Privacy

Konnactiv Privacy Policy

Last updated: 8 August 2026

Konnactiv ("we", "us", "our") is operated by Evovents Asia Sdn. Bhd. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our platform, whether as a guest, a business partner, an event organiser, a customer of one of our business partners, or a visitor to our website.

This policy is written to comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia, as amended, and we encourage you to read it carefully before using Konnactiv.

1. Who This Policy Applies To

This policy applies to:

  • Guests — individuals who register for events partnered with Konnactiv and access participating businesses through our network.
  • Business Partners — gyms, studios, boxes, personal training spaces, and other businesses of a similar nature, such as clubs, court and facility bookings, and enrichment or wellness providers, that use Konnactiv to manage bookings, memberships, and customer relationships.
  • End Customers — individuals who are customers or members of a Business Partner, and whose booking, membership, or profile information is managed through Konnactiv on the Business Partner's behalf.
  • Event Partners — organisers of events who integrate Konnactiv into their guest experience.
  • Website Visitors — anyone browsing konnactiv.com, regardless of registration status.

2. What Personal Data We Collect

Depending on how you interact with Konnactiv, we may collect the following categories of personal data:

From Guests

  • Full name
  • Phone number, used for Business Partner notifications and not for identity verification
  • Email address, used for identity verification
  • Event registration details, including which event you participated in and ticket or order number
  • Business preferences and booking history
  • Session confirmation status

From Business Partners

  • Business name and registered address
  • Contact person name and role
  • Business phone number and email
  • Operating hours and facility details
  • Guest booking and referral history
  • Billing and subscription information, where a paid plan is used

From End Customers

This information is managed through a Business Partner's Konnactiv account and may include:

  • Full name and contact details, including phone number and email address
  • Membership or package information, including plan type, start and end dates, and renewal status
  • Booking and attendance history
  • Payment and transaction records processed via our third-party payment processor, as described in Section 7

Konnactiv provides the booking, membership, and customer management system used by our Business Partners. In this context, the Business Partner is responsible for the accuracy and lawful collection of their End Customers' data, and Konnactiv processes this data on the Business Partner's behalf and in accordance with their instructions, as further described in Section 5.

From Event Partners

  • Company or organisation name
  • Contact person details
  • Event details, including event name, date, and ticket volume

From Website Visitors

  • IP address
  • Browser type and device information
  • Pages visited and time spent on our website
  • Cookies and similar tracking technologies, as described in Section 9

We do not knowingly collect sensitive personal data such as health records, religious beliefs, or financial information beyond what is necessary for basic verification, booking, payment processing, and communication.

3. How We Collect Your Data

We collect personal data through:

  • Direct registration on the Konnactiv platform
  • Event Partner confirmation emails containing a Konnactiv access link
  • Email-based identity verification during onboarding
  • Forms submitted by Business Partners and Event Partners during affiliation or account sign-up
  • Booking, membership, and profile information entered by Business Partners or their End Customers directly into the Konnactiv system
  • Payment information submitted through our third-party payment processor at the point of transaction
  • Automated collection via cookies when you browse our website

4. Why We Collect and Use Your Data

We process personal data for a number of purposes, depending on who you are and how you use Konnactiv.

For Guests, we verify your identity by email before granting access to fitness sessions, and we use your information to connect you to the business you have selected.

For Business Partners, we provide them with a guest's name, email, and phone number once that guest selects their business, so the Business Partner can reach out directly, and we use Business Partner information to manage their affiliation and subscription with our network.

For End Customers of a Business Partner, we process your booking, membership, and payment information solely to operate the booking and customer management system on behalf of that Business Partner, in accordance with their instructions.

For Guests and Business Partners together, we send service-related communications such as booking confirmations and updates, and where you have opted in, we coordinate brand activation events at partner businesses.

For Event Partners, we manage their affiliation and integration with our network.

For all Website Visitors, we use browsing data to improve our website and platform performance.

For all users of Konnactiv, we process personal data as necessary to comply with our legal and regulatory obligations.

We do not use your personal data for any purpose beyond what is described above without first obtaining your consent where consent is required under the PDPA.

5. Our Role as a Data Controller and Data Processor

Konnactiv acts in different capacities depending on the nature of the data involved, and it is important that you understand which applies to you.

As a Data Controller, Konnactiv determines the purposes and means of processing personal data belonging to Guests, Business Partners, and Event Partners who interact directly with our network, such as event-to-business guest connections and business affiliation management.

As a Data Processor, Konnactiv processes End Customer data on behalf of, and under the instructions of, our Business Partners who use our booking and customer management system.

In this capacity, the Business Partner remains responsible as the data controller for their own End Customers, including obtaining appropriate consent from their customers, ensuring the lawfulness of the data they input into Konnactiv, and responding to their customers' data protection requests in the first instance. Konnactiv supports Business Partners in fulfilling these obligations where reasonably possible.

If you are an End Customer of a Business Partner and have questions about how your data is used, we encourage you to contact that Business Partner directly in the first instance, in addition to or instead of contacting Konnactiv.

6. Legal Basis for Processing (PDPA Compliance)

Under the Personal Data Protection Act 2010 (PDPA), we obtain consent before collecting, using, or disclosing personal data where consent is required, except where processing is otherwise permitted by applicable law.

Depending on the circumstances, we may rely on the following grounds to process personal data:

  • Consent — where consent is required, you provide consent when registering as a Guest, Business Partner, or Event Partner, or through another applicable consent or verification step. For End Customer data, appropriate consent may be obtained by the relevant Business Partner acting as data controller.
  • Contractual necessity — processing may be necessary to fulfil obligations associated with providing requested services, such as connecting a Guest with a Business Partner or operating the booking and membership system for a Business Partner and their End Customers.
  • Processing otherwise permitted by law — personal data may be processed where the PDPA or other applicable Malaysian law permits or requires that processing.
  • Legal obligation — where processing is required by Malaysian law, regulatory authorities, or other applicable legal requirements.

Your Rights Under the PDPA

As a data subject under the PDPA, you may have the right, subject to applicable requirements, to:

  • Access — request access to the personal data we hold about you
  • Correction — request correction of inaccurate or outdated personal data
  • Withdraw consent — withdraw consent to processing, subject to applicable legal or contractual restrictions
  • Limit processing — request that we limit certain processing where applicable
  • Data portability — where applicable and subject to applicable legal and technical requirements, request transmission of your personal data in accordance with the PDPA

To exercise any of these rights, please contact us using the details in Section 12.

If you are an End Customer of a Business Partner, your request may also need to be directed to that Business Partner, who holds primary responsibility for your data as described in Section 5.

We will respond to data protection requests within the timeframe required by applicable law.

7. Who We Share Your Data With

We may share your personal data with:

  • Business Partners — limited to the information necessary to facilitate a Guest's session booking, including name, email, and phone number, or to operate the booking and membership system where you are their End Customer. Konnactiv does not control or specify how a Business Partner chooses to contact you using this information.
  • Event Partners — limited to confirmation that a Guest has claimed their session benefit, where required for their own reporting.
  • Brand Partners — only where you have participated in a brand activation event, and only with data relevant to that specific activation.
  • Payment processors — such as Stripe, to process transactions initiated by End Customers of a Business Partner. Payment card details are handled directly by our payment processor in accordance with their own security standards and are not stored on Konnactiv's own systems.
  • Service providers — third-party tools we use for hosting, email delivery, and analytics, subject to applicable contractual and confidentiality requirements.
  • Regulatory or legal authorities — where required by Malaysian law.

We do not sell your personal data to third parties for marketing purposes.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law.

  • Guest data is retained for the duration of your active engagement with our network, and for a reasonable period afterward to support your continued access to businesses in our network.
  • Business Partner data is retained for the duration of the affiliation or subscription and a reasonable period after termination for record-keeping purposes.
  • End Customer data is retained for as long as the relevant Business Partner maintains an active account with Konnactiv, or as instructed by that Business Partner, and for a reasonable period afterward for record-keeping purposes.
  • Event Partner data is retained for the duration of the affiliation and a reasonable period after termination for record-keeping purposes.
  • Website analytics data is retained in accordance with our cookie practices described in Section 9.

Upon request, and where legally permissible, we will delete or anonymise personal data as appropriate.

9. Cookies and Tracking Technologies

Our website uses cookies to improve your browsing experience, understand site usage, and support essential functionality.

Types of cookies we may use include:

  • Essential cookies — required for the website and platform to function properly
  • Analytics cookies — help us understand how visitors use our website
  • Preference cookies — remember settings and preferences

You can control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

10. Data Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, misuse, or destruction. This includes secure data storage, access controls, and encrypted communication where applicable.

Payment transactions are handled through our third-party payment processor's own secure infrastructure.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

Konnactiv is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

If we become aware that we have inadvertently collected data from a minor without appropriate consent, we will take appropriate steps regarding that data.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how your personal data is handled, please contact us at:

Evovents Asia Sdn. Bhd.
Operating Konnactiv
Email: support@konnactiv.com

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

Any changes will be posted on this page with an updated "Last updated" date. Continued use of Konnactiv after changes are posted constitutes your acceptance of the revised policy, to the extent permitted by applicable law.