Privacy Policy (PDPA Malaysia Compliant)

Personal Data Collected
We collect personal information including name, contact details, identification number (if required), health declarations, emergency contacts, payment information, attendance records, and media content.

Purpose of Collection
Personal data is collected for membership administration, billing, communication, safety monitoring, marketing (where consent is provided), and compliance with legal obligations.

Data Protection
COR3 implements reasonable administrative, technical, and physical safeguards to protect personal data in accordance with Malaysia’s Personal Data Protection Act (PDPA).

Disclosure
Personal data may be shared with payment processors, booking software providers, coaches, professional advisors, or authorities where legally required. We do not sell personal data.

Data Retention
Personal data will be retained only as long as necessary for business, contractual, and legal purposes.

Member Rights
Members may request access to, correction of, or withdrawal of consent for their personal data by contacting COR3 management at feedback@cor3.club.

Marketing & Media
Photographs or videos taken in the facility may be used for promotional purposes unless a member opts out by notifying management in writing.