Privacy Policy

1. General

This privacy policy aims to give you information on how SIMMEDI SDN BHD. and its affiliates (referred to in this privacy policy as "we", "us" or "our") collect and process your personal data. We respect your privacy and are committed to protecting your personal information. This privacy policy describes how we collect, use and disclose your personal information, and what rights you have with respect to the use of your information.

2. Purpose of this Policy

In line with our obligations under, in particular and where appropriate, the Personal Data (Privacy) Ordinance, Malaysia data protection laws and other applicable privacy laws, this privacy policy sets out how we will collect, hold and use your personal information where we are a data controller with respect to your personal information. In particular the table in the section "How we collect and use your personal information" below specifies the purposes for which we may use your personal information as a data controller.

Where we refer to "you" and "your" in this privacy policy, we are talking to the individual who is engaging with our services or visiting our website.

3. Types of Personal Data Collected

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). For the purpose of carrying on our business, we may collect, use, store and transfer different kinds of personal data which we have grouped together as follows:

• Identity Data includes first name, last name, username or similar identifier, marital status, title, date of birth and gender.
• Contact Data includes billing address, delivery address, email address and telephone numbers.
• Financial Data includes bank account and payment card details.
• Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
• Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses, education and profession, hobbies and leisure activities, other related products and services subscribed to, and family and household demographics.
• Usage Data includes information about how you use our website, products and services.
• Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.

4. How is Your Personal Data Collected?

We use different methods to collect data from and about you including through:

Where we are a data controller in respect of your personal information, we are required by Malaysia data protection laws to be clear about the purposes for which we are processing that personal information and our lawful basis for doing so.

5. Why We Use Your Data

We have set out below a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so.

6. Marketing By Us and Third Parties

We want to provide you with choices regarding certain personal information uses, particularly around marketing and advertising. We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.

You will receive marketing communications from us where you have purchased products or services from us as an individual customer or if you have requested information from us and, in each case, you have not opted out of receiving that marketing. You can ask us to stop sending you marketing messages at any time by unsubscribing from each email sent to you as part of a campaign and by making a request to unsubscribe on the Contact Us page on our official website.

7. Retention of Personal Data

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances you can ask us to delete your data: see under Your Data Protection Rights for further information. In some circumstances we may anonymise your personal information for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

8. Disclosure of Personal Data

We may share your personal data with the parties set out below to enable us to carry out the activities specified in the table above:

• Any subsidiaries, holding companies, associated companies, or affiliates of, or companies controlled by, or under common control within SIMMEDI SDN BHD;
• Any person or company who is acting for or on behalf of the Company, or jointly with the Company, such as our service providers including hosting providers, advertising and email service providers;
• Any party as ordered by court or competent authority.

In addition, if we choose to sell, transfer, or merge parts of our business or our assets, we may need to share your personal information with those other businesses. We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions.

9. Security of Personal Data

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

10. Your Data Protection Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal information. This may include the following rights:

• Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it.
• Object to processing of your personal information where we are relying on our legitimate interests and there is something about your particular situation which makes you want to object to processing on this ground.
• Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you.
• Request the transfer of your personal information to another party (known as the "right to data portability").
• Withdraw consent. This right applies only if we are relying on your consent to process any of your personal information. This will not affect the lawfulness of any processing carried out before you withdraw your consent.

If you wish to exercise any of the rights set out above, please contact contact.darccollectibles@gmail.com. You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

11. Changes to Privacy Policy

We reserve the right to modify this Policy at any time. If we make changes to this Privacy Policy, the updated Privacy Policy will be posted on our webpage in a timely manner and, if we make material changes, we will provide a prominent notice. This Policy was written in English. To the extent a translated version conflicts with this Policy, the English version will take priority.

12. Getting in Touch

If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us at SIMMEDI SDN BHD via contact.darccollectibles@gmail.com.