PRIVACY STATEMENT
This site and bazaar, is owned and operated by Kenlah Digital PLT (herein referred to as “Kenlah”). We value your privacy and strive to protect your personal information in compliance with the Personal Data Protection Act 2010 (hereinafter referred to as “PDPA Act 2010”) with the aim to regulate the collection, holding, processing and use of personal data in commercial transactions. This PDPA Act 2010 sets out a number of principles concerning consumer protection in Malaysia.
Under Section 4 of the PDPA Act 2010,
“Personal Data” means any personal information relating to Kenlah’s customer that the customer has provided to Kenlah or made available to Kenlah due to their contract with Kenlah, e.g. name, Identity Card / Passport No., address, information about their transactions with Kenlah such as contact number, account number, account balances, payment history, and account activity. “Sensitive Personal Data” comprises information as to the customer’s physical or mental health or condition, political opinions, religious beliefs or other beliefs of a similar nature, commission or alleged commission of any offence or any other Personal Data determined by law; and “third parties” means a person or a company who is not a party to a contract or a transaction with Kenlah, but excluding Kenlah’s agents, subsidiaries, contractors, sub-contractors and professional advisors.
Kenlah reserves the right to change any portion of this Policy. Kenlah will announce such changes through its webpage www.kenlah.com.
SCOPE
This Notice applies to all operations and business units of Kenlah. To the extent any operations or business unit of Kenlah already has a data protection Notice in place; this Notice shall supersede and replace any such notice.
RESPONSIBILITY
The Customer Service Division is responsible for the customer access and correction of personal data, notice and choice process to limit processing of personal data and the Privacy Department in Legal Division is responsible for the monitoring the administration of this Notice and monitoring enterprise wide compliance. This notice is effective as of October 18 2022.
EFFECTIVE DATE
This Notice applies to all operations and business units of Kenlah. To the extent any operations or business unit of Kenlah already has a data protection Notice in place; this Notice shall supersede and replace any such notice.
PERSONAL DATA PROTECTION PRINCIPLES
General Principle:
Kenlah will use, process, record, hold, store, share and disclose (“process”) Personal Data with the consent of the customer.
Continuance of use of Kenlah’s services and/or products shall amount to the customer’s consent for the processing of its Personal Data by Kenlah.
Kenlah will record and maintain a record of consent by your continued use of our services as long as you appear on our active customer database.
If you are under 18, you must ensure that you obtain the consent of your parents or legal guardian before using our services and/or products.
Notice and Choice Principle:
Please be informed that Kenlah will process customer’s Personal Data for the following reasons and MAY disclose:-
to companies and organisations for the performance of Kenlah’s contract of providing any goods or services to the customer; for profiling your service preferences
to companies and organisations for compliance with any legal and/or regulatory obligations to which Kenlah is subject, in addition to any obligation imposed under Kenlah’s contract with the customer;
to companies and organisations that act as Kenlah’s payment channels including and without limitation, financial institutions for purposes of maintaining financial records, assessing or verifying credit and facilitating payments of any amount due to Kenlah;
to other service providers or third parties nominated by Kenlah either solely or jointly with other service providers, for purposes of establishing and maintaining a common database of customers or processing data as an outsourced entity both within and outside Malaysia;
to send you information, promotions and updates including marketing and advertising materials in relation to our goods and services and those of organisations selected by Kenlah;
to companies and organisations that act as Kenlah’s agents or contractors for the purposes of recovering any amount due to Kenlah;
to regulatory bodies or other government authorities in compliance with requirements under the law or towards the detection or prevention of crime and/or fraud;
to any party involved in or related to a legal proceeding, for purposes of the proceedings; to protect Kenlah’s vital interests;
for the administration of justice;
to promote any of Kenlah’s products and/or services; or products, services and special offers of third parties whose products and services we think may be of interest to you; and;
for the exercise of any functions conferred on any person by or under any law.
Please be informed that Kenlah will collect relevant personal data from customers whenever they sign up for one of our services or when a customer receives one of Kenlah services. The types of such information may include:
Contact information such as name, date of birth, identification number (including identity card or passport number), gender, nationality and race, preferred language, current and alternate address, telephone or mobile number, fax number, email address; The status of the Products and/or Services customer have acquired from Kenlah or subscribed to; Traffic data such as number of calls, SMS and other communication made and received by customer as well as date, duration, time and cost of such communications; The amount of data received or sent by the customers; Customer personal interests and preferences; Recording of calls placed by customer to Kenlah customer services for any inquiries.
Kenlah collects personal data from customer registration forms, customer relationship management systems and our network systems in order to assess your needs and provide you better service. Kenlah may transfer the customer’s Personal Data to third parties both in Malaysia and overseas providing outsourced data storage or data processing services for Kenlah.
Any customers who have provided his/her Personal Data prior to this Policy, may contact Kenlah using the contact details set out below to know what types of Personal Data have been processed and the purpose for the processing.
Save in accordance with this Privacy Policy and except as permitted or required under any enactment, law, statute or code, Kenlah will not use or disclose the customers' Personal Data without prior written consent.
You will be given the opportunity to 'opt-out' of having your Personal Data used for purposes not directly related to the Services or Kenlah’s Websites at the point where Kenlah asks for information. If you do not wish to receive our promotional updates you may opt-out of receiving these communications by contacting Kenlah at the contact numbers listed below. But please note that should you decide to “opt-out”, we may not be able to provide you with certain Services and your subscription to or application for certain Services may be declined, denied or refused by Kenlah.
Disclosure Principle:
Kenlah will only disclose Personal Data to comply with any government agency notification requirements; and/or for the purpose for which the Personal Data is processed where you have consented to disclosure.
Kenlah may, from time to time, contact you on behalf of external business partners about particular goods, offers or services that may be of interest to you. In those cases, Personal Data that may identify you will not be transferred to the third party. All communication whether from Kenlah or Kenlah’s business partners will be sent to you by Kenlah.
Kenlah may disclose your Personal Data to subsidiaries, its parent company Kenlah Essence Sdn Bhd or any other entity for the purpose as outlined in paragraph
Security Principle:
Kenlah is responsible for taking prudent steps to safeguard the confidentiality and security of all Personal Data, including appropriate procedural, organisational and technical steps to protect personal data from accidental or unlawful destruction or accidental loss, alteration or disclosure. These steps include entering into written agreements with subcontractors who process Personal Data in accordance with Kenlah’s instructions and incorporating Kenlah’s own data protection standards as a minimum.
Retention Principle:
In executing its responsibilities with respect to the confidentiality of Personal Data, Kenlah will employ a number of safeguards, appropriate to the sensitivity of the information, to protect Personal Data against loss or theft, as well as unauthorised access, disclosure, copying, use, or modification. Such safeguards will include physical measures, organisational measures and technological measures, for example locked filing cabinets, restricted access to offices, security clearances and limiting access on a "need to know" basis and use of passwords and encryption. Procedures for implementing these measures will be communicated to all Kenlah’s employees and third parties to ensure compliance with this principle.
Data Integrity Principle:
Kenlah strives to maintain complete, current, and accurate information about its customers. Any inaccurate information that is brought to Kenlah's attention will be corrected as quickly as possible after notification. Procedures will be maintained to ensure that any reported inaccuracies are promptly and effectively handled and that customers' information remains as accurate, current and complete as possible.
You are obliged to provide your personal data to Kenlah. Failure to provide complete and correct information to Kenlah as required in the Agreement including the Registration Form or any Addendum, may result in the customer's application for services being rejected, the service or Agreement being terminated and/or correspondence from Kenlah including without limitation, bill statements failing to reach the CUSTOMER.
Access Principle:
Any person dealing with Kenlah can have access to his/her Personal Data that Kenlah has in its possession or control and may request that his/her Personal Data be amended for purposes of accuracy and completeness.
SENSITIVE PERSONAL DATA
Kenlah does not process any Sensitive Personal Data in its ordinary course of business.
If need arises, Kenlah will obtain explicit consent from the customer before or when it processes Sensitive Personal Data.
Kenlah may process Personal Data without the customer’s consent only in limited circumstances as permitted by law.
Kenlah’S WEBSITE
Kenlah provides products and services via its various websites. When a customer visits Kenlah' websites the web servers generally record anonymous information such as the time, date and URL of the request. This information assists Kenlah to improve the structure of its websites and monitor their performance. From time to time Kenlah may also use third parties to analyse this anonymous information.
As mandatory in the usage of the Kenlah’s websites Kenlah may require standard information such as a customer’s Login ID, password, Personal Data for verification purposes, contact details and identification numbers. This information is necessary for Kenlah to provide the services the customer applied for. The customers are required to maintain the secrecy of his/her Login ID and Password enabling him/her to access the Kenlah home page. It is strongly stressed that Kenlah will not be able to secure the Personal Data if the customer reveals his/her Login ID and Password to anyone, and as such, is not liable for any breach of Personal Data.
IP ADDRESSES AND COOKIES
Kenlah also collects Internet Protocol (IP) addresses. IP addresses are assigned to computers on the internet to uniquely identify them within the global network. Kenlah collects and manages IP addresses as part of the service of providing internet session management and for security purposes.
The Kenlah’s websites may transmit to any customer’s computer a “cookie”. A cookie is a package of data that allows Kenlah’s server to identify and interact more effectively with the customer’s computer having to spend time on identifying each customer user, thereby also providing additional login convenience. The customer may configure and personalise its current browser to refuse, reject or delete such cookies.
INTEREST BASED ADVERTISING
Interest Based Advertising is a way of making the advertisements (ads) on the websites the customer visits more relevant to him/her. Kenlah collects anonymous information about the web browsing activity of a customer internet-enabled device and use that information to associate the customer’s browser with one or more predefined interest categories. This enables Kenlah to provide ads to the customers that are tailored to the customer’s interests. Interest Based Advertising does not change the amount of advertising a customer receives, it just makes it more relevant.
The customer may configure and personalise its current browser to refuse, reject or delete collection of information for Internet Based Advertising.
CALLING NUMBER DISPLAY
Kenlah's Calling Number Display facility (CND) lets persons who receive phone calls identify who is calling them by displaying the caller's number. CND forms part of the ordinary telephony service that you purchase from Kenlah. Unless you have chosen to block your (home or mobile) phone number, or have a silent line, CND will usually cause your phone number to be displayed (or logged) - locally and sometimes internationally - on a receiving caller's phone. In other words, CND will enable the disclosure of your phone number to receiving callers (and to other network operators) locally and internationally, unless you take the above measures.
If customers have any inquiries, concern or complaint about the privacy notice, kindly contact Kenlah at business operation hours (09:00 a.m. to 21:00 p.m.) not including public holidays at the following contact points:
E-mail : support@kenlah.com
Address : Suite 33-01, 33rd Floor,
Menara Keck Seng,
203 Jalan Bukit Bintang,
55100 Kuala Lumpur