EU YAN SANG (1959) SDN BHD (and its group of companies (‘EYSMY’)
PRIVACY POLICY
1. INTRODUCTION
EU YAN SANG (1959) SDN BHD (‘EYSMY’) (including its subsidiaries, related and associated companies) (‘EYSMY’, ‘we’, ‘our’ or ‘us’) is committed to protecting and safeguarding your personal data in accordance with the Personal Data Protection Act 2010 (PDPA 2010) of Malaysia.
This Privacy Policy explains how we collect, use, disclose, store, and process personal data belonging to individuals and entities who interact or engage with us including but not limited to our customers, tenants, landlords, vendors, suppliers, contractors, service providers, business partners, visitors and any other persons dealing with EYSMY (collectively referred to as ‘Data Subjects’).
The purpose of this Privacy Policy is to ensure transparency and to inform you of:
(a) the types of personal data we collect and process;
(b) the purposes for which your personal data is collected and processed;
(c) the parties to whom your personal data may be disclosed;
(d) your rights in relation to your personal data; and
(e) the measures taken by EYSMY to protect your personal data.
For the purposes of this Privacy Policy, the terms ‘personal data’ and ‘processing’ shall have the same meanings as defined in Section 4 of the PDPA 2010.
By engaging, communicating or transacting with EYSMY you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data in accordance with the terms set out herein.
2. COLLECTION OF PERSONAL DATA
2.1 Personal Data
In the course of your dealings or engagement with EYSMY (including its group of companies) and/or its authorised distributors, dealers, agents, representatives or service providers (collectively referred to as “EYSMY”), we may collect personal data and information about you (‘Personal Data’) whether directly from you, your authorised representatives, or from third parties.
Your Personal Data may be collected through various means, including but not limited to:
(a) your purchase or a third party’s purchase of EYSMY’s products and/or services (whether online or offline) where you are identified as the recipient;
(b) your tenancy, ownership, leasing or other property-related dealings with EYSMY;
(c) your application for or participation in any EYSMY membership, loyalty or reward programme;
(d) your appointment or engagement as a vendor, supplier, contractor, consultant, service provider or business partner;
(e) your participation in events, marketing campaigns, surveys or promotions organised or managed by EYSMY;
(f) your visit to or use of EYSMY’s website at https://www.euyansang.com.my including through the use of cookies or other online tracking technologies; or
(g) any other form of communication, correspondence or interaction with EYSMY whether in writing, electronically, or in person.
The processing of your Personal Data is necessary for EYSMY to:
(a) manage and administer its business or contractual relationship with you or any related third party;
(b) process transactions, payments, orders, deliveries or services requested by you or a third party;
(c) evaluate, manage, or facilitate your application, engagement or participation in any of EYSMY’s business activities, programmes or partnerships;
(d) comply with applicable legal and regulatory obligations; and/or
(e) perform any other legitimate business purposes as permitted under the Personal Data Protection Act 2010 and other applicable laws.
2.2 Sensitive Personal Data
In certain circumstances, EYSMY may collect, use, and process sensitive personal data about you, which may include information relating to your physical or mental health, financial status, religious beliefs, or any other data defined as sensitive personal data under the PDPA 2010.
Such data will be processed only:
(a) with your explicit consent;
(b) where it is necessary for the performance of contractual obligations or the provision of services to you;
(c) where it is required or authorised by law; or
(d) where it is otherwise permitted under the PDPA 2010.
EYSMY shall take all reasonable steps to ensure that the processing of sensitive personal data is carried out in a secure and confidential manner, and in accordance with the principles of data protection set out under the PDPA 2010.
2.3 Type of Personal Data Collected
The types of Personal Data collected by EYSMY may vary depending on the nature of your relationship or engagement with us. Such Personal Data may include, but is not limited to, the following categories:
(a) Identification Data; such as name, identification card number, passport number, date of birth, gender, nationality and any other identification details.
(b) Contact Data; such as home, business, and mailing addresses, email addresses and telephone or mobile numbers.
(c) Employment and Business Data; such as company name, business registration number, designation, department, nature of business and details of your employer, tenants, landlords, vendors, contractors or other related parties.
(d) Financial and Transactional Data; such as bank account details, billing and payment information, credit card details, financial statements and records of transactions or dealings with EYSMY.
(e) Property and Tenancy Data; such as tenancy or ownership information, property address, unit details and any relevant contractual or billing information related to property management or leasing.
(f) Technical and Usage Data; such as IP address, login data, browser type, access logs and information collected through cookies or other tracking technologies when you visit or interact with EYSMY’s website or digital platforms.
(g) Marketing and Communication Data; such as your preferences in receiving marketing materials, responses to surveys, participation in campaigns or events and communication records with EYSMY.
(h) Image and Audio-Visual Data; such as photographs, CCTV recordings or video/audio recordings collected during events, security monitoring or within EYSMY premises.
(i) Sensitive Personal Data; as defined under the Personal Data Protection Act 2010, including but not limited to information relating to your health, religious beliefs, or financial standing, which shall be processed only in accordance with applicable law and with your consent where required.
EYSMY shall collect only such Personal Data as is necessary for the relevant purpose of collection and shall take all reasonable measures to ensure that the Personal Data is accurate, complete, and kept up to date.
3. PURPOSE OF PROCESSING PERSONAL DATA
EYSMY may collect, use, disclose, and otherwise process your Personal Data for one or more of the following purposes, depending on the nature of your relationship or engagement with us:
3.1 General Administrative and Business Purposes
(a) to establish, manage, and administer any business or contractual relationship with you or your organisation;
(b) to process orders, transactions, payments, deliveries or services requested by you or on your behalf;
(c) to verify your identity and conduct background or credit checks (where applicable);
(d) to maintain proper internal records, accounts and documentation;
(e) to manage tenancy, leasing or property-related matters, including billing, maintenance and correspondence;
(f) to facilitate business communications, meetings and operational matters between you and EYSMY; and
(g) to respond to your enquiries, requests, or complaints.
3.2 Legal and Regulatory Compliance
(a) to comply with applicable laws, regulations, guidelines or court orders;
(b) to prepare, validate and submit e-invoice and related information to LHDN, which may include personal data such as name, identification number, contact details and transaction information;
(c) to assist in investigations, enforcement actions or proceedings conducted by lawful authorities;
(d) to ensure compliance with corporate governance, audit and risk management requirements; and
(e) to enforce or defend EYSMY legal rights or interests.
3.3 Marketing, Communication, and Customer Relations
(a) to communicate with you regarding products, services, promotions, campaigns, events or programmes organised by EYSMY (including its group of companies, distributors, or partners);
(b) to inform you of updates, new product launches, membership privileges or special offers that may be of interest;
(c) to conduct market research, surveys and customer satisfaction assessments; and
(d) to maintain and improve customer service quality and overall engagement experience.
3.4 Security and Property Management
(a) to monitor and maintain the safety and security of EYSMY’s premises through the use of CCTV or other surveillance systems;
(b) to control access to premises and manage visitor or contractor records; and
(c) to prevent, detect and investigate incidents, misconduct or unlawful activities.
3.5 Other Legitimate Business Purposes
(a) to facilitate mergers, acquisitions, restructuring or other corporate transactions;
(b) to store, back up or process data internally or through external service providers; and
(c) for any other purpose directly related to or reasonably necessary for the operation and administration of EYSMY’s business as permitted under the Personal Data Protection Act 2010.
4. DISCLOSURE OF PERSONAL DATA
Your Personal Data held by EYSMY will be kept confidential. However, it may be disclosed, shared, or otherwise made available to the following parties, whether within or outside Malaysia, for the purposes stated in this Privacy Policy and as permitted or required under the Personal Data Protection Act 2010:
4.1 Within EYSMY Group
EYSMY’s parent company, subsidiaries, related and associated companies or any of their employees, officers and authorised personnel who require the information in the course of their duties.
4.2 Authorised Third-Party Partners and Service Providers
distributors, dealers, contractors, vendors, suppliers, professional advisers (including auditors, accountants, lawyers, and consultants), information-technology providers and other external service providers engaged by EYSMY to support its business operations, data processing or service delivery.
4.3 Business Partners and Counterparties
joint-venture partners, business associates, landlords, tenants, financiers, insurers and other parties involved in transactions or collaborations with EYSMY.
4.4 Regulatory, Governmental, and Law-Enforcement Authorities
relevant ministries, regulators, statutory bodies, government agencies or authorities where required for compliance with legal or regulatory obligations or upon lawful request.
4.5 Professional and Financial Institutions
banks, payment processors, credit-rating agencies, insurers and other institutions necessary for payment, financing or risk-management purposes.
4.6 Prospective or Actual Assignees or Transferees
any person or entity involved in or contemplating a corporate exercise such as a merger, acquisition, joint venture, asset sale, restructuring, financing or similar transaction involving EYSMY.
EYSMY shall ensure that all such third parties are bound by appropriate confidentiality obligations and data-protection safeguards consistent with the principles of the PDPA 2010.
Where Personal Data is transferred or accessed outside Malaysia, EYSMY shall take reasonable steps to ensure that the receiving party provides a level of protection equivalent to that required under Malaysian law.
5. RETENTION OF PERSONAL DATA
EYSMY shall retain your Personal Data for as long as it is necessary to fulfil the purpose for which it was collected or to comply with applicable legal, regulatory, accounting or reporting requirements.
Your Personal Data may also be retained for the following reasons:
(a) to maintain accurate business, transaction and financial records;
(b) to enable EYSMY to exercise or defend its legal rights and interests;
(c) to comply with internal policies on data retention, audit and risk management; and
(d) to meet any obligations under applicable laws or regulations.
When the Personal Data is no longer required for the purpose for which it was collected, or for any other legitimate business or legal reason, EYSMY shall take all reasonable steps to ensure that such data is securely deleted, destroyed, or anonymised in accordance with EYSMY’s internal policies and applicable data protection laws.
EYSMY may, however, retain limited personal data as necessary to comply with future requests by regulatory authorities for evidential purposes or to facilitate the reactivation of relationships or accounts (where appropriate and permitted by law).
6. SECURITY OF PERSONAL DATA
EYSMY takes the security and confidentiality of your Personal Data seriously. We implement reasonable and appropriate technical, administrative and physical security measures to safeguard your Personal Data against loss, misuse, modification, unauthorised or accidental access or disclosure, alteration, destruction or other similar risks.
Such measures may include, but are not limited to:
(a) limiting access to Personal Data to authorised personnel on a need-to-know basis;
(b) implementing secure information storage and transmission systems;
(c) maintaining internal policies and procedures governing data protection and confidentiality;
(d) employing technological safeguards such as encryption, firewalls, and access control systems; and
(e) conducting periodic reviews and updates of our security measures to ensure ongoing effectiveness.
While EYSMY endeavours to protect your Personal Data, no data transmission over the Internet or any storage system can be guaranteed as completely secure. Accordingly, you acknowledge that the transmission of information to or from EYSMY is at your own risk, and EYSMY shall not be held responsible for any unauthorised access, disclosure, or other security incidents beyond its reasonable control.
7. ACCESS, CORRECTION AND CONTACT INFORMATION
You have the right to request access to and correction of your Personal Data held by EYSMY, as well as to withdraw your consent to the processing of your Personal Data, subject always to applicable legal restrictions and contractual obligations.
If you wish to:
(a) request access to your Personal Data;
(b) request correction of your Personal Data where it is inaccurate, incomplete, misleading or outdated;
(c) withdraw your consent to the processing of your Personal Data (in full or in part); or
(d) make any inquiries or complaints regarding the processing of your Personal Data,
you may contact us in writing at:
Data Protection Officer
Email address : info@euyansang.com.my
Telephone : 1300 888 213
Address : L2-01 & L2-02, 2nd Floor, Shaw Parade, No. 152, Changkat Thambi Dollah, 55100 Kuala Lumpur.
EYSMY may impose a prescribed fee for processing access requests in accordance with the Personal Data Protection Act 2010.
Please note that EYSMY reserves the right to decline requests that are manifestly unfounded, excessive, or in violation of applicable laws and may require reasonable verification of your identity before processing any request.
The withdrawal of consent or failure to supply certain Personal Data may affect EYSMY’s ability to continue providing products or services to you or to fulfil contractual obligations.
8. TRANSFER OF PERSONAL DATA
Your Personal Data may be transferred, stored, or processed outside of Malaysia where EYSMY ’s servers, subsidiaries, related companies or service providers are located. Such transfers are necessary for the purposes described in this Privacy Policy.
EYSMY shall take reasonable steps to ensure that any such transfer of Personal Data complies with the requirements of the Personal Data Protection Act 2010 and that the recipient provides a level of protection for your Personal Data comparable to that required under Malaysian law.
By providing your Personal Data to EYSMY, you consent to the transfer and processing of your Personal Data outside Malaysia as described above.
9. CHANGES TO THIS PRIVACY POLICY
EYSMY reserves the right to modify, update or amend this Privacy Policy from time to time to reflect changes in legal, regulatory or operational requirements.
The latest version of this Privacy Policy will be made available on EYSMY’s official website at https://www.euyansang.com.my or may be provided upon request.
By continuing to engage, communicate, or transact with EYSMY after any such revision, you are deemed to have accepted the updated version of this Privacy Policy unless you notify EYSMY otherwise in writing.
10. ACKNOWLEDGEMENT AND CONSENT
By providing your Personal Data to EYSMY, engaging with EYSMY or continuing to communicate or transact with EYSMY, you:
(a) acknowledge that you have read and understood this Privacy Policy;
(b) agree and consent to the collection, use, disclosure, and processing of your Personal Data by EYSMY in accordance with this Privacy Policy; and
(c) confirm that all Personal Data provided is accurate, complete, and up to date.
If you provide Personal Data of third parties (such as your family members, employees, or business contacts) to EYSMY, you represent and warrant that you have obtained their consent for the disclosure and processing of such Personal Data in accordance with this Privacy Policy.