Privacy Policy


Please take a moment to read our privacy policy before using the I-FIKR Portal ("Portal") or submitting any Personal Data to the Portal.

If you are using this Portal, your Personal Data will be processed by us.

This privacy policy describes the information gathering and dissemination practices for the Portal. By using the Portal, you are consenting to the information collection and use practices described in this policy as modified from time to time by us. We reserve the right to modify, update and/or amend this Privacy Policy from time to time with reasonable prior notice to you. We will notify you of any amendments via announcements on the Portal or other appropriate means. Any such revised policy will continue to apply to all information that has previously been collected as well as information that has been stored or processed on an ongoing basis by us. Therefore, you are encouraged to check the version of the privacy policy whenever you visit the Portal for any updates or changes. By continuing to communicate with us, use our services, purchase our products and/or access to the Portal after being notified of any amendments to this Privacy Policy, you will be treated as having agreed to and accepted those amendments.

We will only process your personal data in accordance with the Personal Data Protection Act 2010, the applicable regulations, guidelines, orders made under the Personal Data Protection Act 2010 and any statutory amendments or re-enactments made of the Personal Data Protection Act 2010 from time to time (collectively referred to as the “PDPA”) as well as this Privacy Policy.

If you are a corporate entity, references to the term “you” and “your” shall also include your employees, representatives and agents.

The PDPA requires us to inform you of your rights in respect of your personal data that is being processed or that is to be collected and further processed by us and the purposes for the data processing. The PDPA also requires us to obtain your consent to the processing of your personal data. In light of the PDPA, we are committed to protecting and safeguarding your personal data.

By providing your personal data to us and/or continuing access to the Portal, you declare that you have read and understood this Privacy Policy and agree to us processing your personal data in accordance with the manner as set out in this Privacy Policy.

 

1. INFORMATION COLLECTED ON-LINE AND ITS USAGE

1.1 Collection of Personal Data

When you register an account with us or subscribe to our updates, we may process your personal data such as:-

  1. your name, username, address, email address, contact details, and internet protocol (IP) address; and
  2. financial information such as your credit card number and billing address.

The Personal Data as required herein (unless stated otherwise) is obligatory on you and if you fail to provide any information as required, you will not be able to register an account with us, use the Portal, purchase any of our products through the Portal or obtain any updates from us (whichever is applicable).

Additional information that identifies you personally may be collected through any comments, inquiries or suggestions submitted through the Portal.

If you decide to register through or otherwise grant access to a third-party social networking or integrated service (what we call an “Integrated Service”), such as Facebook, Google, Apple or similar single sign-on service, the Portal may also collect Personal Data that is already associated with your Integrated Service account.  If you choose to provide such information, during registration or otherwise, the Portal will treat the information as Personal Data and will use it in the ways described in this Privacy Policy. We will not be liable for any breach of your Personal Data caused by, due to or arising from your use with the Integrated Services.

1.2 Purpose of Acquiring and Processing Your Personal Data

Any Personal Data that you share with us will be used for limited purposes, including:-

  1. to communicate with you;
  2. to assess, process and provide products, services and/or facilities to you;
  3. provide, maintain, protect and improve the Portal, to develop new services, and to protect ourselves and our users;
  4. provide you with information of our products and also products from other members of our group of companies unless you have opted out from receiving such information;
  5. to provide academic and educational services to you;
  6. provide you with regular communications (other than direct marketing materials) from us relating to the Portal;
  7. manage your account and provide you with customer support;
  8. develop and display content tailored to your interests on the Portal;
  9. enforce any Terms and Conditions between us;
  10. research purposes including historical and statistical purposes;
  11. general operation and maintenance of the Portal including audit;
  12. to respond to your enquiries or complaints or resolve any issues and disputes which may arise in connection with any dealings with us;
  13. to administer and process any payments related to products, services and/or facilities requested by you;
  14. to facilitate your participation in, and our administration of, any events including meetings, seminars, conferences, talks, road shows, contests, promotions or campaigns;
  15. to carry out due diligence or other monitoring or screening activities (including background checks) in accordance with legal or regulatory obligations or risk management procedures that may be required by law or that may have been put in place by us;
  16. to monitor, review and improve our events and promotions, products and/or services;
  17. to process and analyse your personal data either individually or collectively with other individuals;
  18. to share any of your personal data pursuant to any agreement or document which you have duly entered with us for purposes of seeking legal and/or financial advice and/or for purposes of commencing legal action;
  19. to share any of your personal data with a third party necessary for the preparation of legal documents or contract to be entered by you; and
  20. investigation of complaints, suspected suspicious transactions and research for service improvement.

We may share your Personal Data with authorised third parties such as :-

  1. service providers under contract who help with our business operations (such as fraud investigations, bill collection, affiliate and rewards programmes, monitoring of user behavior on the Portal and the processing of payments for any products or services);
  2. third parties (including those overseas) who provide data processing services;
  3. any credit reference agencies or, in the event of default, any debt collection agencies; and
  4. any person, who is under a duty of confidentiality and who has undertaken to keep such data confidential, whom we have engaged to fulfil our obligations to you.

We reserve the right to disclose your Personal Data if required to do so by law, or in the good faith belief that such action is reasonably necessary to comply with legal process, respond to claims, or to protect the rights, property or safety of our company, our employees, customers, or the public. If such information is disclosed, we would, if allowed by law, inform you of the disclosure.

If we are merged or acquired by another entity, personally identifiable information may be transferred to such entity as a part of the merger or acquisition.

Your access to most services and content is password protected. It is recommended that you do not divulge your password to anyone. We will never ask you for your password in an unsolicited phone call or in an unsolicited email. You should not disclose your username and password to others. In addition, if applicable, you should remember to sign out of your account or service at the end of each session. You may also wish to close your browser window when you have finished your work. A final precaution would be to clear the browser cache after the session. The cache stores files that you have accessed and may allow another to view your legal research or Personal Data and correspondence if you share a computer with someone else or are using a computer in a public place like a library or Internet cafe.

Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. Accordingly, despite our efforts to protect your Personal Information, we cannot ensure or warrant the security of any information you transmit to us, or to or from our online products or services. All such transmission of information is carried out at your own risk. However, once we receive your transmission, we will make best efforts to ensure its security in our systems.

1.3 E-Mail Addresses

We collect e-mail addresses as part of providing services. We may send you e-mails from time-to-time for customer service or our own marketing purposes. In no circumstances is your e-mail address shared, sold or given to any third party without your consent.

1.4 Aggregate Information

We collect aggregate information about you and your use of our services, whether you have an account or not. For instance, we may collect various forms of click stream information such as IP address information, entry and exit points for the Portal (i.e., referring URLs or domains), search terms, site traffic, page views, impressions, operating system and browser type. Such aggregate information generally will not personally identify you or be correlated to you. If we do correlate any aggregate information to you specifically, we will do so for our internal use only and will not disclose such information to any other unauthorised third party. We may collect, compile, store, publish, promote, report, sell, or otherwise disclose or use any and all aggregate information, provided that, such information does not personally identify you.

1.5 Cookies

We may make use of "cookies" on the Portal. Cookies are small text files that are stored on a user's computer by the Web server through a user's browser. A cookie itself is not designed or intended to read any information from your computer (other than the contents of the cookie); rather, it is an identifier used by the Portal that originally placed it on your hard drive. The actual contents of the cookie information can be retrieved by the same server to identify the computer and subsequently to customise, monitor, or regulate the use of the Portal based on information stored in the cookie or host server. Therefore, cookies allow us to automate access and data entry functions of the Portal such as login information, correlate online ordering information for purchases you may make while at the Portal (if any), tailor the Portal to your preferences or interests, or customise promotions or marketing. In addition, cookies allow us to track usage of the Portal to determine those areas of the Portal that are useful or popular and those that are not, thereby enabling us to improve and update the Portal effectively. Third party advertising networks may issue their separate cookies to your hard drive when serving advertisements.

The type of anonymous click stream data collected by us through the cookies may include your Internet Protocol address, web browser software, date and time of visit to the Portal, and whether your requests (including search requests and clicking on links to parts of the Portal) were met with successfully. All such information collected through cookies are not personal data and you cannot be identified from this information. Such information is only used for the purpose of managing and creating a better user experience, analysing the traffic on the Portal and to identify areas for improvement on the Portal.

The use of cookies is now an industry standard, and you will find them used on most major websites. Most browsers are initially set up to accept cookies. If you prefer, you can reset your browser either to notify you when you have received a cookie, or to refuse to accept cookies. You should understand that certain features on the Portal will not function properly if you set your browser to not accept cookies.

1.6 Advertising Services and Profiling

In the event that we do carry advertisements, we will not supply and will not permit advertising services on the Portal to directly collect any personally identifying information; however, in some cases, IP address information may be referred to an advertising service servicing advertisements on the Portal.

You should also be aware that an advertising service may have the ability to correlate otherwise anonymous cookie information that it collects from the Portal (or co-branded portals) to you if you have previously provided personally identifying information to (a) the advertising service directly or (b) a portal which shares such information with the same advertising service. In any case you should refer to the advertising service's privacy policy.

a) YouTube and Vimeo

The Portal uses YouTube and Vimeo to display video content on the Service. YouTube and Vimeo incorporate tracking technologies, which may be present in the videos embedded on the Service, which may collect information when you view the video on the Service, including device identifiers and/or cookie IDs. This information is collected directly and automatically by YouTube and its partners, and the Portal does not participate in these data transmissions. The Portal does not provide any Personal Information, such as usernames or emails, to YouTube or Vimeo.

 

2. EXTERNAL LINKS

If any part of the Portal links you to other websites, those websites do not operate under this Privacy Policy and we do not accept any responsibility or liability arising from those websites.

Likewise, if you subscribe to an application, content or a product from our strategic partner and you subsequently provide your personal data directly to that third party, that personal data will be subject to that third party’s privacy/personal data protection policy (if they have such a policy) and not to this Privacy Policy.

We recommend you read and understand the privacy/personal data protection statement/policy posted on those other websites in order to understand their procedures for collecting, processing, using and disclosing personal data and before submitting your personal data to those websites. This includes any company providing on-line payment via credit card or e-banking.

 

3. PERSONAL DATA OF THIRD PARTIES

If you are a firm or corporation supplying personal data of your partners, directors, shareholders, employees and/or officers to us, please do ensure that you have obtained their consent and bring this Privacy Notice to their attention.

 

4. UPDATING AND ACCESS TO YOUR INFORMATION

As a user you can, at any time, update your account information. We are not responsible for any of the information so viewed, received or altered since the control of your username and password and your email is solely your responsibility. Users who allow others to use their account for accessing this service are in breach of the Terms of Use of this service and access may be denied. We may monitor your usage in an effort to prevent such unauthorised use.

It is your responsibility to ensure that the information you have on the Portal is the most up-to-date information as possible. We may retain transactional history in order to document a transaction you may have had with us or other users.

However, we reserve the right to decline to process requests which jeopardize the security and privacy of the Personal Data of others as well as requests which are impractical or not made in good faith.

 

5. ACCURACY OF YOUR PERSONAL DATA

You represent and undertake that all Personal Data provided by you is accurate and complete, and that none of it is misleading or out of date. You will promptly update us in the event of any change to your personal data.

 

6. YOUR RIGHTS

You have the right under this Privacy Policy to:

6.1 Request access to Your Personal Data. The right to access, update or delete the information we have on you. Whenever made possible, you can access, update or request deletion of your Personal Data. If you are unable to perform these actions yourself, please contact us to assist you. This also enables you to receive a copy of the Personal Data we hold about You. We may charge a small fee (such amount as permitted by the PDPA) to cover the administration costs involved in processing your request to access your personal data. Notwithstanding the foregoing, we reserve our rights to rely on any statutory exemptions and/or exceptions to collect, use and disclose your personal data.

6.2 Request correction of the Personal Data that We hold about You. You have the right to have any incomplete or inaccurate information We hold about You corrected.

6.3 Object to processing of Your Personal Data. This right exists where We are relying on a legitimate interest as the legal basis for Our processing and there is something about Your particular situation, which makes You want to object to our processing of Your Personal Data on this ground. You also have the right to object where We are processing Your Personal Data for direct marketing purposes.

6.4 Request erasure of Your Personal Data. You have the right to ask Us to delete or remove Personal Data when there is no good reason for Us to continue processing it.

6.5 Request the transfer of Your Personal Data. We will provide to You, or to a third-party You have chosen, Your Personal Data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which You initially provided consent for Us to use or where We used the information to perform a contract with You.

6.6 Withdraw Your consent. In addition, you also have the right, by notice in writing, to inform us on your withdrawal (in full or in part) of your consent given previously to us subject to any applicable legal restrictions, contractual conditions and a reasonable duration of time for the withdrawal of consent to be effected. However, your withdrawal of consent could result in certain legal consequences arising from such withdrawal. In this regard, depending on the extent of your withdrawal of consent for us to process your personal data, it may mean that we will not be able to continue with your existing relationship with us or the contract that you have with us will have to be terminated.

 

7. RETENTION OF YOUR PERSONAL DATA

Any of your personal data provided to us is retained for as long as the purposes for which the personal data was collected continues; your personal data is then destroyed or anonymised from our records and system in accordance with our retention policy in the event your personal data is no longer required for the said purposes unless its further retention is required to satisfy a longer retention period to meet our operational, legal, regulatory, tax or accounting requirements.

 

8. SECURITY OF YOUR PERSONAL DATA

8.1 We are committed to ensuring that your personal data is stored securely. In order to prevent unauthorised access, disclosure or other similar risks, we endeavour, where practicable, to implement appropriate technical, physical, electronic and procedural security measures in accordance with the applicable laws and regulations and industry standard to safeguard against and prevent the unauthorised or unlawful processing of your personal data, and the destruction of, or accidental loss, damage to, alteration of, unauthorised disclosure of or access to your personal data.

8.2 We will make reasonable updates to our security measures from time to time and ensure the authorised third parties only use your personal data for the Purposes set out in this Privacy Policy.

8.3 The Internet is not a secure medium. However, we will put in place various security procedures with regard to the Portal and your electronic communications with us. All our employees and data processors, who have access to, and are associated with the processing of your personal data, are obliged to respect the confidentiality of your personal data.

8.4 Please be aware that communications over the Internet, such as emails/webmails are not secure unless they have been encrypted. Your communications may be routed through a number of countries before being delivered, this is the nature of the World Wide Web/Internet.

8.5 We cannot and do not accept responsibility for any unauthorised access or interception or loss of personal data that is beyond our reasonable control.

 

9. PERSONAL DATA FROM MINORS AND OTHER INDIVIDUALS

9.1 To the extent that you have provided (or will provide) personal data about your family members, spouse, other dependents and/or other individuals, you confirm that you have explained to them that their personal data will be provided to, and processed by, us and you represent and warrant that you have obtained their consent to the processing (including disclosure and transfer) of their personal data in accordance with this Privacy Policy.

9.2 In respect of minors (i.e. individuals under 18 years of age) or individuals not legally competent to give consent, you confirm that they have appointed you to act for them, to consent on their behalf to the processing (including disclosure and transfer) of their personal data in accordance with this Privacy Policy.

 

10. TRANSFER OF YOUR PERSONAL DATA OUTSIDE OF MALAYSIA

Our information technology storage facilities and servers may be located in other jurisdictions outside of Malaysia. This may include, but not limited to, instances where your personal data may be stored on servers located outside Malaysia. In addition, your personal data may be disclosed or transferred to entities located outside Malaysia or where you access the Portal from countries outside Malaysia.

Please note that these foreign entities may be established in countries that might not offer a level of data protection that is equivalent to that offered in Malaysia under the laws of Malaysia. You hereby expressly consent to us transferring your personal data outside of Malaysia for such purposes. We shall endeavour to ensure that reasonable steps are taken to procure that all such third parties outside of Malaysia shall not use your personal data other than for that part of the Purposes and to adequately protect the confidentiality and privacy of your personal data.

 

11. CANCELLATION AND REFUND POLICY

11.1 CANCELLATION

If you cancel your order(s) before it ships from our warehouse, you will not be charged any additional fees. We require a cancellation request to be submitted by emailing us at [email protected] Once the cancellation request is received, a full refund will be initiated. We would advise a cancellation request within 12 hours upon your order submission in order for a cancellation prior to goods shipment, if required.

11.2 REFUND POLICY

Your full refund will be issued once we have received and examined the returned goods at our return center, if required. Once the returned goods fulfil our return policy, the full refund will be initiated. The method of refund will be processed depending on your original payment method:

1. Online Bank Transfer, full refunds will be credited into your bank account via online bank transfer, which should be posted within 3-5 working days.

2. Credit card refunds services, refunds will be sent to the card-issuing bank.

Kindly contact your card-issuing bank with regards to the duration of the credit refunds.

 

12. CONTACT DETAILS

If you have any questions about this Privacy Policy, or have any further queries, or would like to make a complaint or data access or correction request in respect of your personal data, you may contact us at the contact details below:

Personal Data Protection Officer,

Address: INCEIF, Lorong Universiti A, 59100 Kuala Lumpur
Contact No.: +6 (03) 7651 4000
Fax No.: +6 (03) 7651 4094
Email Address: [email protected]