnoses, treatment histories, or other sensitive medical information.
​
g. Financial Information
​
-
Bank account information
-
Payroll information
-
Tax-related information
h. Emergency Contact Information
​
-
Next-of-kin information
-
Emergency contact details
-
Relationship information
i. Other Information
​
-
Background verification records
-
Immigration records
-
Security clearance information
-
Other information reasonably required for recruitment, employment, deployment, compliance, or operational purposes
7. Special Categories of Personal Data
Certain recruitment, employment, and offshore deployment activities may require GASOFFSHORE to process sensitive personal data, including:
​
-
Medical information
-
Fitness-for-work information
-
Disability information
-
Health screening information
Such information will only be processed where necessary and permitted under applicable laws, regulatory requirements, client requirements, health and safety obligations, insurance requirements, or employment-related requirements.
8. Purposes of Processing
Personal data may be processed for:
​
a. Recruitment
​
-
Receiving and evaluating applications
-
Candidate screening
-
Interview arrangements
-
Qualification verification
-
Reference checking
-
Employment suitability assessments
b. Employment Administration
​
-
Employment processing
-
Contract administration
-
Payroll administration
-
Benefits administration
c. Offshore Mobilization and Deployment
​
-
Crew mobilization
-
Travel arrangements
-
Flight bookings
-
Accommodation arrangements
-
Vessel assignments
-
Project assignments
-
Rotation planning
d. Regulatory and Compliance Requirements
​
-
Immigration processing
-
Work permits
-
Visa applications
-
Medical compliance
-
Training compliance
-
Offshore competency verification
-
Client compliance requirements
e. Business Operations
​
-
Workforce planning
-
Resource allocation
-
Training management
-
Emergency response planning
-
Contractor management
f. Security and Fraud Prevention
​
-
Identity verification
-
Fraud prevention
-
Security investigations
-
Incident management
-
Audit activities
9. Disclosure of Personal Data
Personal data may be disclosed to:
​
a. Clients
For recruitment, employment, project execution, deployment, and workforce management activities.
​
b. Government and Regulatory Authorities
Where required by law, including:
​
-
Immigration authorities
-
Regulatory authorities
-
Tax authorities
-
Law enforcement agencies
-
Courts and tribunals
c. Service Providers
Including:
​
-
Insurance providers
-
Medical providers
-
Travel agencies
-
Airlines
-
Hotels
-
Training providers
-
Payroll providers
-
Professional advisers
d. Group Companies and Affiliates
Where necessary for legitimate business purposes.
e. Corporate Transactions
In connection with mergers, acquisitions, reorganizations, restructuring, or business transfers.
​
10. International Transfer of Personal Data
Due to the international nature of recruitment and workforce deployment, personal data may be transferred outside Malaysia.
​
Such transfers may involve:
​
-
Clients
-
Offshore installations
-
Project sites
-
Vessels
-
Government agencies
-
Embassies and consulates
-
Insurers
-
Medical providers
-
Service providers
llocated in jurisdictions where recruitment, employment, deployment, travel, immigration, insurance, compliance, or project execution activities take place.
​
GASOFFSHORE will take reasonable steps to ensure appropriate safeguards are implemented for such transfers.
​
11. Data Security and Confidentiality
GASOFFSHORE maintains appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, loss, misuse, destruction, or alteration.
​
Security measures may include:
​
-
Access controls
-
User authentication
-
Password management
-
Multi-factor authentication where appropriate
-
Antivirus and malware protection
-
Firewall protection
-
Network monitoring and logging
-
Encrypted communication channels
-
Data backup procedures
-
Physical security controls
-
Virtual private networks (VPNs) where applicable
-
Secure remote access controls
-
Security incident monitoring
Employees, contractors, consultants, and authorized personnel with access to personal data are subject to confidentiality obligations and may access personal data only for authorized business purposes.
​
While reasonable measures are implemented, no method of transmission or storage can guarantee absolute security.
​
12. Security Incidents and Personal Data Breaches
GASOFFSHORE maintains procedures for:
​
-
Incident reporting
-
Incident investigation
-
Personal data breach management
-
Corrective actions
-
Lessons learned reviews
Personnel are required to promptly report suspected privacy or security incidents.
​
Where required by law, contractual obligations, or regulatory requirements, GASOFFSHORE may notify affected individuals, clients, regulatory authorities, or other relevant stakeholders of material personal data breaches.
​
13. Retention of Personal Data
Personal data will be retained only for as long as necessary to fulfil:
​
-
Recruitment requirements
-
Employment obligations
-
Legal requirements
-
Contractual requirements
-
Regulatory requirements
-
Legitimate business purposes
Generally:
-
Unsuccessful candidate records may be retained for up to seven (7) years or longer where required to comply with legal, regulatory, audit, contractual, or dispute resolution requirements.
-
Crew and employee records may be retained throughout employment and for any applicable legal, contractual, regulatory, audit, or statutory retention period.
Upon expiry of the applicable retention period, personal data will be securely deleted, destroyed, anonymized, or otherwise disposed of in accordance with company procedures.
14. Your Rights and Complaints
Subject to applicable laws, you may have the right to:
​
-
Request access to your personal data
-
Request correction of inaccurate personal data
-
Update incomplete personal data
-
Withdraw consent where consent forms the basis of processing
-
Request information regarding the use and disclosure of your personal data
-
Submit complaints regarding the handling of your personal data
Individuals are responsible for ensuring that personal data provided to GASOFFSHORE remains accurate, complete, and up to date.
If you have concerns regarding the handling of your personal data, you may contact GASOFFSHORE and submit a complaint. We will investigate and respond within a reasonable timeframe.
Requests may be subject to identity verification requirements and applicable legal limitations.
​
15. Automated Decision-Making
GASOFFSHORE does not make recruitment, employment, crew selection, or deployment decisions solely through automated processing, artificial intelligence, or profiling. All significant decisions involve appropriate human review and assessment.
​
16. Cookies and Website Usage
When visiting our website, certain information may be collected through cookies or similar technologies to:
​
-
Improve website performance
-
Analyze website traffic
-
Enhance user experience
-
Support website security
Users may manage cookie preferences through their browser settings.
17. Third-Party Websites
The GASOFFSHORE website may contain links to third-party websites.
​
GASOFFSHORE is not responsible for the content, privacy practices, or security measures of third-party websites. Users are encouraged to review the privacy policies of such websites separately.
​
18. Changes to this Policy and Contact Information
GASOFFSHORE reserves the right to amend this Privacy Policy at any time.
​
Any updates will be published on our website and become effective upon publication unless otherwise stated.
​
For privacy-related enquiries, requests, corrections, consent withdrawals, or complaints, please contact:
​
Email: info@gasoffshore.com
Website: https://www.gasoffshore.com
​
​