Privacy Statement

1. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

We, Handal Ceria Sdn. Bhd. (Company No. 200401035161 (673670-K), are a company incorporated in Malaysia having a business address at No. 23, Jalan Firma 2, Kawasan Perindustrian Tebrau IV, 81100 Johor Bahru, Johor, Malaysia.  We act as a controller of your personal data where we determine how and why your personal data will be used.

2. WHAT PERSONAL DATA DO YOU COLLECT AND PROCESS?

Depending on the purpose for which we process your data from time to time, as explained below, we need to process one or other data, which will in general be, depending on each case, as follows:

• your identity data (for example, your name, surname, image, language and country from which you interact with us, contact data, etc.);
• economic and transactions information (for example, your payment or card data, information on your purchases, orders, returns, etc.);
• connection, geolocation and/or browsing data (for example, the location data, the device identification number, etc.);
• commercial information (for example, if you have subscribed to our newsletter),
• information about your tastes and preferences.

3. HOW DO YOU COLLECT PERSONAL DATA?

• Direct interactions. You voluntarily provide your personal data when you interact with us, such as when you register for an account, use our Platforms, fill in forms or communicate with us. In some cases, if you do not provide us with your personal data, we may not be able to sell our products to you, communicate with you, or respond to your inquiries.

• User contributions. We collect your personal data when you or others upload, share, send, or input that data through our Platforms.

• We automatically collect personal data about you when you interact with us, such as when you use our Platforms, visit our offices or events, open emails or view advertisements from us, or communicate with us. We may collect some of this personal data by using cookies and other similar technologies. A “cookie” is an element of data that can be sent to your browser. Your browser may then store it on your system based on the preferences you have set on your browser. Cookies gather information about your operating system including, but not limited to, browser type, and Internet Protocol (IP) address. Our website uses this information to analyze the traffic on our website, and better serve you when you return to our website. It is not our intention to use such information to personally identify a user. You have the option to configure your Internet browser to notify you when you receive a cookie, giving you the chance to decide whether to accept it. Further, you have the option to block all cookies. Please note, however, that if you refuse or otherwise block cookies you may not be able to use all of the functionality available on the website.

• Third-party or publicly available sources. We may receive your personal information from third parties, such as our third-party business partners, including data brokers and advertising partners; your organizations; governmental agencies who publish public records; and other publicly or generally available sources, including online websites.

4. WHY WE PROCESS YOUR DATA?

We will process your personal data for the following purposes:

• To manage your registration as user of the Platforms and to set up your account;
• To manage your purchase with us and all related matters, including but not limited to payment, delivery, return and exchange, refund, warranty claims and others.
• To communicate with you;
• For internal administrative purposes;
• For any purpose, with your consent or to follow your instructions;
• To operate or improve our products and related services, including customer service;
• To develop new products, services, content and other offerings;
• To ensure the security of our Platforms;
• To detect fraud and abuse;
• To send advertising and marketing material to you;
• To enable you to complete a survey;
• For other purposes as required by or permitted by law.

5. HOW LONG WILL WE KEEP YOUR DATA?

The period we retain your personal data is varied based upon the time your personal data is needed to fulfil the purposes described in this Privacy Statement; meet the timelines required or recommended by regulators, professional bodies, or associations; comply with applicable laws, legal holds, and other legal obligations, including contractual obligations; and comply with your requests.

6. WHAT STEPS DO YOU TAKE TO SECURE PERSONAL DATA?

We maintain appropriate technical and organizational security measures to protect the security of your personal data against the loss, misuse, unauthorized access, disclosure or alteration. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee its absolute security. The security of your information also depends on you: you are responsible for using unique, strong usernames and passwords for each of your account and for keeping your username and password confidential. We are not responsible for the circumvention of any privacy settings or cybersecurity measures contained on our Platforms, and any transmission of personal data is at your own risk.

7. WHO DO WE SHARE YOUR DATA WITH?

• Our affiliated, associated and related companies;

• Financial institutions;

• Third-party business partners that support our business, delivery partners, transporters, such as our content and other partners, vendors and subcontractors, analytics providers, advertising and marketing agencies, credit agencies, and other third parties we engage;

• Third parties to market their products or services to you;

• With governmental agencies and third parties involved in our sale or purchase of a business or assets, including in connection with a merger, divestiture, restructuring, reorganization, bankruptcy, liquidation, dissolution, or other disposition of assets.

• With law enforcement, government agencies, or other third parties in order to comply with any law, court order, legal request, or other legal process, as well as to enforce our agreements or protect the rights, property, or safety of our business, employees, customers, or others — including for the purposes of cybersecurity, fraud protection, and credit risk reduction.

• With others when necessary to fulfil your consents or to follow your instructions.

8. CHANGES TO THE PRIVACY STATEMENT

We reserve the right to change and update this Privacy Statement from time to time. Please check the Privacy Statement frequently and particularly before you submit additional personal data on the Platforms. Any changes and updates of this Privacy Statement will be effective upon posting on our website. Your continued use of the Platforms constitutes your acceptance of such changes and updates made by us.

9. WHERE DO YOU STORE THE DATA?

Your personal data may be transferred out of Malaysia and may be stored in and accessed from multiple countries as our service provider(s), business partner(s), supplier(s), contractors(s), licensor(s), advisor(s) or financial institution(s) which may be located outside Malaysia, may also have access to your personal data, for reasons relating to the purposes set forth under section 4 of this Privacy Statement. When you interact with us, you authorize us to transfer your personal data out of Malaysia, and you acknowledge the associated risk of transferring your personal data to different countries that may provide less protection than Malaysia’s privacy laws, and we may not be able to prevent government authorities in those countries from accessing your personal data.

10. WHAT ARE YOUR RIGHTS WHEN MAKING YOUR DATA AVAILABLE TO US?

If you wish to access, correct, limit or update the personal data you have submitted to us, or to make any inquiries or complaints about the processing of such data by us, please contact us in the manner as described below. We provide individuals with access to their personal data where we believe appropriate, including in situations where you are entitled to access and correct your personal data under applicable personal data protection laws.

If you have given us your consent to process your data for any purpose, you have the right to withdraw such consent at any time. In addition, where the processing of your data is based on our legitimate interest, you also have the right to object to the processing of your data.

If you believe your personal data has been subjected to misuse, you have the right to file a claim before the responsible data protection regulatory authority, in particular, before the Personal Data Protection Department which is an agency under the Malaysia’s Ministry of Communications and Multimedia Commission (https://www.pdp.gov.my/jpdpv2/?lang=en).

For any questions or comments about our Privacy Statement, or if you need assistance in respect of the personal data that we have collected about you, please contact:

Personal Data Officer

Email: dataprotection@jpjeplate.com.my

Address: No. 23, Jalan Firma 2, Kawasan Perindustrian Tebrau IV, 81100 Johor Bahru, Johor.