Privacy Policy
Privacy Policy
Pursuant to the Personal Data Protection Act 2010, Herbal Revival Sdn Bhd (“We” or “Us”) is required to provide you with a written notice informing you of your rights to your personal data which is collected and processed by us. You must agree to this privacy policy before providing us your personal data.
By agreeing to provide us your personal data, you declare that you have read and understood this privacy policy and have agreed to us processing your personal data in accordance with the manner set out in this privacy policy. If you do not agree to the privacy policy below, please do not furnish your personal data to us.
Collection of Personal Data
- Your personal data may be collected from you as and when you communicate with us, whether via online or offline channels.
- The personal data we may collect from you may include but is not limited to your full name, identification number, gender, birthdates, phone number, email addresses and residential addresses.
- The activities which will entail collection of data may include but not limited to contests, loyalty program, promotion activity and market surveys. Should you choose not to provide your personal data for these reasons, we will not be obligated to provide the services entailed in the said activity.
Usage of Personal Data
We will not use your personal data in ways otherwise stated below;
- To send marketing communication to you;
- To administer marketing activities;
- To conduct internal market research to improve our product and services;
- To facilitate shipping of our products to you and/or manage a product return by you;
- To respond to your enquiries;
- To comply with any legal or regulatory requirement related to our provision of services and products and to make disclosure under the requirement of any applicable law, regulation, direction, court order, by-laws, guidelines, circular, code applicable to us.
Disclosure of Personal Data
To facilitate the purposes above and the provision of products and services to you, we may disclose your personal data to the following classes of third parties;
- Appointed Customer Relationship Management agencies
- Regulatory or Enforcement authorities
- Other appointed service or product providers as may be necessary or appropriate
Security of Personal Data
- We take all reasonable steps to keep secure your personal data which may include but not limited to storing your data on encrypted files.
- Such files will be stored on secure servers that are protected in controlled facilities.
- Our employees and data processors are obliged and trained to respect the confidentiality of your personal data held by us.
- We will not be held responsible for events arising from unauthorised access to your personal data which are attributable to factors beyond our control.
Retention of Personal Data
- Any of your Personal Data provided to us is retained for as long as the purposes for which the Personal Data collected continues.
- We will exercise measures to destroy or anonymise your Personal Data in the event it is;
- No longer required for any reason connected to the purpose it was originally collected
- Retention is no longer necessary for any business or legal purposes.
Access to Personal Data
Subject to the exemptions provided under the PDPA, you have the right to request to access and correct your Personal Data held by us. In this respect, you may:
- Check whether we hold or use your Personal Data and request access to such data;
- Request that we correct any of your Personal Data that is inaccurate, incomplete or out-of-date;
- Request that your Personal Data be retained by us only as long as necessary for the fulfilment of the purposes for which it was collected;
- Request that we specify or explain its policies and procedures in relation to data and types of Personal Data handled by us;
- Communicate to us your objection to the use of your Personal Data for marketing purposes whereupon we will not use your Personal Data for these purposes; and
- Withdraw, in full or in part, your consent given previously, in each case subject to any applicable legal restrictions, contractual conditions and a reasonable time.
We will need to validate the identity of anyone making an access request, to ensure that we do not provide your information to anyone who does not have the right to that information. For any request as stated above, you may write to us to at enquiry@thomson.com.my. We will respond to your notice within 14 working days.