PRIVACY POLICY & PERSONAL DATA PROTECTION NOTICE

UNIMAS Holdings Sdn. Bhd. ("UHSB", "we", "us" or "our") respects the privacy of individuals whose personal data is collected and processed through the UNIMAS Official Merchandise Store ("Store").

This Privacy Policy and Personal Data Protection Notice explains how we collect, use, disclose, store and protect personal data in accordance with the Personal Data Protection Act 2010 (Act 709) and applicable subsidiary legislation and amendments.

This Notice should be read together with our Terms of Service and other applicable Store policies.

The Personal Data Protection Act 2010 establishes the framework for processing personal data in commercial transactions in Malaysia. The Personal Data Protection (Amendment) Act 2024 introduced further amendments, with different provisions commencing on different dates.

PART A — ENGLISH

1. WHO WE ARE

The Store is operated by:

UNIMAS Holdings Sdn. Bhd.

Address: [INSERT REGISTERED BUSINESS ADDRESS]

Email: [INSERT PRIVACY / STORE EMAIL]

Telephone: [INSERT CONTACT NUMBER]

Where applicable, references to "UHSB", "we", "us" or "our" mean UNIMAS Holdings Sdn. Bhd.

2. PERSONAL DATA WE COLLECT

Depending on how you interact with the Store, we may collect:

Identification Information

  • name;

  • customer account information;

  • identification information where reasonably required for verification; and

  • information provided for order collection.

Contact Information

  • email address;

  • telephone or mobile number;

  • billing address;

  • delivery address; and

  • other contact information provided by you.

Transaction Information

  • order number;

  • products purchased;

  • quantity;

  • purchase history;

  • payment status;

  • delivery information; and

  • refund or return information.

Payment Information

Payments may be processed through third-party payment service providers.

Where payment is processed by a third-party payment provider, payment information may be collected and processed directly by that provider in accordance with its own privacy policy and security practices.

We do not intend to collect or store complete payment card details unless expressly stated otherwise.

Technical Information

When you access the Store, certain technical information may be automatically collected, including:

  • IP address;

  • browser type;

  • device information;

  • operating system;

  • pages accessed;

  • approximate location derived from technical information;

  • referring website; and

  • usage information.

3. HOW WE COLLECT PERSONAL DATA

We may collect personal data:

  • when you create an account;

  • when you place an order;

  • when you make payment;

  • when you contact customer service;

  • when you subscribe to marketing communications;

  • when you participate in campaigns or promotions;

  • when you submit a product review;

  • when you use the Store website;

  • through cookies and similar technologies; and

  • from third-party service providers involved in providing Store services.

4. PURPOSES OF PROCESSING

We may process your personal data for purposes including:

  1. processing and fulfilling orders;

  2. processing payments;

  3. arranging delivery or collection;

  4. providing customer support;

  5. processing returns, exchanges and refunds;

  6. maintaining customer accounts;

  7. verifying transactions;

  8. preventing fraud and misuse;

  9. managing inventory and sales records;

  10. improving the Store and customer experience;

  11. communicating with you regarding your orders;

  12. sending promotional communications where permitted and where you have provided the necessary consent or where otherwise permitted by law;

  13. conducting analytics and reporting;

  14. complying with legal and regulatory requirements;

  15. responding to lawful requests from authorities;

  16. resolving disputes; and

  17. protecting the rights, property and security of UHSB, UNIMAS, customers and other persons.

5. NOTICE AND CHOICE

We will provide appropriate notice when collecting personal data and, where required, provide you with appropriate choices regarding the processing of your personal data.

The Personal Data Protection Commissioner states that a privacy notice is a mandatory component under Section 7 of the PDPA for data users processing personal data in connection with commercial activities.

Where marketing communications require consent, you may withdraw your consent or unsubscribe using the available mechanism.

6. DISCLOSURE OF PERSONAL DATA

We may disclose or provide access to personal data, where necessary and appropriate, to:

  • payment service providers;

  • courier and logistics providers;

  • website and e-commerce platform providers;

  • IT and hosting service providers;

  • customer service providers;

  • professional advisers;

  • auditors;

  • insurers;

  • business partners where necessary to provide requested services;

  • government authorities and regulators where required by law; and

  • other service providers engaged by UHSB to support the operation of the Store.

We will only disclose personal data for legitimate and relevant purposes and in accordance with applicable law.

7. CROSS-BORDER TRANSFER

Some service providers supporting the Store may process or store personal data outside Malaysia.

Where personal data is transferred outside Malaysia, we will take reasonable steps to ensure that the transfer and subsequent processing are carried out in accordance with applicable Malaysian data protection requirements.

8. DATA SECURITY

We take reasonable steps to protect personal data against:

  • unauthorised access;

  • unauthorised disclosure;

  • misuse;

  • alteration;

  • loss;

  • destruction; and

  • other unauthorised forms of processing.

Security measures may include appropriate access controls, authentication, technical safeguards, organisational controls and monitoring.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

9. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling transactions, maintaining appropriate business records, resolving disputes and complying with legal, accounting and regulatory obligations.

When personal data is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it, where appropriate.

10. YOUR RIGHTS

Subject to applicable law and any applicable exemptions, you may have rights to:

  • request access to personal data held about you;

  • request correction of inaccurate or incomplete personal data;

  • withdraw consent where processing is based on consent;

  • request information regarding the processing of your personal data;

  • object to certain processing, where applicable;

  • request deletion where legally applicable; and

  • exercise other rights available under applicable data protection law.

Requests should be submitted to the contact details stated in this Notice.

We may need to verify your identity before processing a request.

11. MARKETING COMMUNICATIONS

If you subscribe to our marketing communications, we may use your contact information to send information about:

  • new merchandise;

  • product launches;

  • limited editions;

  • promotions;

  • special collections;

  • events; and

  • other Store-related updates.

You may unsubscribe from marketing communications at any time using the unsubscribe mechanism provided in the communication or by contacting us.

12. COOKIES

The Store may use cookies and similar technologies to:

  • enable essential website functions;

  • remember preferences;

  • maintain shopping cart functionality;

  • understand website usage;

  • improve performance; and

  • support relevant marketing or analytics activities where applicable.

You may adjust cookie settings through your browser or any cookie management tool provided on the Store.

Disabling certain cookies may affect website functionality.

13. CHILDREN

The Store is not specifically directed at children.

Where we become aware that personal data has been submitted by a child in circumstances where parental or guardian involvement is required, we may take appropriate steps to address the situation.

14. DATA BREACHES

Where required by applicable law or regulatory requirements, we will take appropriate steps in response to a personal data breach, including assessment, containment, remediation and notification to relevant parties or authorities where required.

15. CHANGES TO THIS NOTICE

We may update this Privacy Policy and Personal Data Protection Notice from time to time.

The updated version will be published on the Store with the latest revision date.

16. CONTACT US / PRIVACY REQUESTS

For questions, complaints or requests relating to personal data:

UNIMAS Holdings Sdn. Bhd.

Privacy / Data Protection Contact:
[INSERT NAME / DEPARTMENT]

Email: [INSERT PRIVACY EMAIL]

Address: [INSERT REGISTERED BUSINESS ADDRESS]

Telephone: [INSERT CONTACT NUMBER]

PART B — NOTIS PERLINDUNGAN DATA PERIBADI

NOTIS PERLINDUNGAN DATA PERIBADI

Tarikh Kemas Kini: 19 Ogos 2026

UNIMAS Holdings Sdn. Bhd. ("UHSB", "kami") menghormati privasi individu dan komited untuk melindungi data peribadi yang dikumpul dan diproses melalui UNIMAS Official Merchandise Store ("Kedai").

Notis ini menerangkan cara kami mengumpul, menggunakan, mendedahkan, menyimpan dan melindungi data peribadi anda selaras dengan Akta Perlindungan Data Peribadi 2010 [Akta 709] serta undang-undang, peraturan dan pindaan yang berkaitan.

1. DATA PERIBADI YANG DIKUMPUL

Bergantung kepada interaksi anda dengan Kedai, kami boleh mengumpul:

  • nama;

  • alamat e-mel;

  • nombor telefon;

  • alamat penghantaran;

  • alamat bil;

  • maklumat pesanan;

  • sejarah pembelian;

  • maklumat penghantaran;

  • maklumat berkaitan pemulangan dan bayaran balik;

  • maklumat akaun pelanggan;

  • maklumat teknikal seperti alamat IP, jenis peranti dan pelayar; dan

  • maklumat lain yang diperlukan secara munasabah untuk menyediakan perkhidmatan Kedai.

Maklumat pembayaran mungkin diproses secara langsung oleh penyedia perkhidmatan pembayaran pihak ketiga.

2. TUJUAN PENGUMPULAN DAN PEMPROSESAN

Data peribadi anda boleh diproses untuk:

  1. menerima dan memenuhi pesanan;

  2. memproses pembayaran;

  3. mengurus penghantaran atau pengambilan pesanan;

  4. menyediakan khidmat pelanggan;

  5. mengurus pemulangan, pertukaran dan bayaran balik;

  6. mengurus akaun pelanggan;

  7. mengesahkan transaksi;

  8. mencegah penipuan dan penyalahgunaan;

  9. mengurus inventori dan rekod jualan;

  10. menambah baik Kedai dan pengalaman pelanggan;

  11. berkomunikasi berhubung pesanan;

  12. menghantar komunikasi pemasaran apabila dibenarkan;

  13. memenuhi keperluan undang-undang dan kawal selia; dan

  14. menyelesaikan pertikaian serta melindungi hak dan keselamatan UHSB, UNIMAS dan pelanggan.

3. PENDEDAHAN DATA PERIBADI

Data peribadi anda mungkin didedahkan kepada pihak yang berkaitan seperti:

  • penyedia perkhidmatan pembayaran;

  • syarikat kurier dan logistik;

  • penyedia platform e-dagang;

  • penyedia IT dan hosting;

  • penyedia khidmat pelanggan;

  • penasihat profesional;

  • juruaudit;

  • pihak berkuasa atau badan pengawal selia apabila dikehendaki oleh undang-undang; dan

  • penyedia perkhidmatan lain yang membantu operasi Kedai.

4. KESELAMATAN DATA

Kami mengambil langkah keselamatan yang munasabah bagi melindungi data peribadi daripada akses, penggunaan, pendedahan, perubahan, kehilangan atau pemprosesan tanpa kebenaran.

Walau bagaimanapun, tiada sistem elektronik atau penghantaran internet yang boleh dijamin selamat sepenuhnya.

5. TEMPOH PENYIMPANAN

Kami akan menyimpan data peribadi hanya selama tempoh yang munasabah dan diperlukan bagi tujuan pengumpulannya, termasuk memenuhi transaksi, menyimpan rekod perniagaan, menyelesaikan pertikaian dan mematuhi keperluan undang-undang.

Apabila data tidak lagi diperlukan, kami akan mengambil langkah yang munasabah untuk memadam, memusnahkan atau menganonimkan data tersebut, jika sesuai.

6. HAK ANDA

Tertakluk kepada undang-undang yang terpakai, anda boleh:

  • meminta akses kepada data peribadi anda;

  • meminta pembetulan data yang tidak tepat;

  • menarik balik persetujuan bagi pemprosesan berdasarkan persetujuan;

  • meminta maklumat berkaitan pemprosesan data anda; dan

  • menggunakan hak lain yang tersedia di bawah undang-undang perlindungan data peribadi.

Kami mungkin perlu mengesahkan identiti anda sebelum memenuhi sesuatu permintaan.

7. KOMUNIKASI PEMASARAN

Sekiranya anda melanggan komunikasi pemasaran, kami mungkin menghantar maklumat berkaitan:

  • produk baharu;

  • koleksi baharu;

  • produk edisi terhad;

  • promosi;

  • kempen;

  • acara; dan

  • kemas kini berkaitan Kedai.

Anda boleh berhenti melanggan pada bila-bila masa melalui mekanisme berhenti melanggan yang disediakan atau dengan menghubungi kami.

8. COOKIES

Kedai mungkin menggunakan cookies dan teknologi yang sama untuk memastikan fungsi laman web, menyimpan pilihan pengguna, mengurus troli pembelian, memahami penggunaan laman web serta menambah baik pengalaman pelanggan.

Anda boleh mengubah tetapan cookies melalui pelayar atau fungsi pengurusan cookies yang disediakan.

9. HUBUNGI KAMI

Sebarang pertanyaan, aduan atau permintaan berkaitan data peribadi boleh dikemukakan kepada:

UNIMAS Holdings Sdn. Bhd.

Pegawai / Unit Perlindungan Data:
[MASUKKAN NAMA / UNIT]

E-mel: [MASUKKAN E-MEL PRIVASI]

Alamat: [MASUKKAN ALAMAT BERDAFTAR]

Telefon: [MASUKKAN NOMBOR TELEFON]

Nota: Notis ini hendaklah dipaparkan dalam Bahasa Melayu dan Bahasa Inggeris serta disediakan kepada pelanggan apabila data peribadi mula dikumpul atau diminta. Ini selaras dengan panduan JPDP mengenai Notis Perlindungan Data Peribadi.