PRIVACY POLICY

This Privacy Policy was last updated on 1 June 2022.

Ramssol Group Berhad and its group of companies (for further information on Ramssol Group Berhad’s group of companies, please visit https://www.ramssolgroup.com/corporate-structure) (“Rams”, “we”, “us”, “our”) are committed to protecting and respecting your privacy. We adhere to ethical business conduct and compliance with the applicable legal framework including Personal Data Protection Act 2010 [Act 709] and any similar applicable laws or regulations in the primary jurisdiction that relate to personal data protection (“PDPA”). We are aware of your trust in our services and recognizes your need for security in transaction and handling of your personal data. We invite you to read this Privacy Policy carefully to understand our practices regarding your personal data and privacy so that you can be assured that your personal data entrusted to us will be processed in accordance with the laws.

1. Collection of Personal Data

Generally, you may visit our website as a casual browser without providing your personal data.

However, we will collect your personal data when you subscribe to our newsletter through our website. We store and process your name, email address and any other necessary details for the newsletter. Once the subscription is successful, you will receive news and updates from us via email.

In addition, we may also collect your personal data when you choose to transact with us i.e. for subscription of any products and/or services, where you will be asked to provide your personal data such us (but not be limited to) name, National Registration Identification Card number, passport number, mailing address(es), email address(es) or contact details. When you use our website to make online payment transactions, your credit/debit card information will also be collected for the processing of such payments.

By providing your personal data to us, you hereby consent and authorize us to collect, process, use and disclose your personal data as prescribed in this Privacy Policy and as permitted by the PDPA. In the event that you are to provide or disclose to us the personal data of the third party in any application, you hereby represent and warrant that consent has been obtained from the third party to allow Rams to process the personal data for the Purposes set out herein.

Our products and/or services shall include any and all products and/or services provided by Ramssol Group Berhad and its group of companies.

2. Types of Information That We Collect & How We Collect It

We may collect the following information about you:

personal details and contact information such as your name, address, phone number, and email address;
payment information such as your debit or credit card information, including the name of the cardholder, card number, billing address, expiry date, and other bank account details;
sensitive information such as your racial or ethnic origin, political opinions, religion or other beliefs, health, criminal background, or trade union membership. We do not generally collect sensitive information unless it is necessary due to exceptional circumstances including as prescribed by the laws to serve you better and meet your particular needs;
recording of your photograph, video, and voice during any of our corporate events or our business operation;
resume or CVs when you apply for a job with us; and
any other information that is collected from you automatically such as your browser type and such other information depending on your visit to our website.

We may also collect, receive, store and use the information regarding customer demographics, interests and behaviors based on the data hereinabove to conduct research and to serve you better. The research may be compiled and analyzed on an aggregated basis. These data are non-identifiable and do not identify you personally. We may share this non-identifiable and aggregate data with our affiliates or our authorized third party (including but not limited to business partners, contractors, agents, accountants, auditors, debt collectors, credit reporting agencies, legal advisors, advisers, or any other party appointed by Rams) only for lawful purposes.

We may collect this information directly from you, your authorized representatives, or public resources, when you interact with our website, contact us, register for our services or place an order for our products/services, commence a business relationship with us, apply for a job with us, interact with us via our social media or interactive applications, or when you take part in our online initiatives.

We always aim to gather only the information that we need.

3. Use of Personal Data

We do not keep your personal data for longer than is necessary and we will keep your personal data for the duration of the contract and continue to store it as required by our company policy and for a period as permitted by applicable law. We will only use the personal data to fulfill the purposes it was collected and as permitted by applicable laws. We will process your personal data for the purposes as follows:

to process your order and manage your account;
to provide services/products to you in compliance with PDPA and related rules and regulations both currently enforceable or to be amended in the future, and to comply with legal obligations;
to carry out, maintain, and manage your relationship with us including our business transactions and dealings;
to manage financial operations including verifying and processing payment, billing and billing inquiries;
to enable you to provide feedback, complaints, or suggestions to us;
to contact you through any available channels to inquire or inform you, to check and verify your account information, or survey poll, or inform other information related to our services as necessary and appropriate;
to prepare for invitations, registration, and/or sign-ups for our events, products, and services;
to understand your needs and customize our website according to user’s interests;
to enable us to provide you with information that we think may be of interest to you;
to enable us to provide and improve our services and matters related to it, and send information on our services;
to carry out research and statistical analysis to help improve our content, our products, and services and to help us better understand your requirements and interests;
to target our marketing and advertisement and those of our partners more effectively;
in other circumstances, such purposes that are necessary or directly related to your relationship with us or where it is permitted under the applicable laws;
for the establishment, compliance, exercise, or defense of legal claims, and for initiating litigation, as well as proceeding for legal enforcement including but not limited to, investigation and/or examination by government officials, for case preparation, and/or defense of legal claims in court; and
to meet our legal or regulatory obligations (if any).

The above shall collectively be referred to as “Purposes” in this Privacy Policy.

4. Data Sharing and Transfer

We may share your personal data where necessary and only on a need-to-know basis:

within our group of companies;
government agencies, authorized official authorities under the law to comply with the law and regulations;
with companies, organizations, professional advisors, and consultants or third parties who work on our behalf to provide our services/products;
with third parties in connection with the transfer of all or any part of our business or assets;
with any credit reporting agencies or in the event of default, any debt collection agencies subject to the permitted law applicable to us;
with other parties in respect of whom you have given your express or implied consent; and
that is deemed necessary to do so to comply with applicable laws and regulations. This includes, but is not limited to, judicial conduct, court order, or legal action.

It may be necessary for us to transfer your personal data outside Malaysia if any of our service/product providers, business partners, or subsidiaries that are involved in providing part of a services/products are located in countries outside Malaysia. By continuing accessing and/or using Rams products and/or services you hereby agree and consent to us transferring your personal data outside Malaysia in these instances. We shall be responsible to ensure that our providers, business partners, and subsidiaries are contractually bound to adhere to the confidentiality and security of your personal data.

When we transfer your personal data, we ensure that we practice strict conditions of confidentiality and a high standard of security procedures.

5. Your Rights to Your Personal Data

By submitting your personal data to us, you hereby have consented to the use of it as set up in this Privacy Policy.
You have the rights to be informed or obtain a copy of your personal data being processed by us or request us to inform what sources the personal data originated that you have not given consent to.
Where we are relying on consent to process your personal data, you may withdraw your previous consent for using and processing your personal data. However, withdrawal of your consent does not affect the lawfulness of processing based on your previous consent before such withdrawal.
You have the right to object to the processing of your personal data at any reasonable time in one of the following circumstances:

5.1 where the personal data is collected with the exemption to consent unless (i) the collection, use, or disclosure of such personal data can be demonstrated by us that there is a compelling legitimate ground; and (ii) the collection, use, or disclosure of such personal data is carried out for the establishment, compliance or exercise of legal claims, or defense of legal claims;

5.2 the collection, use, or disclosure of such personal data is for direct marketing; and

5.3 the collection, use, or disclosure of the personal data for scientific, historical, or statistic research, unless it is necessary to the performance of a task carried out for reasons of public interest by Rams.

5. You may access, correct, complete, and update your personal data held by us. Please note that we may not be able to provide you with our

services/products if the personal data given is incomplete.

6. You have the right to request Rams to erase or destroy or anonymize personal data to become anonymous data where legitimate ground

applies.

7. You have the right to request Rams to restrict the use of personal data, where the following applies:

7.1 when we are pending the examination process in accordance with your request to ensure that the personal data remains accurate, up-to-date, complete, and not misleading;

7.2 where it is the personal data which shall be erased or destroyed because it has been unlawfully collected, used, or disclosed, but you request for restriction of the use instead;

7.3 where it is no longer necessary to retain such personal data for such collection, but you have to request the retention for the purposes of the establishment, compliance, or exercise of legal claims, or the defense of legal claims; or

7.4 Where we are pending verification to demonstrate that there is a compelling legitimate ground or pending examination for the establishment, compliance, or exercise of legal claims, or defense of legal claims to reject the objection request made by you.

8. You have the right to complain to the expert committee in accordance with PDPA in cases we do not take action or do not comply with PDPA.

Nevertheless, we reserve the right to examine the right requests as abovementioned and to proceed in accordance with PDPA.

6. Data Retention and How We Secure Your Personal Data

We only retain your personal data for as long as we reasonably consider necessary to fulfill the Purposes we collected it for, and according to the terms of your agreement with us, and comply with any legal, accounting, reporting, and internal requirements to protect the interest of both parties. We will keep your personal data for the duration of the contract and continue to store it as required by our company policy and for a period as permitted by applicable law. In case your relationship or an agreement with us has ended, or you no longer using our services, or the business transaction has been executed, or when your personal data is no longer necessary for the specified purposes, we shall store your personal data for a period as specified by the law, or by prescription period or for exercise or defense of legal claims. After the expiration of the storage period of the personal data, we will proceed to erase or destroy such personal data.

We treat your information in confidence and shall protect such information with no less than a reasonable degree of care to prevent any misuse or breach of your personal data privacy. Hence, we provide security measures including a safe and appropriate system for collecting, using, or disclosing personal data to prevent your personal data from accidental loss, unauthorized access of data, destruction of data, misuse of data, unauthorized change or disclosing of data in accordance with our information technology security policies and/or procedures. We also provide security measures of personal data which include operational safeguards, technical protection measures, and physical safeguards regarding access or control of the personal data usage which at least consists of the following actions:

(a) control of access to personal data and storage devices;

(b) determine permission to access personal data;

(d) determine roles and responsibilities of users to prevent unauthorized access, disclosure, cybercrime, copy of personal data, or to prevent theft of storage devices or data.

Personal data that we collect from you will be stored and backed up securely in an environmentally controlled location in Malaysia. Only authorized people with user ID and password from our company have access to the information.

7. Third-Party Websites

Our website may contain links to third-party websites. This does not imply our endorsement of any website, and we are not responsible for the actions, content, information, or data of third-party websites or actions or any links contained in them, or any changes or updates to them. Third-party websites will likely provide their terms and conditions of use and privacy policies that may apply to you.

8. Cookies and Similar Technologies

We use cookies (small information files that are stored on your computer) to help us provide many features on the website and to improve our website. You can choose not to accept cookies from us (by changing your browser’s security settings) but if you do, the website might not work as intended and some features may not work at all.

9. Changes to Our Notice

We might amend this Privacy Policy from time to time. We encourage you to check back frequently to see any updates or changes to our Privacy Policy. If we make a major change to it, we will send you an email describing the change and what it means for you.

10. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with Malaysian laws and Malaysian courts have the jurisdiction to consider any disputes that may arise.

11. Our Contact Information.

If you have any questions or concerns related to the processing of your personal data, or if you wish to exercise your above-mentioned rights, please don’t hesitate to contact us at privacy@ramssol.com.