Privacy Notice

In order for us to provide you with our products and/or services and to operate in an efficient and effective manner, we need to collect personal data from you. The personal data collected by us may include the following:

your name, date of birth, identification supporting documents (including NRIC or passport number), gender, nationality and race, preferred language, current private and/or business address, telephone or mobile phone number, email address, questions and/or data to help us understand our customers better.
your credit and/or debit card information, bank account details and your payment history
the status of the products and/or services you have acquired from us or subscribed to

We may collect your personal data when you:

communicate with us by purchasing from our Site, signing up as a member or when you contact us for any enquiries
register or subscribe to our products and/or our publications (for example, newsletters, updates via social media, emails)
participate in any of our surveys or feedback forms, or when you leave comments on our social media accounts
respond to any marketing materials we send out
visit or browse our website and/or social media accouts
lodge a complaint with us
provide feedback to us (for example via our website, email, social media accounts or in hard copy)

Purposes of Processing Your Personal Data

We may process personal data from you or from the categories of third parties identified in this Privacy Notice, for one or more of the following purposes:-

to verify your identity
to enable you to be provided with products and/or services as well as facilities and/or benefits offered by us and/or our related corporations
to facilitate, assess and/or process your application(s)/request(s) for our and/or our related corporations’ products and/or services
to provide you with the products and/or services you have requested
to administer and manage the products and/or services we provide you (including charging, billing, facilitating payments and collecting debts)
to investigate and resolve any service issues, billing queries, complaints or other enquiries that you submit to us regarding our network, products and/or services with our customer relations teams
to assess and/or verify creditworthiness
to detect and/or prevent fraudulent activity
to keep in contact with you and provide you with any information you have requested
to engage in business transactions in respect of products and/or services to be offered and provided to you
to process any communications you send us (for example, answering any queries and dealing with any complaints and feedback)
to help us monitor and improve the performance of our products and/or services
to notify you about benefits and changes to the features of our products and/or services
to determine how can we improve services to you
to use your personal data for direct marketing and/or to better identify products that may interest you
to produce data, reports and statistics
to investigate, respond to, or defend claims made against, or involving Kaya&
to maintain records required for security, claims or other legal purposes
to comply with legal regulations
for any other purposes that is required or permitted by any law, regulations, guidelines and/or relevant regulatory authorities

Disclosure of Your Personal Data

We may disclose your personal data to the following third parties:

law enforcement agencies, for the purpose of preventing and/or detecting crime, or for the purpose of investigations and/or the apprehension or prosecution of offenders and/or protection of national security and/or any purpose that is required or authorized by or under any law or by any order or judgment of a court;
government bodies and agencies, to meet our legal and regulatory obligations;
other companies, organisations, and/or service providers, to process personal data on our behalf;
other companies, organisations, and/or service providers to: (i) carry out services on our behalf such as to provide customer-service, marketing, logistics, personalise; or (ii) process payment transactions; or (iii) carry out fraud and credit checks, and collect debts and protect our rights and defend us and our property; or (iv) analyse and improve the information we hold (including about your interactions with services provided by us, our preferred merchants and/or service providers); or (v) run surveys; or (vi) carry out any of the purposes as set out in this Privacy Notice.

Direct Marketing

We may process your personal data to provide you with, or enable our related corporations to provide you with, information, promotions and updates including advertising and marketing materials (“marketing material”) about our products and/or services as well as products and/or services of our preferred merchants and service providers. Such information, promotions and updates, including advertising and marketing materials may be sent to you via any one or more of the following examples: phone calls, text messages, online banners, emails or via other internet, social or application based messaging system or any other means of communication.

What If You Do Not Provide Us With Your Personal Data?

Where indicated (for example in registration/application forms), it is obligatory to provide your personal data to us to enable us to process your application for our products and/or services. Should you decline to provide such personal data, we may not be able to process your application, or provide you and/or continue to provide you with our products and/or services.

Your Rights To Access And Correct Your Personal Data

We can assist you to access and correct your personal data held by us. Where you wish to have access to your personal data in our possession, or where you are of the opinion that such personal data held by us is inaccurate, incomplete, misleading or, where relevant, not up-to-date, and you wish to correct such personal data, you may make a request to us by emailing us at customercare@kayaand.com. In relation to either a data access request or a data correction request, you should quote your name, address and phone/account number and provide brief details of the information you want a copy of or, as the case may be, you want to have corrected, in any such request.

Please note that we may decline to comply with your data access request in certain situations, for example when we are unable to confirm your identity or where information requested for is of a confidential commercial nature or in the event we receive repeated requests from you for access to the same information which burden or expense of providing access is disproportionate to the risks to your privacy. We may also decline to comply with your data correction request in certain situations, for example when you have not supplied us with such information as we may reasonably require to ascertain in what way the personal data to which the data correction request relates is inaccurate, incomplete, misleading or not up-to-date. Nevertheless, we will notify you of the reasons for not being able to accede to your data access and/or data correction requests. We shall be entitled to charge a fee (where permitted under the applicable law) for any data access request.

Your Obligations

You are responsible for providing accurate and complete information to us about yourself and any other person whose personal data you provide us and for updating this personal data as and when it becomes incorrect or out of date by emailing us at customercare@kayaand.com.

This obligation is a condition to the provision of our service providers and strategic partners' services to you and/or any other person authorised or permitted by you or your to use Kaya&'s products and/or services. In the event you may need to provide us with personal data relating to third parties (for example about your spouse or children or where you are the designated person in charge for dealing with us, if you are acquiring and are responsible for a product and/or service that they will use), you confirm that you have (i) obtained their consent or otherwise are entitled to provide their personal data to us and for us to process accordingly, and (ii) informed them to read this Privacy Notice.

Transfer Of Your Personal Data To Places Outside Malaysia

We may transfer your personal data to places outside Malaysia including if the transfer is to our facilities that are located outside Malaysia or if any of our service providers or strategic partners who are involved in providing part of Kaya&'s product and/or service for and on behalf of us is located outside Malaysia. You consent to us transferring your personal data to places outside Malaysia in these instances. We may also transfer your personal data to places outside Malaysia where permitted by law.

Updates To Our Privacy Notice

Kaya& has the rights to change/amend/update this Privacy Notice at any time without giving prior notice to our customers. Should you have any queries, concerns or complaints in relation to this Privacy Notice, kindly email us at customercare@kayaand.com.

Security
Kaya&'s website applies appropriate security measures in order to prevent theft of our customers' personal information from third parties, illegal disclosure and hackers. While we endeavour to keep all information we obtained secured as best as we can, it is not a 100% guarantee that such information stored or transmitted on the internet is entirely safe and secure. Should the incident arise without the knowledge of Kaya&, Kaya& will not be held liable and the User will indemnify and will not hold any legal claims against Kaya&.