The Personal Data Protection Act 2010 (the "Act"), which regulates the processing of personal data in commercial transactions, applies to HDI365 Sdn Bhd ("HDI365”, “ChupLa”, "we", "us", "our"). For the purpose of this written notice ("Privacy Notice"), the terms "personal data" and "processing" shall have the same meaning as prescribed in the Act. This Privacy Notice is to help you better understand the manner in which your personal data is managed and to give you the options available to you to access or limit the use of the information provided.
-
Categories of personal data that we collect
1.1. The personal data collected and processed by us may include:
- - Name, Identity Card number, address, and date of birth
- - Contact details including address, phone number(s), and email address
- - Occupation and marital status
- - Mother's maiden name
- - Any other personal data required for the purposes as set out below
-
Purpose of collecting your data
2.1. The personal data previously collected from you is being, and will continue to be used for purposes including without limitation:
- - To process your Membership application
- - To operate and verify your Account, confirm, verify your identity and update your status as a Member
- - To facilitate access to and use of the website and mobile services relating to the Account
- - To make decisions in relation to Members, including (without limitation), suspend the provision of services or terminate the Membership
- - To monitor volume and spend information
- - To conduct market research and/or statistical analysis including without limitation consumer behaviour
- - To identify and (if possible) prevent fraud
- - For marketing purposes (subject to any objections received and/or consents obtained, for which see below)
- - To communicate via Points Summary Statement, e-statement, sms blast, telemarketing or email blast
- - To promote offers HDI365’s products and services and that of our business Partners
- - To reply to enquiries made via call, email, letters, faxes, social media platform and such other acceptable modes of communication
- - To fulfill your requests including redemption requests
- - To administer your participation in contests
- - To facilitate the selection of winners in contests
-
Source of your personal data
3.1. Your personal data is being or is to be collected from you, third party service providers, registration forms, redemption forms, evaluation forms, your business cards, social media platforms and such other acceptable modes of communication such as Facebook, Instagram etc., events, roadshows, CCTV recording, email, website/mobile application, any other forms through which we collect information from the members, telephone calls.
-
Disclosure of your personal data
4.1. Your personal data will be kept confidential but such personal data may be provided to the following parties for the purposes set out above:
- - To our business Partners (including promotional or short-term Partners) and/or any other company that is permitted to supply products and/or services to Members
- - Any agents, service providers and/or subcontractors of HDI365 and its affiliates
- - Any person to whom HDI365 proposes to transfer any of its rights and/or duties relating to the programme
- - And/or any other person(s) required or permitted by law or any regulatory authority
4.2. All parties mentioned above are required to protect the confidentiality of the personal data they receive.
-
Transfer of Personal Data to places outside Malaysia
5.1. We may transfer your personal data to a place outside Malaysia and you hereby give your consent to the transfer.
-
Non-Provision of Personal Data
6.1. It is obligatory that you supply us the details marked with asterisk (*) in our forms. Failure to disclose sufficient personal data may result in us being unable to provide you with the full range of services under the programme.
-
Access and Correction of Personal Data
7.1. The Act allows you the right to access and to correct the personal data you have submitted. You may at any time update or amend the information provided to us simply by accessing 'Update Profile' on our website, or contact our Member Services Centre. Subject to provisions of the Act, you may, upon payment of a prescribed fee, make a data access request in writing to us; and we may refuse to comply with a data access request or a data correction request and shall, by notice in writing, inform you of our refusal and the reasons for our refusal.
-
Withdrawal of Consent
8.1. You have the right to withdraw your consent previously given to us (in full or in part) subject to any applicable legal restrictions, contractual conditions and a reasonable duration of time for the withdrawal of consent to be effected by providing us a notice in writing. If you withdraw your consent to any or all use of your personal data, we may not be in a position to continue to administer any contractual relationship in place, which in turn may also result in the termination of any agreements with us.
-
Your options and how to contact us
9.1. You may at any time exercise your right to access and correct your personal data, withdraw the consent which you have previously given, make a request in writing to limit the processing and use of your personal data, including to prevent usage of your personal data for the purposes of direct marketing.
9.2. Please email your request to our Member Services Consultant at [email protected] during office hours from Monday to Friday 0930 hrs to 1730 hrs.
-
Third Party Personal Data
10.1. In the event that personal data of any third party is supplied by you to us, you shall ensure that such third party has read this Privacy Notice and consented to us collecting his/her personal data for any of the purposes prior to the supply of his/her personal data to us.
10.2. For as long as you remain a Member in the programme, your information will remain with HDI365 and we will take all practicable steps to ensure the security of the data at all times from any unauthorized access. HDI365 will endeavor not to disclose any personally identifiable information to any organization unless necessary to operate the programme and/or as set out in this Privacy Notice.
10.3. HDI365 reserves the right to amend this Privacy Notice from time to time. Any material changes will be posted on our website with the updated Privacy Notice.
Thank You.
HDI365 Sdn Bhd.