KOMEHYO MALAYSIA SDN.BHD. Privacy Policy

Introduction

We, KOMEHYO MALAYSIA SDN.BHD., care about the protection of your personal data. This policy clarifies how we collect, use, disclose and otherwise process your personal data and the security measures that we establish to ensure that your personal data is well protected.

Your personal data will only be used as necessary to achieve the purposes set out in this policy. If you agree with the terms of this policy, you may provide your personal data to us or otherwise acknowledge receipt of this policy that you have read and consent to us processing your personal data in the manner set out in this policy. If you do not consent to the processing of your personal data, we may not be able to provide our services to you.

We treat your personal data as follows:

1) Collection of Personal Data
We collect the following personal data from you directly:
(1) Personal data collected when you buy or sell products at our store.

  • Name- Last name
  • Gender
  • Date of birth
  • Identification card details
  • Current address
  • Telephone number
  • Email

2) Legal Basis and Purposes of Use of Personal Data
We collect, use, disclose or otherwise process your personal data based on a contract, legal obligation and legitimate interest basis and for the following purposes:

  1. Promoting the repetitive and continuous use of our services;
  2. Shipping and delivering goods and/or announcing our events;
  3. Extracting and totalizing attribute information that does not identify individuals for statistical research;
  4. Direct marketing as described in 4) below; and
  5. Complying with any applicable laws and regulations in Malaysia.

In the event that it is necessary for us to collect, use, disclose or otherwise process your personal data besides the aforementioned purposes, we will notify you of the new purposes for such collection, use and disclosure. 

3) Provision of Personal Data to a Third Party

  1. Purpose of provision to a third party.
    Operating our business and announcing events.
  2. Type of personal data to be provided
    Information supplied by you through transactions such as the name, address, telephone number and e-mail address.
  3. Means or method of provision
    By sending documents, or electronic or electromagnetic methods.
  4. Persons to whom the data may be transferred
    KOMEHYO MALAYSIA SDN.BHD., and its subsidiaries and affiliates (collectively, the “KOMEHYO Group Companies”)
  5. Personal data handling agreement
    We arrange an agreement with the KOMEHYO Group Companies in a stringent manner making them not to further provide personal data provided by us to a third party.

4) Direct Marketing

  1. We may use your personal contact data for direct marketing or provide it to KOMEHYO MALAYSIA SDN.BHD., and/or any other KOMEHYO Group Companies for use by them in direct marketing in accordance with the requirements under applicable laws and regulations.
  2. The above personal contact data means customers’ name, address, telephone number and e-mail address, and the marketing subjects are products and services of KOMEHYO MALAYSIA SDN.BHD., and any other KOMEHYO Group Companies such as emails, online adverts, flyers, database marketing, promotional letters, newspapers, outdoor advertising, phone text messaging, phone calls, magazine adverts, coupons,  postcards, websites, and catalog.
  3. We will not use your personal data for direct marketing or provide it to KOMEHYO MALAYSIA SDN.BHD., and/or any other KOMEHYO Group Companies for use by them in direct marketing without your consent.
  4. If we receive your request not to use your personal data for direct marketing, or request for consent withdrawal, we will comply with your request.

5) Outsourcing of Personal Data Handling
We may share your personal data with data processing agencies and shipping companies etc. who have entered into a non-disclosure agreement with us in connection with the purposes listed in 2) above.

6) Obligatory and Voluntary Items
In the application form that you are required to fill in when using our service, all items are obligatory items except those that are indicated as voluntary items. If you fail to fill in the obligatory items, you may not be allowed to use our service. 
*Please note that surveillance cameras may be used for video recording in our shops for security reasons.

7) Procedures for access, correction, suspension and inquiry.
You, as the owner of personal data, have rights under the Personal Data Protection Act 2010 to access your personal data, request for disclosure of how the personal data has been collected, request to delete, demolish, suspend the use, amend or update your personal data. We will use our discretion to answer your request under the applicable laws and regulations. You may file a complaint to the personal data protection commission in case we fail to comply with our duties under the laws.

8) Providing Personal Data for Inspection
If the authority or police or custom require us to provide your personal data in relation to any transaction, we are obligated under the relevant data protection legislation to provide such personal data to them.

9) International Transfer
We may transfer your personal data out of Malaysia to the extent that such transfer is necessary for the purposes listed in 2) above and is permitted by the applicable data protection legislation.

10) Security Measure
We take these measures to protect your personal data against the risks arising from any loss, misuse, modification, unauthorized or accidental access or disclosure, alteration or destruction:

  1. By ensuring your personal data is kept as required by the Personal Data Protection 2010;
  2. By ensuring our employees not to misuse your personal data; and
  3. By having non-disclosure agreements with our data processing agencies and shipping companies.

11) Personal Data Retention Period
We will retain your personal data as long as you are our customer. If you are no longer our customer, we will endeavour to ensure that your personal data is destroyed or permanently deleted if it is no longer required for any purposes in accordance with applicable laws and regulations.

12) Data subject Rights
You, as the data subject, shall have the following rights under the relevant data protection legislation:

  1. The right to request access to and obtain a copy of your personal data which is in the possession of the Company.
  2. The right to correct your personal data to remain accurate, up-to-date, complete, and not misleading.
  3. The right to request the Company to erase or destroy your personal data.
  4. The right to request the Company to transmit your personal data to another data controller by way of electronic means, subject to technical feasibility and compatibility of the data format The right to withdraw the consent for the Company’s collection, use, or disclosure of the aforementioned personal data by notification to the Company.
    Nevertheless, the withdrawal of consent shall not affect the collection, use, or disclosure of personal data that you have already given the consent legally.
  5. The right to file a complaint in case the Company or its data processor including its employee or contractor who breaches or does not comply with the Personal Data Protection Act 2010.

For any inquiries regarding Personal Data, please contact our Data Protection Officer with the following contact details:
KOMEHYO MALAYSIA SDN.BHD.
202401014713 (1560563-M)
Suite 27-01, 27 th Floor Menara Keck Seng, No. 203, Jalan Bukit Bintang, 55100 Kuala Lumpur
Open 10:00 – 19:00  (except Saturday and Sunday and Public Holiday)
TEL:03-8681-6386
October 1st, 2024