The Personal Data Protection Act 2010 (the "Act"), which regulates the processing of personal data in commercial transactions, applies to all entities under and/or related to Collective (the "Church") (collectively, “our”, “us” or “we”). For the purpose of this written notice ("Notice"), the terms “personal data” and “processing” shall have the same meaning as prescribed in the Act.
1. This Notice serves to inform you that your personal data is being processed by the Church and by using or accessing the www.collective.my (the “Website”) and/or other related applications, you hereby give your consent to the processing of your personal data.
2. Your personal data includes your full name, gender, date of birth, email address, home or office mailing address, telephone number, NRIC no., passport number, bank account no. and credit or debit card nos., location, donation history, educational qualifications, religious information, preferences, interests and all other related personal data we may again collect from you on any subsequent occasion.
3. Your personal data is being or is to be collected and further processed for:
(a) communicating with you on any information, detail, and/or material in relation to the programme, activity and/or works of the Church;
(b) operate the Website;
(d) responding to your inquiries and/or complaints;
(e) processing payments and the relevant documents for registration and/or subscription to any programme, activity or works of the Church;
(f) conducting surveys and/or analysis about the programme, activity or works of the Church;
(g) compliance with any legal requirements; and
(h) such other purposes directly related to the foregoing.
(collectively, the “Purposes”).
4. The Church does not sell, rent or lease the personal data and/or information collected to third parties. The Church may, from time to time, contact you on behalf of external partners about a particular offering that may be of interest to you. In those cases, your unique personally identifiable information (e-mail, name, address, telephone number) is not transferred to the third party. In addition, the Church may share data with trusted partners to help us perform statistical analysis, send you e-mail or postal mail, provide support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to the Church, and they are required to maintain the confidentiality of your information.
5. Your personal data, and all other information that you may provide us from time to time, is being or is to be collected from: the Website(s) and/or its related applications, and from third party payment gateway(s) for, amongst others, the Purposes.
6. In operating this Website, we may use a technology called "cookies." A cookie is a piece of information that the computer that hosts our Website gives to your computer when you access a website. Our cookies help provide additional functionality to the Website and help us analyse the Website usage more accurately.
8. Subject to provisions of the Act:
(a) you may, upon payment of a prescribed fee, make a data access request in writing to us; and
(b) we may refuse to comply with a data access request or a data correction request and shall, by notice in writing, inform you of our refusal and the reasons of our refusal.
9. We disclose or may disclose your personal data to all entities related to the Church as stated above, related third party goods and service provider(s), third party payment gateway(s), our related corporations, business partners, service providers, governmental departments and/or agencies, regulatory and/or statutory bodies and any such third party requested or authorised by you for the Purposes.
10. We won't share your personal information with anyone except for the situations listed below or unless we specifically inform you and give you an opportunity to opt out of our sharing your personal information.
11. We may share your personal information with:
(a) Authorised third party goods and service provider(s). Our third party authorised goods and service providers are companies that allows for the purchase of goods and certain services. These services may include fulfilling orders, processing credit and debit card payments, bank transfers, delivering packages, providing customer service and marketing assistance, performing business and sales analyses, supporting the Website functionality, and supporting surveys and other features we offer. These service providers may have access to your personal information to the extent necessary to perform their functions, but we do not allow them to share or use any of your personal information for any other purpose.
(b) Affiliates. We may share information we collect, including personal information, with the affiliates of the Church. Sharing information with our affiliates enables us to provide you with information about a variety of products and services that might interest you. All of the Church affiliates are required to comply with applicable privacy and security laws and, at a minimum, in any commercial email they send to you, will give you the opportunity to choose not to receive such email messages in the future.
(c) Other Situations. We also may disclose your information:
(i) In response to a subpoena or similar investigative demand, a court order, or a request for cooperation from a law enforcement or other government agency; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by Malaysian law. In such cases, we may raise or waive any legal objection or right available to us.
(ii) When we believe disclosure is appropriate in connection with efforts to investigate, prevent, or take other action regarding illegal activity, suspected fraud or other wrongdoing; to protect and defend the rights, property or safety of our company, our users, our employees, or others; to comply with applicable law or cooperate with law enforcement; or to enforce the Website's Terms or other agreements or policies.
(iii) In connection with a substantial corporate transaction, such as the sale of our business, a divestiture, merger, consolidation, or asset sale, or in the unlikely event of insolvency.
12. We may require your assistance if the personal data relating to other third parties is required to process your personal data for the Purposes and you hereby agree to use your best endeavors to assist us when required.
13. It is obligatory that you supply us your email address, phone number, first name, last name and identification details (such as NRIC or passport) (collectively, “compulsory personal data”). If you fail to supply us with the compulsory personal data, we may refuse to process your personal data for any of the Purposes.
14. We may transfer your personal data to a place outside Malaysia and you hereby give your consent to the transfer.
15. You are responsible for ensuring that the information you provide us is accurate, complete, not misleading and kept up to date.
16. If, at any time after registering, you change your mind about receiving information from us or about the use of information volunteered by you, please send us a request specifying your new choice. Please contact us as specified above.
18. The Website and our related services are not intended for those under 18, and we do not knowingly collect information from those under the age of 18. Those under 18 should not submit any personal information without the permission of their parents or guardians. By using the Website, our related applications and/or services. you are representing that you are at least 18.
If we do not receive the declaration confirming that you have received this Notice and consent to our processing of your personal data below within fourteen (14) days from the date of this Notice, we will assume that you have consented to our processing of your personal data in accordance with the above.