Privacy Notice
A. INTRODUCTION
1. IIPCC Malaysia Berhad. (“IIPCC Malaysia”, “we”, “our” or “us”) values and is committed to protecting your Personal Data (as defined below). As such, in compliance with the Personal Data Protection Act 2010 (the “Act”) and commitment towards the protection of your Personal Data, we have put in place this Privacy Notice (“Notice”).
2. This Notice explains the type of Personal Data we collect or have collected, how we collect, process, store and retain your Personal Data, and to whom we disclose or have disclosed your Personal Data as required under the Act.
3. By providing your Personal Data to us and/or continuing access to any of our websites, online platforms and/or mobile applications (collectively “our Sites”), you declare that you have read and understood this Notice and agree to us processing your Personal Data in accordance with the manner as set out in this Notice.
4. Kindly note that we reserve the right to amend, update and/or vary this Notice at any time. Notification of such revision shall be posted on our Sites and/or other means of communication deemed suitable by IIPCC Malaysia. Please check our Sites from time to time to stay informed of any revisions to this Notice.
B. COLLECTION OF PERSONAL DATA
1. We collect and process your personal data in the course of your dealings with us, which includes without limitation:
I. your personal details, such as your name, company name, residential address, contact number, email address, date of birth, race, gender, marital status, national registration identity card number, passport number, nationality, images and biometrics;
II. specimen, digital or electronic signatures as recognised under applicable laws and regulations;
III. your payment details such as your debit/credit card information, bank account details and payment history;
IV. financial information such as your income and risk profile;
V. technical information such as Internet Protocol (IP) address, browser type and version, time zone settings, browser plugin types, operating systems and platform, device information and account login information;
VI. information relating to your activities, habits, preferences and interests arising from your use of our products and services including your views or opinions made known to us via feedback or surveys;
VII. any details relating to any other person(s) who may be identified from any information, data or document you submit to us; and/or
VIII. any other personal information you provide to us in the course of your dealings with us, (collectively referred to as “Personal Data”).
2. We may collect Personal Data:
I. when you ask us about our products or services or otherwise communicate with us;
II. when you enter into a contract with us;
III. when you place an order for the purchase or rental of the products or services with us, both online or offline;
IV. when you make payment for the purchase or rental of our products or services;
V. when you register an account with us;
VI. when you participate in our promotional events;
VII. from publicly available sources;
VIII. when you access our Sites;
IX. when we provide any goods or services to you;
X. when you provide us with any feedback, participate in surveys and/or lodge a complaint with us; and/or
XI. where relevant, from third parties.
C. PURPOSES
We may use and process your Personal Data in a number of ways, including but not limited to the following purposes:
I. to register an account with us on our Sites;
II. to create, manage and maintain your account on our Sites;
III. to process and fulfil your orders of our products or services, both online or offline;
IV. to assess and/or verify your creditworthiness;
V. to process payments made by you or on your behalf for the purchase or rental of our products or services;
VI. to provide care and enhance customer satisfaction, including but not limited to, resolving complaints, dealing with and/or responding to requests and enquiries, warranty, returns and/or other after sales services;
VII. to manage and maintain our relationship with you;
VIII. to keep you informed of our products and/or services, promotions, discounts, and/or events;
IX. to analyse and enhance our marketing communications and strategies;
X. to operate, evaluate and improve our business and the products and services we offer;
XI. for internal record keeping or other administrative purposes;
XII. for statistical analysis purposes;
XIII. for recruitment purposes;
XIV. for information management and security purposes, including but not limited to managing and administrating e-mails, handling and investigating any security related issue, vulnerability, and/or incidents;
XV. (if no longer a customer of IIPCC Malaysia) where there are outstanding obligations either on your part or on our part;
XVI. to exercise of any functions conferred by law and/or towards the administration of justice; and/or
XVII. for and/or in connection with all other purpose incidental and/or ancillary to our business or in furtherance to any of the abovementioned purposes,
(collectively referred to as “Purposes”).
D. DISCLOSURE TO THIRD PARTIES
1. If and when necessary in connection with the above Purposes, your Personal Data may be disclosed and/or transferred to third parties which may or may not be located outside Malaysia, including but not limited to:
I. our affiliates;
II. our employees, authorised agents or contractors and other third party service providers who provide services to IIPCC Malaysia for any of the Purposes contemplated in Paragraph C;
III. our external advisors, professional or otherwise, including solicitors, accountants and auditors; and/or
IV. government or quasi-government and regulatory authorities.
2. In addition to the above, we may also disclose and transfer your Personal Data to the above third parties for the purposes of any corporate exercise involving IIPCC Malaysia including any merger or acquisition.
E. SECURITY OF PERSONAL DATA
Although we endeavour to maintain appropriate technical and organizational security measures to protect the security of your Personal Data against loss, misuse, unauthorized access, disclosure or alteration, no electronic transmission of information can be entirely secure. We cannot guarantee that the security measures we have in place are one hundred percent sufficient or effective to safeguard your Personal Data. As a user of our Sites, you agree to assume all responsibilities and risks in your use of our Sites, and acknowledge the existence of all such risks in using the internet generally. To further protect your Personal Data, you should safeguard your username and password (registered on our Sites) and not share such information with anyone.
F. ACCESS AND CORRECTION
Under the Act, you have the right of access to your Personal Data upon payment of a prescribed fee and you may request that we correct any of your Personal Data that is inaccurate, incomplete or outdated unless compliance is refused under the Act. We will notify you of the reasons for not being able to accede to your request. We may also exercise our discretion in allowing the corrections requested and/or may require further documentary evidence of the new data to avoid fraud and inaccuracy.
G. CONSENT, WITHDRAWAL OF CONSENT AND OPT-OUT
1. Except as otherwise provided in this Notice, we only collect the Personal Data that you provide to us. If you would prefer that we do not collect Personal Data from you, please do not provide us with any such information or access our Sites. By visiting our Sites, providing Personal Data to us, or otherwise interacting with us, you shall be deemed to have read and consented to our processing of your Personal Data in the manner as described in this Notice. You may withdraw your consent to our processing for any of the above Purposes, at any time by contacting us via the contact details provided below at Paragraph K. If we do not receive any notification from you concerning our processing of your Personal Data, we shall proceed to continue to process the same for the Purposes as set out above, on the basis that you have consented to our current as well as all our previous processing of your Personal Data in accordance with this Notice.
2. Please note that we may not be able to provide you with our goods or services if you do not provide us with your consent or withdraw your consent for any of the Purposes.
3. Notwithstanding any other provision in this Notice, you may opt out of or unsubscribe from receiving our promotional materials by emailing us via the contact details provided at Paragraph K.
4. Where you provide us with Personal Data of other data subject(s), you agree that you shall ensure that the data subject(s) has given consent to this Notice.
H. RETENTION PERIOD
We only keep your Personal Data for as long as we require it in order to fulfil the Purposes stated above (unless we are required to keep it for a longer period to satisfy any legal, regulatory and/or accounting requirements or to protect our interests).
I. THIRD PARTY WEBSITES
Our Sites may provide links to other websites or social media platforms, including those of our partners, vendors, sponsors, advertisers and affiliates. Please note that we are not responsible for those websites or social media platforms. If you link to or otherwise visit any other site, please review the privacy policies posted at that site.