A. INTRODUCTION
1. The Personal Data Protection Act 2010 (“PDPA”) was enacted by the government to regulate the processing of personal data. Therefore, EVERRISE is committed to ensure that your personal data is protected in accordance with the relevant laws.
2. This Privacy Notice (“Notice”) is issued to all our valued customers and/or prospective customers and/or business partners and explains how we collect and handle your personal data in accordance with the PDPA.
3. In accordance with Section 7(3) of the PDPA, this Notice is issued in both English and Bahasa Malaysia. In the event of any conflicts or discrepancies between the English version and the Bahasa Malaysia version, the English version shall prevail.
4. EVERRISE shall have the right to modify, update or amend the terms of this Notice at any time by placing the updated Notice on our website (http://www.everrise.com.my) or through other appropriate means. If EVERRISE amends this Notice, the amendment will only apply to personal data collected after EVERRISE has posted the revised Notice. By continuing to communicate with EVERRISE or by continuing to use EVERRISE’s services following the modifications, updates or amendments to this Notice, it shall signify your acceptance of such modifications, updates or amendments
1.
B. DEFINITION
1. “Personal Data” means any information in respect of commercial transactions that relates directly or indirectly to the data subject, who is identified or identifiable from that information or from that and other information in our possession, including any sensitive personal data and expression of opinion about the data subject, which we collect.
2. “Sensitive Personal Data” means any personal data consisting of information as to the data subject’s physical or mental health or condition, political opinions, religious beliefs or other beliefs of a similar nature, and the commission or alleged commission of any offence.
3. “Data Subject” means an individual who is the subject of the Personal Data.
C. PERSONAL DATA THAT WE COLLECT
1. Personal Data that we collect includes but is not limited to the following:
Customers
ü personal details such as name, IC number, age, birth date, race, address, gender, occupation, telephone number, mobile telephone number, email address, credit card number(s) etc;
ü your image by way of video surveillance installed in certain parts of our premises as part of our security infrastructure;
ü your image captured by camera or video when you attend promotional or other events held at our premises or otherwise organized by us, or captured as part of a promotional contest or other marketing activities; and/or
ü information automatically collected when you visit our website such as IP address, web browser, software, transaction information and other information.
Business Partners (vendor, supplier, tenant or service providers)
ü your personal details or that of your employees such as name, IC number, address, gender, telephone number, mobile telephone number and email address, and other details as is necessary for the conduct of the business transaction between you and us;
ü when you visit our premises, your image by way of video surveillance in certain parts of our premises as part of our security infrastructure;
ü your image captured by camera or video when you attend promotional or other events held at our premises or otherwise organized by us; and/or
ü information automatically collected when you visit our website or use the platforms that we provide to our business partners for purpose of conducting the relevant business transaction between you and us, such as IP address and other information.
2. The provision of your Personal Data to EVERRISE may be voluntary or mandatory in nature depending on the purposes for which your Personal Data is collected. Where it is mandatory for you to provide us with your Personal Data, and you fail or choose not to provide us with your Personal Data, or do not consent to this Notice, we may not be able to:
Customers
ü conduct or complete the relevant sale and purchase transaction (including online transactions) with you;
ü process or perform your request;
ü approve or continue your EVERRISE Card membership;
ü process your application for contests or redemption of complimentary gifts; and/or
ü provide you with the information, updates, products or services that you have requested.
Business Partners (vendor, supplier, tenant or service providers)
ü conduct or complete the relevant business transaction with you;
ü allow you entry into our premises or events, for security purposes; and/or
ü allow you use of our platforms provided to our business partners.
3. If you do not want your Sensitive Personal Data to be collected by us, please do not submit it. If you do choose to submit your Sensitive Personal Data to us as requested, such data shall then be deemed to be and will be treated by us as Personal Data which will be subject to the terms and scope of this Notice including for the collection, processing, use and disclosure of your Personal Data.
D. HOW IS YOUR PERSONAL DATA BEING COLLECTED
Customers
ü when you apply to be a member of EVERISE Card or register your interest with us to obtain information and updates on any products and services, whether in physical hardcopy or electronically;
ü when you enter contests or respond to our surveys, promotions or questionnaires, whether in physical hardcopy or electronic copy;
ü pursuant to any inquiry, complaint, request or communication made with or to us, whether in physical hardcopy or electronically (including through our website or other platforms);
ü when you visit our premises or attend events organized by us (in relation to CCTV images, other camera/ video images and other personal details collected for security purpose);
ü when you submit your information on our website; and / or
ü through the use of cookies on our website and other internet platforms.
Business Partners (vendor, supplier, tenant or service providers)
ü when you send us completed application forms, workers’ list, and any other forms, documents or details pursuant to any business transaction or proposed business transaction with us, whether in physical hardcopy or electronic copy;
ü when you visit our premises or attend events organized by us (in relation to CCTV images, other camera/ video images and other personal details collected for security purpose); and/or
ü through the use of cookies on our website, and also through the use of other platforms provided to our business partners.
E. PURPOSE FOR COLLECTING, PROCESSING AND USING YOUR PERSONAL DATA
1. EVERRISE may use and process your Personal Data for the purposes relating to the services you have requested and for the business activities of EVERRISE which shall include:
Customers
a) to communicate with you, including in relation to our products, contests and events;
b) to process your applications, inquiries, requests and purchases (including online transactions, if applicable);
c) to provide information, updates on our, or other, products and services;
d) for database(s) record keeping, maintenance and updating;
e) for administrative purposes including audits, fraud monitoring and prevention of crime;
f) to conduct research and statistical analysis;
g) to otherwise market and promote our products and services offered by us from time to time;
h) to ensure the security and safety of the premises (in relation to CCTV images and other details collected for security purposes);
i) for credit card application with financial institutions, only as allowed by you (in cases of joint campaigns and promotions);
j) to comply with any applicable laws, proceedings or inquiries from regulatory authorities and enforcement agencies; and / or
k) for all other purposes incidental and associated with any of the above and/or required or permitted under the PDPA.
Business Partners (vendor, supplier, tenant or service providers)
a) to fully and properly conduct the relevant business transaction with you;
b) to process any payment related to the relevant business transaction with you;
c) for insurance purposes;
d) for database(s) record keeping, maintenance and updating;
e) for administrative purposes including audits, fraud monitoring and prevention of crime;
f) to ensure the security and safety of the premises (in relation to CCTV images and other details collected for security purposes);
g) to promote our products and services offered by us from time to time, and our company (in relation to images and other Personal Data captured during attendance at events organized by us);
h) to comply with any applicable laws, proceedings or inquiries from regulatory authorities and enforcement agencies; and / or