1. Introduction

 

In compliance with Personal Data Protection Act 2010 (“the Act”) and its regulations, this notice will inform you of your rights with regards to your personal data that has been and/ or will be, collected and processed by Widad Business Group Sdn Bhd, its subsidiaries associated companies  and related corporations (as defined under the Companies Act 2016) (“WIDAD GROUP” / “Company” / “We”/ “us”).

 

2. Collection of personal data and purposes for collection of personal data

 

We have collect and will collect your personal data to be processed by us and/ or on your behalf in the course of your present or future dealings with WIDAD GROUP, for purposes of our internal records and communication with you.

We may obtain clients / customers/ any parties’ personal data from the following sources including but not limited to application forms, business forms that you have filled in and submitted to us, websites, online platforms, portals and applications, business cards, campaigns, contests or information obtained from legitimate sources such as databases and third parties etc.

3. Disclosure of personal data

 

WIDAD GROUP only shares or disclose personal information with other companies or individuals outside of the organisation in the following limited circumstances:

• We have your consent. We require opt-in consent for the sharing of any sensitive personal information.

• We provide such information to our subsidiaries, affiliated companies, related corporations, trusted businesses or persons (such as service providers, contractors, vendors, professional advisors, auditors, accountants, consultants) for the purpose of processing personal information on our behalf only where necessary, We require that these parties agree to process such information based on our instructions and in compliance with this Privacy Policy and any other appropriate confidentiality and security measures.

• Disclosure to the relevant governmental authorities and regulatory bodies and/or third parties where required by law or for legal compliance purposes.

• We have a good faith belief that access, use, preservation or disclosure of such information is reasonably necessary to (a) satisfy any applicable law, regulation, legal process or enforceable governmental request, (b) enforce applicable terms of service, including investigation of potential violations thereof, (c) detect, prevent, or otherwise address fraud, security or technical issues, or (d) protect against harm to the rights, property or safety of WIDAD GROUP, its users or the public as required or permitted by law.

If WIDAD GROUP and/or its subsidiaries, affiliated companies and other trusted businesses or persons become involved in a merger, acquisition, or any form of sale of some or all of its assets, we will ensure the confidentiality of any personal information involved in such transactions and provide prior notice before personal information is transferred and becomes subject to a different privacy policy.

4. Security of personal data

 

We take appropriate security measures to protect against unauthorised access to or unauthorised alteration, disclosure or destruction of data. These include internal reviews of our data collection, storage and processing practices and security measures, including appropriate encryption and physical security measures to guard against unauthorised access to systems where we store personal data.

We restrict access to personal information to WIDAD GROUP’ employees, contractors and third parties who need to know that information in order to process it on our behalf. These entities are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations.

5. Data subject’s obligations

 

It is necessary for WIDAD GROUP to collect and to retain your personal data to supply the information in order to perform contracts/ obligations and/ or render services to you. Therefore it is also obligatory for you to supply personal data to us in the most accurate manner without which we are unable to process personal data on your behalf for the purposes stated herein.

6. Rights of data subject

• To request access to personal data

You have the right to request for access to your personal data by submitting a 10 days’ written notice to us requesting for access to your personal data.

• To request correction of personal data

You have the right to request for correction and/ or update your personal data that is inaccurate, incomplete or outdated. Correction requests can be made through submitting a 10 days’ written notice to us.

• To limit processing of your personal data

You are entitled to limit our processing of personal data by expressly withdrawing the consent given previously, subject to any applicable legal restrictions, contractual conditions and within a reasonable time period.

We endeavour to uphold your rights stated in this paragraph 6, however, in exceptional circumstances, access may be denied for legitimate reasons.

7. Changes to privacy policy

 

Please note that this Privacy Policy may change from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent. We will post any Privacy Policy changes on this page and, if the changes are significant, we will provide a more prominent notice on a best-case basis (including, for certain services, email notification of Privacy Policy changes).

8. Acknowledgement and consent

 

By communicating, engaging with WIDAD GROUP or use the Company’s products and services, you acknowledge that you had read and understood this privacy notice and agree and consent to the collection, use, processing, disclosure and transfer of your personal data by WIDAD GROUP as described in this privacy notice. You can withdraw your consent by written notice to us.

9. Enforcement, inquiries and complaints

 

WIDAD GROUP regularly reviews its compliance with this Privacy Policy. When we receive formal written complaints, it is our policy to contact the complaining user regarding his or her concerns. We will cooperate with the appropriate regulatory authorities, including data protection authorities, to resolve any complaints regarding the transfer of personal data that cannot be resolved between WIDAD GROUP and an individual or organisation. Should you require further information about the personal data we hold or the way in which your information is being collected or used which are not answered by this privacy policy please contact or write to us at :