PRIVACY POLICY: HEREPAY SDN BHD

Introduction

Welcome to Herepay Sdn Bhd! Your privacy is of utmost importance to us. This policy outlines the personal information we collect, the reasons for collecting it, how we utilize it, and under what circumstances we might share it with third parties. We are committed to safeguarding the privacy of personal information entrusted to us, whether collected offline or online, particularly via this website (Site). References to ‘we’, ‘us’, or ‘our’ pertain to Herepay Sdn Bhd, the proprietors of herepay.org.

Information We Collect

We may gather details such as your name, contact information (like your email, phone number, and address), date of birth, geographical data, and any other particulars you opt to share with us. Such data is sourced directly from you or third parties, but only with your explicit consent. Consent is obtained through specific mechanisms such as checkboxes during account creation or explicit opt-in for marketing communications.

Purpose of Collecting Your Information

We collect information to:

• Enhance service functionality by analyzing user interactions to improve user experience.
• Engage and communicate with you regarding our services.
• Maintain accurate records aligned with our business operations.
• Fulfill our legal obligations and uphold our legal rights.

Each purpose for which we collect and process your data is clearly defined and limited to ensure compliance with the principle of purpose limitation under the PDPA.

Sharing Your Information

On occasions, we might find it necessary to share your data with:

• Service collaborators such as IT support, data storage facilities, and payment processing entities. Each service collaborator is carefully selected and bound by strict data protection agreements to ensure compliance with PDPA standards. These agreements include specific compliance requirements and regular audit procedures.
• Legal entities or government agencies as mandated by prevailing laws.

We ensure these entities are committed to preserving your privacy and operate within legal confines. We will not misuse or exploit your data beyond what is legally required or necessary for our operations.

Your Rights

You hold specific rights concerning your personal data. Should you wish to access, update, or erase your information, you can easily do so by contacting us at hi@herepay.org. We provide a clear and user-friendly process for managing your data subject rights in compliance with the PDPA.

Complaints

If you believe we have not adhered to the PDPA or its provisions, please reach out to us. We pledge to review the matter and revert in the shortest time feasible. You can contact us at hi@herepay.org for any privacy-related queries or complaints.

Storage and Security

We are dedicated to ensuring that the personal data we collect is shielded. We have instated methods to protect this data from misuse, tampering, loss, unauthorized access, modification, and unauthorized dissemination. Specific measures include:

• Implementation of access controls to restrict data access to authorized personnel only.
• Regular security audits and incident response plans to promptly address any data breaches or security incidents.

While we strive to safeguard the data, we cannot assure the invulnerability of information transmitted to us or by us online. Transmitting and exchanging data occurs at your discretion and risk. Although we deploy measures to guard against unauthorized exposure of details, we cannot guarantee that personal data will remain confidential in all scenarios.

Data Retention Policies

We define the criteria for data retention periods, specifying how long different types of data will be kept and the reasons for these retention periods. For instance:

• Personal contact information is retained for the duration of your account’s active status plus one year for follow-up purposes.
• Financial transaction data is retained for seven years to comply with legal and regulatory requirements. We regularly review and securely dispose of data that is no longer necessary.

Amendments

At our discretion, we reserve the right to modify this Privacy Policy when deemed necessary. We will inform you of any such changes by reaching out via the contact details you’ve shared with us and by posting a notice on our website. An updated policy becomes operative once you are intimated about the adjustments. Your continued use of our services following such notification constitutes your acceptance of the revised terms.