WHAT IS PERSONAL DATA
“Personal Data” is data, whether true or not, about you or any individual who can be identified from that data, or from that data and other information to which an organization has or is likely to have access. This includes your name, identification number, contact information, credit card information, or photograph.
Not all information we collect, use, disclose, or process constitutes Personal Data.
WHAT INFORMATION DO WE COLLECT
The information we collect from you includes:
(i) Identity data such as your name. gender, profile picture, or date of birth;
(ii) Contact data such as your home, billing or delivery addresses, contact number, email address;
(iii) Payment data such as your credit card information, bank account information, or other payment details;
(iv) Transaction data comprising information about your transactions or correspondence with us;
(v) Browsing data such as details of your visit to our Website, your activities on our Website, or resources which you access;
(vi) Profile data such as your login names and passwords, or your user preferences;
(vii) Device data such as your device information, advertising identifiers, internet protocol address, operating system, or browser type;
(viii) Location data comprising data about your location when accessing our Website;
(ix) Technical data such as error logs and reports about your use of the Website.
HOW DO WE COLLECT INFORMATION
We collect information in the ways set out below. We may combine collected information with other information we possess
Information you voluntarily provide. We receive and store information which you enter into our Website or provide to us in any other way. For example, you may provide information to us when you:
(i) fill up user profiles, registration forms, or register a user account;
(ii) contact or communicate with us;
(iii) interact with our social media pages;
(iv) participate in contests or events organized by us;
(v) fill up surveys; or
(vi) provide comments, feedback, or ratings.
If you choose not to provide certain information when requested you may not be able to take full advantage of our services or features.
Information we automatically collect. We receive and store information through normal operation of our Website and services when you interact with us. For example, information is collected automatically:
(i) when you transact with us or make purchases;
(ii) when you interact with our Website; or
(iii) when you access our Website by our software tools including cookies, web beacons, scripts, or code. Please see the section “Cookies and similar technology” below for more information.
Information from other sources. We may receive Personal Data from other sources. Where Personal Data is transferred to us, we endeavor to ensure that the transfer is in accordance with applicable laws. Examples of how we may receive information from other sources include:
(i) referral programs;
(ii) our business partners;
(iii) insurance and financial providers;
(iv) publicly available data;
(v) marketing services providers; or
(vi) data provided by other users, including yourself.
WHAT DO WE USE COLLECTED INFORMATION FOR
Personal Data collected from you may be collected, used, or disclosed for any of the purposes stated below.
For our business operations, including:
(i) facilitating or processing your transactions with us;
(ii) processing payment for your orders;
(iii) delivering products you purchase from us;
(iv) communicating with you regarding your use of our Website or our services;
(v) processing, administering, managing, or contacting you on matters relating to your membership with us;
(vi) carrying out your instructions;
(vii) responding to any enquiries or requests by you;
(viii) customizing your experience with us, identifying your preferences, recommending features, products, or services; or
(ix) improving our Website or services.
To improve our services, including:
(i) conducting customer satisfaction surveys and collecting feedback from you;
(ii) conducting research, analysis and development activities (including but not limited to data analytics, surveys and/or profiling) to improve our services or develop new features or products.
For marketing and promotional purposes, including:
(i) processing and sending to you marketing, advertising, and promotional information on our products, events, launches, promotions, by us or our business or brand partners, via postal or electronic mail;
(ii) where you consent, processing and sending to you marketing, advertising, and promotional information on our products, events, launches, or promotions, of us or our business or brand partners, via voice or phone call, SMS, or fax;
(iii) targeting or retargeting you with advertisements, or serving you customized advertisements across other websites, applications, or social media sites which you visit; or
(iv) administering or enrolling you in lucky draws, contests, or other similar promotions.
For safety and security purposes, including:
(i) storing, hosting and/or keeping a back-up (whether for disaster recovery or otherwise) of your Personal Data, whether within or outside Malaysia;
(ii) performing credit risk, know-your-customer, anti-money laundering / countering the financing of terrorism, financial and other relevant risk assessments;
(iii) performing identification checks on you such as verifying your identity or age;
(iv) protecting the rights, property, or safety or any person, including for the purposes of fraud detection and prevention; or
(v) preventing or investigating any fraud, unlawful activity, omission or misconduct, whether relating to your use of our website or nay other matter arising from your relationship with us, and whether or not there is any suspicion of the above.
For general business or legal purposes including:
(i) investigating and resolving claims and disputes;
(ii) internal and statutory reporting or record keeping;
(iii) responding to requests for information from public, governmental, or regulatory authorities;
(iv) for audit, compliance, investigation and inspection purposes;
(v) complying with any applicable law, regulatory, legal process, or government request;
(vi) enforcing or applying our Website terms and conditions, or protecting our rights or property;
(vii) responding to legal process, pursuing legal rights and remedies, defending litigation, or managing any complaints or claims;
(viii) in connection with business transactions such as mergers, acquisitions, joint ventures, sale of company assets, consolidation, restructuring, financing, business asset transactions, or acquisition of our business.
(ix) any other purposes permitted by law; and
(x) any other purposes which we specifically seek your consent, which you may withdraw at any time.
DISCLOSURE OF PERSONAL DATA
We may disclose your Personal Data in furtherance of the above purposes, or where permitted by applicable law.
Your Personal Data may be transferred to the following third parties:
(i) Our affiliates, related corporations, and/or agents;
(ii) Third party service providers whom we engage to perform business operations or provide services to you on our behalf. Examples of our third party service providers include:
providers of equipment and services relating to IT equipment used to store and access information which we collect;
service providers to host and maintain our Website;
logistics service providers;
e-commerce service providers;
payment processing service providers;
cloud storage service providers;
customer service providers;
data analysis service providers;
marketing service providers;
(iii) our auditors and legal advisors;
(iv) public, governmental, or regulatory authorities; or
(v) courts and other alternative dispute forums.
We may provide third parties (whether or not located in your country of residence) information about our Website's users, for system administration or to report aggregate information to our advertisers. This may include information about your computer, your IP address, operating system, and browser type. Aggregate information is anonymised statistical data about our user's browsing actions and patterns and does not identify any individual.
If you, at any time, have any complaints or grievances about your personal data, any suspicion that your privacy has been breached, queries on this policy or any other queries in relation to how we may manage, protect and/or process your personal data, please do not hesitate to contact us at https://support.cathkidston.com.my/hc/en-us/requests/new.
Please indicate in the subject header that it is a data protection issue so that we can attend to your complaint speedily by passing it on to the relevant staff.
ACCESS OR CORRECTION OF YOUR PERSONAL DATA
You may update certain information about yourself on pages on our Website such as the profile page.
You may request to access and/or correct your Personal Data currently in our possession or control by submitting a written request to us at the contact details above. The following terms apply:
(i) all requests are subject to applicable law;
(ii) we will need enough information from you to ascertain your identity and the nature of your request before we can deal with your request;
(iii) we reserve the right to charge a reasonable fee for the handling and processing of your requests to access or correct your Personal Data. We will provide you with a written estimate of the fees and reserve the right not to respond with your request until you have agreed to pay the fee; and
(iv) where Personal Data is corrected, we may, at our discretion, send the corrected Personal Data to any organisations which your Personal Data was disclosed by us within a year before the date the correction was made, unless the corrected Personal Data is not needed for legal or business purposes. Please let us know if you prefer to only send the corrected personal data to specific organisations.
If you do not wish to receive marketing related communications from us, you may unsubscribe from our newsletter using the unsubscribe links included or changing your preferences in the profile page of our Website.
You may withdraw your consent for the collection, use, or disclosure of your Personal Data in our possession or control by submitting a request to us by email. We will process your request within a reasonable time.
You acknowledge that by withdrawing your consent, you may not be able to access services that are provided on our Website.
ADMINSTRATION AND MANAGEMENT OF PERSONAL DATA
You will only provide accurate data to us and must update us of any changes in your Personal Data that you had initially provided to us with. We will not be responsible for relying on inaccurate or incomplete Personal Data arising from your failure to update us of any changes in your Personal Data.
You should be aware that no method of transmission over the internet or electronic storage is completely secure. We cannot assume responsibility for any unauthorised use of your personal data by third parties which are wholly attributable to factors beyond our control.
You should safeguard your device, user account, and password to your user account against any unauthorized access. If any of these are compromised, you may lose control of your Personal Data in our possession. If you believe any of the above are compromised, you should contact us immediately and change your password. You are reminded to log out of your account at the end of each browsing session.
We may, at any time, or if required by law, destroy and/or anonymize Personal Data in our possession.
LINKS TO OTHER WEBSITES
Our Website may contain links to other websites and resources operated by third parties or our affiliates. These links are provided for your information only. We have no control over the content of and the information contained in those websites or resources, and accept no responsibility for any loss or damage that may arise from your use of them. We are not responsible for the privacy practices of these websites or resources.