Privacy Policy (SG)

OMNICHAT LIMITED, (hereinafter “we”, “us” or “our”) respects personal data (the “Personal Data”) of individuals. We set forth in this privacy policy (the “Policy”) how we or companies commissioned by us (data processors) collect, use, process, store and share the Personal Data that visitors of our website, our clients or their respective customers (collectively as the “Clients” or “you” or “your” or “yours”) provide to us, or that we gather from any use of our website (https://www.omnichat.ai/), software applications, chatbots, mobile applications, or any other products and services provided by us (the “Products and Services”).

In line with relevant data protection laws, including but not limited to the Singapore Personal Data Protection Act 2012 (“PDPA”), the European General Data Protection Regulation (“GDPR”), and other applicable national data protection laws (collectively known as “Applicable Laws”), we collect, use, process, store, and transfer the Personal Data of our Clients.

Personal Data means any information that relates to an identified or identifiable living individual. Different pieces of information, which collectively identify a particular person also constitute personal data.

You will be asked to consent to the terms of this Policy when making an enquiry, registering for events or interacting with us via Products and Services. It is not obligatory for you to provide the Personal Data to us. However, where the provision of certain Personal Data is obligatory, we will inform you at the time of collection and explain the consequences of not providing it. If you elect not to provide such Personal Data, we may not be able to supply or continue to supply you with the relevant information, services or products. To the extent permitted by Applicable Law, your continued use of our Products and Services constitutes your consent to the Policy.

If you do not agree to this Policy, please do not provide any Personal Data when requested and should refrain from using our Products and Services.

A. LEGAL BASIS FOR PROCESSING PERSONAL DATA

We process Personal Data in accordance with the Data Protection Provisions of the Singapore PDPA, and based on one of the following legal basis:

  1. The Client’s consent: We process Personal Data if the Client has given us explicit consent to use their Personal Data. Your consent can be withdrawn at any time.
  2. Contractual obligations: We process Personal Data in order to fulfil our contractual obligations under contracts we entered into with you.
  3. For a legitimate interest: We process Personal Data where we believe there is a legitimate reason to protect your interests or the interests of a third party, in accordance with applicable exceptions or provisions under the Singapore PDPA.
  4. Under a legal obligation: We process Personal Data where it is necessary to do so in compliance with any legal obligations, such as for the cooperation with law enforcement or regulatory authority, or the exercising of our legal rights.

B. COLLECTION OF PERSONAL INFORMATION

Depending on the type of Products and Services that are used, we may collect the following types of information through Products and Services:

  1. Identification information – we will collect identification information from Clients to process any of the Client’s requests and instructions as well as to deliver our Products and Services, including but not limited to name, address, email address and contact information, membership ID numbers or other royalty membership schemes, profile or passwords, etc.
  2. Data collected for Products and Services – we will collect information that is necessary for us to fulfil your requests and instructions.
  3. Data concerning connection and devices – we will collect information automatically when you access or use our Products and Services, including but not limited to geo-location data, device id, IP address, web pages viewed, browsing time, click-activities, redirections, pages you visited before entering into our websites, etc.
  4. Data collected by Cookies or other tracking technologies – we and our service providers will collect information by Cookies or other tracking technologies to allow us to better understand your access and use of our Products and Services. Please see Section D for more information.
  5. Data relating to your purchase activities, including but not limited to purchase history, delivery histories, payment methods, particulars of the payment tools, etc.
  6. Data you voluntarily provided to us, including but not limited to your reviews, feedback, opinions or other interactions you have with us about our Products and Services.
  7. Data for detection, investigation or prevention of fraud, misuse of our Products and Services or other violations of any applicable laws

 

We also collect other Personal Data provided to us as part of the Products and Services or for specific purposes made known to you at the time of collection.

Data may also be provided to us by third parties who we assume have obtained your consent or otherwise are permitted by Applicable Laws to share such data with us.

It is worth noting that some of the above information and data we collect are for processing for and on behalf of the Client for their purposes.

C. USE OF PERSONAL DATA

Depending on the type of Products and Services that are used, we may collect, use and process Personal Data for the following purposes:

  1. to provide you with and maintain our Products and Services, including but not limited to our software applications and chatbots;
  2. to evaluate, customise and improve the Products and Services and the user experience;
  3. to provide our Clients with customer and/or technical support;
  4. to analyse the use and trends of the Products and Services;
  5. to customize the Products and Services, in particular by providing features or ads which correspond to the interests and/or preferences of Clients;
  6. to manage any abusive, unlawful or dishonest use of our Products and Services or violation of our terms and conditions or any applicable laws;
  7. to prepare and offer push ads, promotions, rewards, or other types of content or features that match your interests and preferences;
  8. to improve the safety and reliability of our Products and Services;
  9. to comply with our legal obligations under applicable laws;
  10. to research and develop other services; or
  11. any other purposes described in this Policy or for specific purposes made known to you at the time of collection.

In addition, with the Client’s express consent, we will also use Personal Data collected by us for direct marketing and promotional purposes. Please see our Section E on Direct Marketing.

D. COOKIES

We use analytic technologies, such as cookies, or other automated tracking and technologies provided by third parties to collect information through automated means in order to understand the usage of the Products and Services.

1. Cookies

Cookies, or similar technologies (such cookies or other similar technologies, “Cookies”), are small computer files stored on your devices used to access our Products and Services.

You can choose to allow the installation of these Cookies or choose to disable them later. You can consent or reject, or request to be alerted when cookies are stored by adjusting your web browser settings (for websites) or device settings (for software applications), or through third-party cookie providers. However, should you refuse the installation of Cookies, the Products and Services, along with some features, might not function as expected.

Broadly speaking, we use cookies to:

  1. distinguish users of our Products and Services;
  2. collect data about Clients’ interests, behaviours of viewing and using our Products and Services to improve our Products and Services; and
  3. optimizing our marketing and advertising campaigns and those of our business partners.

E. DIRECT MARKETING

We intend to use our Client’s name, email address and mobile phone number to send direct marketing materials including news, offers, promotions, and joint marketing offers in relation to our [omni-channel customer service, social CRM marketing automation, and online-merge-offline (OMO) sales solutions] that we consider may be of interest to you, but we cannot so use our Clients’ personal data without their consent. If any Client prefers not to receive any direct marketing communications, they may withdraw any consent given without charge at any time by contacting us at privacy@omnichat.ai.

Even if you opt out of direct marketing, we may still send you other non-marketing communications as necessary for us to provide our Products and Services to you.

F. RETENTION OF PERSONAL DATA

We keep Personal Data for a period not exceeding what is required for the purposes for which the Personal Data is collected and in accordance with the Applicable Laws (“Retention Period”).

Without affecting the general rule above, we will retain and store Personal Data:

  1. when collected for our Clients, for a duration until our Clients instruct us to destroy or return such Personal Data or for a period of time as agreed between us and our Clients under separate agreements;
  2. for the time as long as necessary to provide the Products and Services;
  3. for the duration necessary to process and handle the requests of our Clients; or
  4. for the time needed for compliance with applicable laws.

When the Retention Period ends or at the request of the Client, we will delete the Personal Data or otherwise anonymise the Personal Data to a point where it is impossible to reidentify an individual. The Retention Period may be changed upon the cancellation of or re-enrollment in the Products and Services, or in accordance with Applicable Laws.

G. SHARING AND TRANSFER OF PERSONAL DATA

We share information collected as outlined below and where Clients have asked us to do so or otherwise consented, on a need-to-know basis:

  1. Omnichat affiliates: Personal Data collected may be accessed by or shared with our affiliates involved in providing omni-channel communication services which may be located in Hong Kong or Taiwan region.
  2. Service providers: We will share Personal Data collected with third-party service providers or sub-processors who process such data for us for purposes set out in Section C or for purposes of our Clients. This includes:
  1. cloud services providers: AWS Cloud (Singapore) and/or MongoDB Cloud located in Singapore and Hong Kong, which may not be located where the Clients are located.
  2. hosting services provider: Amazon Web Services (AWS) located in Singapore and Hong Kong; MongoDB Atlas located in Singapore and Hong Kong
  3. legal, accounting and other professional services providers located in Hong Kong;
  4. payment gateway or payment processing services providers located in the United States; and
  5. customer relationship maintenance services providers located in the United States;
  1. government or law enforcement authorities; and/or
  2. our assignees or successors.

 

When we transfer Personal Data out of Singapore, we will take steps to ensure that the recipient provides a standard of protection to the Personal Data so transferred that is comparable to the protection under the Singapore PDPA, and comply with applicable legal requirements for providing adequate protection for the transfer of Personal Data.

We have a data processing addendum with our trusted partners that are incorporated in our service agreements with our data processing and storage partners. Our support, developers and other team members are located in different parts of the world, and they may have access to Personal Data from outside of where the Client lives in order to provide timely support to constantly maintain our Products and Services.

By using the Products and Services, you agree that Personal Data may be processed by such subcontractors in countries that may not offer the same degree of data protection as the country where the Client lives. We will, however, only transfer the Personal Data in compliance with Applicable Laws.

We have taken reasonable contractual measures to ensure that our subcontractors would process Personal Data in accordance with our directions and for our purposes as set forth in this Policy. Our subcontractors are prohibited from using Personal Data for any other purposes without the Data Subject’s consent.

H. SECURITY OF PERSONAL DATA

We take different measures to secure Personal Data. We use appropriate organizational and technical means to protect Personal Data against any loss, destruction, alteration, or unauthorized, unlawful or abusive use of Personal Data. We placed the same obligations on our subcontractors who process Personal Data for our purposes and on our instructions.

Personal Data is encrypted in the database while at rest and in transit. We strictly restrict the scope of personnel who can access Personal Data and information, and require them to comply with their contractual confidentiality obligations. In the event of a data breach or other security incident of Personal Data, we will activate an emergency response plan to prevent the expansion of such security incidents and notify you and the Singapore Personal Data Protection Commission (PDPC) in accordance with the mandatory breach notification requirements under Applicable Laws.

To the extent permitted by Applicable Laws, we shall not be held liable for any direct or indirect loss, damages, or costs sustained or incurred by the Data Subject in the event of a data breach, or if the Personal Data is subject to unauthorized use, access, deletion, or alteration.

I. DATA SUBJECT RIGHTS

The Client enjoys the following rights under the Policy:

  1. The right to be informed
    This Policy outlined the types of information we collect, the purposes of processing Personal Data and the legal basis for doing so as well as the transfer, storage and handling by us of your Personal Data.
  2. The right of access
    Clients are entitled to access Personal Data that is in our possession or under our control. The right of access includes the right to know how we use Personal Data in practice and with whom we share such information.
  3. The right of rectification
    Clients may contact us to correct any of the Personal Data that is in our possession or under our control.
  4. The right to erasure and the right to restrict processing to storage
    Clients may ask us to remove or delete Personal Data or to restrict the processing of Personal Data where there are no valid reasons for any continued processing. However, the right to erasure is subject to our lawful rights under Applicable Laws to retain Personal Data for our legitimate purposes, such as the enforcement of our legal rights. If a Client requires us to restrict the processing of Personal Data other than for storage purposes, we may use such Personal Data again if there are valid reasons under Applicable Laws for us to do so.
  5. The right to data portability
    The Client has the right to receive a copy of the Personal Data we process. The Client may request us to transfer it to another party, except under certain circumstances in accordance with the Singapore PDPA.
  6. The right to object
    The Client has the right to object to our processing or use of Personal Data at any time. In particular, Data Subjects can object to our use of Personal Data for direct marketing purposes.
  7. The right to be notified of breaches
    We shall notify the Client and any applicable regulators in writing in the event of a suspected or actual breach of the Personal Data in accordance with statutory obligations.

 

To exercise your rights, you may do so by sending an email to privacy@omnichat.ai.

J. CHILDREN

Our Products and Services are not directed at people under the age of 18 (“Children”). We do not knowingly collect, solicit, market or process Personal Data belonging to Children.

K. PROCESSING FOR CLIENTS

You acknowledge and understand that some of our Clients will regularly disclose to us Personal Data collected by such Clients in the course of accessing and using our Products and Services. Where applicable, the Clients agree to grant us a non-exclusive right to process such Personal Data as a data processor solely to provide our Products and Services.

In the scenarios where we are processing Personal Data as a data processor for our Client’s purposes, we shall:

  1. process, use or disclose Personal Data as necessary for the performance of our contractual obligations owed to our Clients or otherwise under Clients’ consent;
  2. make no independent use of such data whatsoever for its own purposes;
  3. act at all times only in accordance with the Client’s instructions and requirements with respect to such Personal Data;
  4. ensure that we have in place reasonably appropriate technical and organizational measures to protect against unauthorized or unlawful processing of Personal Data and against accidental loss or destruction of, or damage to, Personal Data;
  5. ensure that all personnel who have access to and/or process Personal Data are obliged to keep such data confidential;
  6. notify the Clients without undue delay on becoming aware of a personal data breach affecting Personal Data;
  7. on the Client’s written direction, delete or return Personal Data and copies thereof to the Client; and
  8. maintain, complete and accurate records and information to demonstrate our compliance with this clause.

L. THIRD-PARTY LINKS

Our Products and Services may include links to third-party websites which are not governed by this Policy. We do not collect or access data that may have been collected by these third parties at their discretion.

The inclusion of third-party links does not mean that we approve, authorize or otherwise are affiliated with the websites to which the links connect. Clients are advised to remove the privacy notice of such third-party websites before providing any Personal Data to such websites or using the services of such websites.

We are not responsible for the use of Personal Data by such third parties and we cannot guarantee that they have the same level of data protection policy as us.

M. CONDITIONS OF USE OF OUR PRODUCTS AND SERVICES

The terms of this Policy are incorporated into our Terms of Use which Data Subjects may refer to at the following link: https://www.omnichat.ai/terms.

N. CHANGES TO THE POLICY

We reserve the right to change the Policy at any time. If we change the Policy, we will communicate the changes to you through notifications or alerts provided to you under the Products and Services, or any other appropriate means, for example, by email, so that the Client will be fully informed of such changes. Any changes to the Policy will take effect thirty (30) days after such changes have been communicated to you. Your continued use of our Products and Services will be deemed as an acceptance of the changes to the Policy.

O. SEVERANCE

If any part or provision of this Policy is prohibited or deemed to be void or unenforceable, that part or provision shall be ineffective to the extent of such prohibition or unenforceability without invalidating the remaining provisions hereof.

P. GOVERNING LAW

This Policy shall be governed by, and construed in accordance with, the laws of Singapore. Any dispute, controversy, difference or claim arising out of or relating to this Policy, including the existence, validity, interpretation, performance, breach or termination thereof or any dispute regarding non-contractual obligations arising out of or relating to it shall be referred to and finally resolved by arbitration administered by the Singapore International Arbitration Centre (“SIAC”) under the SIAC Rules in force when the Notice of Arbitration is submitted. The seat of arbitration shall be Singapore. This arbitration clause shall be governed by Singapore law. The number of arbitrations shall be one. The arbitration proceedings shall be conducted in English.

Q. COMMUNICATE WITH US

If you have any questions or concerns regarding this Policy or to exercise your rights under this Policy, please contact our Data Protection Officer:

Name: Pak Hui

Address: Unit 2201, 22/F, Exchange Tower, 33 Wang Chiu Rd, Kowloon Bay, Hong Kong

Email Address: privacy@omnichat.ai

Telephone Number: +852 28899282

Privacy Policy (MY)

OMNICHAT LIMITED, (hereinafter “we”, “us” or “our”) respects personal data (the “Personal Data”) of individuals. We set forth in this privacy policy (the “Policy”) how we or companies commissioned by us (data processors) collect, use, process, store and share the Personal Data that visitors of our website, our clients or their respective customers (collectively as the “Clients” or “you” or “your” or “yours”) provide to us, or that we gather from any use of our website (https://www.omnichat.ai/), software applications, chatbots, mobile applications, or any other products and services provided by us (the “Products and Services”).

In line with relevant data protection laws, including but not limited to the Malaysia Personal Data Protection Act 2010 (“PDPA 2010”), its amendments, the European General Data Protection Regulation (“GDPR”), and other applicable national data protection laws (collectively known as “Applicable Laws”), we collect, use, process, store, and transfer the Personal Data of our Clients.

Personal Data means any information that relates to an identified or identifiable living individual. Different pieces of information, which collectively identify a particular person also constitute personal data.

You will be asked to consent to the terms of this Policy when making an enquiry, registering for events or interacting with us via Products and Services. It is not obligatory for you to provide the Personal Data to us. However, where the provision of certain Personal Data is obligatory, we will inform you at the time of collection and explain the consequences of not providing it. If you elect not to provide such Personal Data, we may not be able to supply or continue to supply you with the relevant information, services or products. To the extent permitted by Applicable Law, your continued use of our Products and Services constitutes your consent to the Policy.

If you do not agree to this Policy, please do not provide any Personal Data when requested and should refrain from using our Products and Services.

A. LEGAL BASIS FOR PROCESSING PERSONAL DATA

We process Personal Data in accordance with the Data Protection Principles of the Malaysia PDPA 2010, and based on one of the following legal basis:

  1. The Client’s consent: We process Personal Data if the Client has given us explicit consent to use their Personal Data. Your consent can be withdrawn at any time.
  2. Contractual obligations: We process Personal Data in order to fulfil our contractual obligations under contracts we entered into with you.
  3. For a legitimate interest: We process Personal Data where we believe there is a legitimate reason to protect your interests or the interests of a third party, to the extent permitted under Applicable Laws.
  4. Under a legal obligation: We process Personal Data where it is necessary to do so in compliance with any legal obligations, such as for the cooperation with law enforcement or regulatory authority, or the exercising of our legal rights.

B. COLLECTION OF PERSONAL INFORMATION

Depending on the type of Products and Services that are used, we may collect the following types of information through Products and Services:

  1. Identification information – we will collect identification information from Clients to process any of the Client’s requests and instructions as well as to deliver our Products and Services, including but not limited to name, address, email address and contact information, membership ID numbers or other royalty membership schemes, profile or passwords, etc.
  2. Data collected for Products and Services – we will collect information that is necessary for us to fulfil your requests and instructions.
  3. Data concerning connection and devices – we will collect information automatically when you access or use our Products and Services, including but not limited to geo-location data, device id, IP address, web pages viewed, browsing time, click-activities, redirections, pages you visited before entering into our websites, etc.
  4. Data collected by Cookies or other tracking technologies – we and our service providers will collect information by Cookies or other tracking technologies to allow us to better understand your access and use of our Products and Services. Please see Section D for more information.
  5. Data relating to your purchase activities, including but not limited to purchase history, delivery histories, payment methods, particulars of the payment tools, etc.
  6. Data you voluntarily provided to us, including but not limited to your reviews, feedback, opinions or other interactions you have with us about our Products and Services.
  7. Data for detection, investigation or prevention of fraud, misuse of our Products and Services or other violations of any applicable laws

We also collect other Personal Data provided to us as part of the Products and Services or for specific purposes made known to you at the time of collection.

Data may also be provided to us by third parties who we assume have obtained your consent or otherwise are permitted by Applicable Laws to share such data with us.

It is worth noting that some of the above information and data we collect are for processing for and on behalf of the Client for their purposes.

C. USE OF PERSONAL DATA

Depending on the type of Products and Services that are used, we may collect, use and process Personal Data for the following purposes:

  1. to provide you with and maintain our Products and Services, including but not limited to our software applications and chatbots;
  2. to evaluate, customise and improve the Products and Services and the user experience;
  3. to provide our Clients with customer and/or technical support;
  4. to analyse the use and trends of the Products and Services;
  5. to customize the Products and Services, in particular by providing features or ads which correspond to the interests and/or preferences of Clients;
  6. to manage any abusive, unlawful or dishonest use of our Products and Services or violation of our terms and conditions or any applicable laws;
  7. to prepare and offer push ads, promotions, rewards, or other types of content or features that match your interests and preferences;
  8. to improve the safety and reliability of our Products and Services;
  9. to comply with our legal obligations under applicable laws;
  10. to research and develop other services; or
  11. any other purposes described in this Policy or for specific purposes made known to you at the time of collection.

 

In addition, with the Client’s express consent, we will also use Personal Data collected by us for direct marketing and promotional purposes. Please see our Section E on Direct Marketing.

D. COOKIES

We use analytic technologies, such as cookies, or other automated tracking and technologies provided by third parties to collect information through automated means in order to understand the usage of the Products and Services.

1. Cookies

Cookies, or similar technologies (such cookies or other similar technologies, “Cookies”), are small computer files stored on your devices used to access our Products and Services.

You can choose to allow the installation of these Cookies or choose to disable them later. You can consent or reject, or request to be alerted when cookies are stored by adjusting your web browser settings (for websites) or device settings (for software applications), or through third-party cookie providers. However, should you refuse the installation of Cookies, the Products and Services, along with some features, might not function as expected.

Broadly speaking, we use cookies to:

  1. distinguish users of our Products and Services;
  2. collect data about Clients’ interests, behaviours of viewing and using our Products and Services to improve our Products and Services; and
  3. optimizing our marketing and advertising campaigns and those of our business partners.

E. DIRECT MARKETING

We intend to use our Client’s name, email address and mobile phone number to send direct marketing materials including news, offers, promotions, and joint marketing offers in relation to our [omni-channel customer service, social CRM marketing automation, and online-merge-offline (OMO) sales solutions] that we consider may be of interest to you, but we cannot so use our Clients’ personal data without their consent. If any Client prefers not to receive any direct marketing communications, they may withdraw any consent given without charge at any time by contacting us at privacy@omnichat.ai.

Even if you opt out of direct marketing, we may still send you other non-marketing communications as necessary for us to provide our Products and Services to you.

F. RETENTION OF PERSONAL DATA

We keep Personal Data for a period not exceeding what is required for the purposes for which the Personal Data is collected and in accordance with the Applicable Laws (“Retention Period”).

Without affecting the general rule above, we will retain and store Personal Data:

  1. when collected for our Clients, for a duration until our Clients instruct us to destroy or return such Personal Data or for a period of time as agreed between us and our Clients under separate agreements;
  2. for the time as long as necessary to provide the Products and Services;
  3. for the duration necessary to process and handle the requests of our Clients; or
  4. for the time needed for compliance with applicable laws.

 

When the Retention Period ends or at the request of the Client, we will delete the Personal Data or otherwise anonymise the Personal Data to a point where it is impossible to reidentify an individual. The Retention Period may be changed upon the cancellation of or re-enrollment in the Products and Services, or in accordance with Applicable Laws.

G. SHARING AND TRANSFER OF PERSONAL DATA

We share information collected as outlined below and where Clients have asked us to do so or otherwise consented, on a need-to-know basis:

  1. Omnichat affiliates: Personal Data collected may be accessed by or shared with our affiliates involved in providing omni-channel communication services which may be located in Hong Kong or Taiwan region.
  2. Service providers: We will share Personal Data collected with third-party service providers or sub-processors who process such data for us for purposes set out in Section C or for purposes of our Clients. This includes:
  1. cloud services providers: AWS Cloud (Singapore) and/or MongoDB Cloud located in Singapore and Hong Kong, which may not be located where the Clients are located.
  2. hosting services provider: Amazon Web Services (AWS) located in Singapore and Hong Kong; MongoDB Atlas located in Singapore and Hong Kong
  3. legal, accounting and other professional services providers located in Hong Kong;
  4. payment gateway or payment processing services providers located in the United States; and
  5. customer relationship maintenance services providers located in the United States;
  1. government or law enforcement authorities; and/or
  2. our assignees or successors.

 

When we transfer Personal Data out of Malaysia, we will comply with the cross-border data transfer requirements under the Malaysia PDPA 2010 and applicable guidelines, ensuring adequate protection measures are enforced.

We have a data processing addendum with our trusted partners that are incorporated in our service agreements with our data processing and storage partners. Our support, developers and other team members are located in different parts of the world, and they may have access to Personal Data from outside of where the Client lives in order to provide timely support to constantly maintain our Products and Services.

By using the Products and Services, you agree that Personal Data may be processed by such subcontractors in countries that may not offer the same degree of data protection as the country where the Client lives. We will, however, only transfer the Personal Data in compliance with Applicable Laws.

We have taken reasonable contractual measures to ensure that our subcontractors would process Personal Data in accordance with our directions and for our purposes as set forth in this Policy. Our subcontractors are prohibited from using Personal Data for any other purposes without the Data Subject’s consent.

H. SECURITY OF PERSONAL DATA

We take different measures to secure Personal Data. We use appropriate organizational and technical means to protect Personal Data against any loss, destruction, alteration, or unauthorized, unlawful or abusive use of Personal Data. We placed the same obligations on our subcontractors who process Personal Data for our purposes and on our instructions.

Personal Data is encrypted in the database while at rest and in transit. We strictly restrict the scope of personnel who can access Personal Data and information, and require them to comply with their contractual confidentiality obligations. In the event of a data breach or other security incident of Personal Data, we will activate an emergency response plan to prevent the expansion of such security incidents and notify you and relevant authorities in accordance with Applicable Laws.

To the extent permitted by Applicable Laws, we shall not be held liable for any direct or indirect loss, damages, or costs sustained or incurred by the Data Subject in the event of a data breach, or if the Personal Data is subject to unauthorized use, access, deletion, or alteration.

I. DATA SUBJECT RIGHTS

The Client enjoys the following rights under the Policy:

  1. The right to be informed
    This Policy outlined the types of information we collect, the purposes of processing Personal Data and the legal basis for doing so as well as the transfer, storage and handling by us of your Personal Data. Pursuant to Section 7(3) of the Malaysia PDPA 2010, this Policy is available in English and Bahasa Malaysia.
  2. The right of access
    Clients are entitled to access Personal Data that is in our possession or under our control. The right of access includes the right to know how we use Personal Data in practice and with whom we share such information.
  3. The right of rectification
    Clients may contact us to correct any of the Personal Data that is in our possession or under our control.
  4. The right to erasure and the right to restrict processing to storage
    Clients may ask us to remove or delete Personal Data or to restrict the processing of Personal Data where there are no valid reasons for any continued processing. However, the right to erasure is subject to our lawful rights under Applicable Laws to retain Personal Data for our legitimate purposes, such as the enforcement of our legal rights. If a Client requires us to restrict the processing of Personal Data other than for storage purposes, we may use such Personal Data again if there are valid reasons under Applicable Laws for us to do so.
  5. The right to data portability
    The Client has the right to receive a copy of the Personal Data we process. The Client may request us to transfer it to another party, except under certain circumstances in accordance with Applicable Laws.
  6. The right to object
    The Client has the right to object to our processing or use of Personal Data at any time. In particular, Data Subjects can object to our use of Personal Data for direct marketing purposes.
  7. The right to be notified of breaches
    We shall notify the Client and any applicable regulators in writing in the event of a suspected or actual breach of the Personal Data in accordance with statutory obligations.

 

To exercise your rights, you may do so by sending an email to privacy@omnichat.ai.

J. CHILDREN

Our Products and Services are not directed at people under the age of 18 (“Children”). We do not knowingly collect, solicit, market or process Personal Data belonging to Children.

K. PROCESSING FOR CLIENTS

You acknowledge and understand that some of our Clients will regularly disclose to us Personal Data collected by such Clients in the course of accessing and using our Products and Services. Where applicable, the Clients agree to grant us a non-exclusive right to process such Personal Data as a data processor solely to provide our Products and Services.

In the scenarios where we are processing Personal Data as a data processor for our Client’s purposes, we shall:

  1. process, use or disclose Personal Data as necessary for the performance of our contractual obligations owed to our Clients or otherwise under Clients’ consent;
  2. make no independent use of such data whatsoever for its own purposes;
  3. act at all times only in accordance with the Client’s instructions and requirements with respect to such Personal Data;
  4. ensure that we have in place reasonably appropriate technical and organizational measures to protect against unauthorized or unlawful processing of Personal Data and against accidental loss or destruction of, or damage to, Personal Data;
  5. ensure that all personnel who have access to and/or process Personal Data are obliged to keep such data confidential;
  6. notify the Clients without undue delay on becoming aware of a personal data breach affecting Personal Data;
  7. on the Client’s written direction, delete or return Personal Data and copies thereof to the Client; and
  8. maintain, complete and accurate records and information to demonstrate our compliance with this clause.

L. THIRD-PARTY LINKS

Our Products and Services may include links to third-party websites which are not governed by this Policy. We do not collect or access data that may have been collected by these third parties at their discretion.

The inclusion of third-party links does not mean that we approve, authorize or otherwise are affiliated with the websites to which the links connect. Clients are advised to remove the privacy notice of such third-party websites before providing any Personal Data to such websites or using the services of such websites.

We are not responsible for the use of Personal Data by such third parties and we cannot guarantee that they have the same level of data protection policy as us.

M. CONDITIONS OF USE OF OUR PRODUCTS AND SERVICES

The terms of this Policy are incorporated into our Terms of Use which Data Subjects may refer to at the following link: https://www.omnichat.ai/terms.

N. CHANGES TO THE POLICY

We reserve the right to change the Policy at any time. If we change the Policy, we will communicate the changes to you through notifications or alerts provided to you under the Products and Services, or any other appropriate means, for example, by email, so that the Client will be fully informed of such changes. Any changes to the Policy will take effect thirty (30) days after such changes have been communicated to you. Your continued use of our Products and Services will be deemed as an acceptance of the changes to the Policy.

O. SEVERANCE

If any part or provision of this Policy is prohibited or deemed to be void or unenforceable, that part or provision shall be ineffective to the extent of such prohibition or unenforceability without invalidating the remaining provisions hereof.

P. GOVERNING LAW

This Policy shall be governed by, and construed in accordance with, the laws of Malaysia. Any dispute, controversy, difference or claim arising out of or relating to this Policy, including the existence, validity, interpretation, performance, breach or termination thereof or any dispute regarding non-contractual obligations arising out of or relating to it shall be referred to and finally resolved by arbitration administered by the Asian International Arbitration Centre (“AIAC”) under the AIAC Arbitration Rules in force when the Notice of Arbitration is submitted. The seat of arbitration shall be Kuala Lumpur, Malaysia. This arbitration clause shall be governed by Malaysian law. The number of arbitrations shall be one. The arbitration proceedings shall be conducted in English.

Q. COMMUNICATE WITH US

If you have any questions or concerns regarding this Policy or to exercise your rights under this Policy, please contact our Data Protection Officer:

Name: Pak Hui

Address: Unit 2201, 22/F, Exchange Tower, 33 Wang Chiu Rd, Kowloon Bay, Hong Kong

Email Address: privacy@omnichat.ai

Telephone Number: +852 28899282

Dasar Privasi (Malaysia)

OMNICHAT LIMITED, (selanjutnya disebut sebagai “kami”) menghormati data peribadi (“Data Peribadi”) individu. Kami menetapkan dalam dasar privasi ini (“Dasar”) bagaimana kami atau syarikat yang dilantik oleh kami (pemproses data) mengumpul, mengguna, memproses, menyimpan dan berkongsi Data Peribadi yang diberikan kepada kami oleh pelawat laman web kami, pelanggan kami atau pelanggan masing-masing (secara kolektif sebagai “Pelanggan” atau “anda”), atau yang kami kumpulkan daripada sebarang penggunaan laman web kami (https://www.omnichat.ai/), aplikasi perisian, bot sembang (chatbots), aplikasi mudah alih, atau sebarang produk dan perkhidmatan lain yang disediakan oleh kami (“Produk dan Perkhidmatan”).

Selaras dengan undang-undang perlindungan data yang berkaitan, termasuk tetapi tidak terhad kepada Akta Perlindungan Data Peribadi Malaysia 2010 (“APDP 2010”), pindaannya, Peraturan Perlindungan Data Umum Eropah (“GDPR”), dan undang-undang perlindungan data kebangsaan lain yang terpakai (secara kolektif dikenali sebagai “Undang-Undang Yang Terpakai”), kami mengumpul, mengguna, memproses, menyimpan, dan memindahkan Data Peribadi Pelanggan kami.

Data Peribadi bermaksud sebarang maklumat yang berkaitan dengan individu hidup yang dikenal pasti atau boleh dikenal pasti. Pelbagai maklumat yang secara kolektif mengenal pasti seseorang individu tertentu juga membentuk data peribadi.

Anda akan diminta untuk bersetuju dengan terma Dasar ini apabila membuat pertanyaan, mendaftar untuk acara atau berinteraksi dengan kami melalui Produk dan Perkhidmatan. Anda tidak diwajibkan untuk memberikan Data Peribadi kepada kami. Walau bagaimanapun, jika penyediaan Data Peribadi tertentu adalah wajib, kami akan memaklumkan anda pada masa pengumpulan dan menjelaskan akibat daripada tidak menyediakannya. Jika anda memilih untuk tidak memberikan Data Peribadi tersebut, kami mungkin tidak dapat membekalkan atau meneruskan pembekalan maklumat, perkhidmatan atau produk yang berkaitan kepada anda. Sejauh yang dibenarkan oleh Undang-Undang Yang Terpakai, penggunaan berterusan anda terhadap Produk dan Perkhidmatan kami membentuk persetujuan anda terhadap Dasar ini.

Jika anda tidak bersetuju dengan Dasar ini, sila jangan berikan sebarang Data Peribadi apabila diminta dan hendaklah melepaskan diri daripada menggunakan Produk dan Perkhidmatan kami.

A. ASAS UNDANG-UNDANG UNTUK MEMPROSES DATA PERIBADI

Kami memproses Data Peribadi selaras dengan Prinsip Perlindungan Data dalam APDP 2010 Malaysia, dan berdasarkan salah satu asas undang-undang berikut:

  1. Persetujuan Pelanggan: Kami memproses Data Peribadi jika Pelanggan telah memberikan persetujuan nyata kepada kami untuk menggunakan Data Peribadi mereka. Persetujuan anda boleh ditarik balik pada bila-bila masa.
  2. Kewajipan kontrak: Kami memproses Data Peribadi untuk memenuhi kewajipan kontrak kami di bawah kontrak yang kami matrai dengan anda.
  3. Untuk kepentingan yang sah: Kami memproses Data Peribadi di mana kami percaya terdapat alasan yang sah untuk melindungi kepentingan anda atau kepentingan pihak ketiga, sejauh yang dibenarkan di bawah Undang-Undang Yang Terpakai.
  4. Di bawah kewajipan undang-undang: Kami memproses Data Peribadi di mana ia perlu dilakukan bagi mematuhi sebarang kewajipan undang-undang, seperti untuk kerjasama dengan pihak berkuasa penguatkuasaan undang-undang atau badan kawal selia, atau pelaksanaan hak undang-undang kami.

B. PENGUMPULAN MAKLUMAT PERIBADI

Menerusi Produk dan Perkhidmatan yang digunakan, kami mungkin mengumpul jenis maklumat berikut melalui Produk dan Perkhidmatan:

  1. Maklumat pengenalan – kami akan mengumpul maklumat pengenalan daripada Pelanggan untuk memproses sebarang permintaan dan arahan Pelanggan serta untuk menyampaikan Produk dan Perkhidmatan kami, termasuk tetapi tidak terhad kepada nama, alamat, alamat e-mel dan maklumat hubungan, nombor ID keahlian atau skema keahlian royalti lain, profil atau kata laluan, dll.
  2. Data yang dikumpul untuk Produk dan Perkhidmatan – kami akan mengumpul maklumat yang perlu bagi kami memenuhi permintaan dan arahan anda.
  3. Data mengenai sambungan dan peranti – kami akan mengumpul maklumat secara automatik apabila anda mengagih atau menggunakan Produk dan Perkhidmatan kami, termasuk tetapi tidak terhad kepada data lokasi geografi, ID peranti, alamat IP, halaman web yang dilihat, masa semakan, aktiviti klik, lencongan, halaman yang anda lawati sebelum memasuki laman web kami, dll.
  4. Data yang dikumpul oleh Kukis atau teknologi penjejakan lain – kami dan penyedia perkhidmatan kami akan mengumpul maklumat melalui Kukis atau teknologi penjejakan lain untuk membolehkan kami memahami dengan lebih baik akses dan penggunaan Produk dan Perkhidmatan kami. Sila lihat Bahagian D untuk maklumat lanjut.
  5. Data berkaitan dengan aktiviti pembelian anda, termasuk tetapi tidak terhad kepada sejarah pembelian, sejarah penghantaran, kaedah pembayaran, butiran alat pembayaran, dll.
  6. Data yang anda berikan secara sukarela kepada kami, termasuk tetapi tidak terhad kepada ulasan, maklum balas, pendapat atau interaksi lain yang anda lakukan dengan kami mengenai Produk dan Perkhidmatan kami.
  7. Data untuk pengesanan, penyiasatan atau pencegahan penipuan, penyalahgunaan Produk dan Perkhidmatan kami atau pelanggaran lain terhadap sebarang undang-undang yang terpakai.

 

Kami juga mengumpul Data Peribadi lain yang diberikan kepada kami sebagai sebahagian daripada Produk dan Perkhidmatan atau untuk tujuan khusus yang dimaklumkan kepada anda pada masa pengumpulan.

Data juga boleh diberikan kepada kami oleh pihak ketiga yang kami andaikan telah memperoleh persetujuan anda atau sebaliknya dibenarkan oleh Undang-Undang Yang Terpakai untuk berkongsi data tersebut dengan kami.

Perlu diingatkan bahawa sesetengah maklumat dan data di atas yang kami kumpul adalah untuk diproses bagi pihak Pelanggan untuk tujuan mereka.

C. PENGGUNAAN DATA PERIBADI

Menerusi jenis Produk dan Perkhidmatan yang digunakan, kami mungkin mengumpul, mengguna dan memproses Data Peribadi untuk tujuan berikut:

  1. untuk menyediakan anda dengan dan mengekalkan Produk dan Perkhidmatan kami, termasuk tetapi tidak terhad kepada aplikasi perisian dan bot sembang kami;
  2. untuk menilai, menyesuaikan dan menambah baik Produk dan Perkhidmatan serta pengalaman pengguna;
  3. untuk menyediakan Pelanggan kami dengan sokongan pelanggan dan/atau teknikal;
  4. untuk menganalisis penggunaan dan trend Produk dan Perkhidmatan;
  5. untuk menyesuaikan Produk dan Perkhidmatan, khususnya dengan menyediakan ciri atau iklan yang sepadan dengan kepentingan dan/atau keutamaan Pelanggan;
  6. untuk mengurus sebarang penggunaan Produk dan Perkhidmatan kami secara kesat, menyalahi undang-undang atau tidak jujur atau pelanggaran terma dan syarat kami atau mana-mana undang-undang yang terpakai;
  7. untuk menyediakan dan menawarkan iklan tolak, promosi, ganjaran, atau jenis kandungan atau ciri lain yang sepadan dengan kepentingan dan keutamaan anda;
  8. untuk meningkatkan keselamatan dan kebolehpercayaan Produk dan Perkhidmatan kami;
  9. untuk mematuhi kewajipan undang-undang kami di bawah undang-undang yang terpakai;
  10. untuk meyelidik dan membangunkan perkhidmatan lain; atau
  11. apa-apa tujuan lain yang diterangkan dalam Dasar ini atau untuk tujuan khusus yang dimaklumkan kepada anda pada masa pengumpulan.

 

Selain itu, dengan persetujuan nyata Pelanggan, kami juga akan menggunakan Data Peribadi yang dikumpul oleh kami untuk tujuan pemasaran langsung dan promosi. Sila lihat Bahagian E kami mengenai Pemasaran Langsung.

D. KUKIS

Kami menggunakan teknologi analitik, seperti kukis, atau penjejakan automatik lain dan teknologi yang disediakan oleh pihak ketiga untuk mengumpul maklumat melalui kaedah automatik bagi memahami penggunaan Produk dan Perkhidmatan.

1. Kukis

Kukis, atau teknologi serupa (kukis sedemikian atau teknologi serupa lain, “Kukis”), ialah fail komputer kecil yang disimpan pada peranti anda yang digunakan untuk mengakses Produk dan Perkhidmatan kami.

Anda boleh memilih untuk membenarkan pemasangan Kukis ini atau memilih untuk mematikannya kemudian. Anda boleh bersetuju atau menolak, atau meminta untuk diwaspadai apabila kukis disimpan dengan meyelaras tetapan pelayar web anda (untuk laman web) atau tetapan peranti (untuk aplikasi perisian), atau melalui penyedia kukis pihak ketiga. Walau bagaimanapun, sekiranya anda menolak pemasangan Kukis, Produk dan Perkhidmatan, bersama-sama dengan sesetengah ciri, mungkin tidak berfungsi seperti yang dijangkakan.

Secara amnya, kami menggunakan kukis untuk:

  1. Membezakan pengguna Produk dan Perkhidmatan kami;
  2. Mengumpul data mengenai minat Pelanggan, tingkah laku melihat dan menggunakan Produk dan Perkhidmatan kami untuk menambah baik Produk dan Perkhidmatan kami; dan
  3. Mengoptimumkan kempen pemasaran dan pengiklanan kami serta rakan perniagaan kami.

E. PEMASARAN LANGSUNG

Kami berhasrat untuk menggunakan nama, alamat e-mel dan nombor telefon bimbit Pelanggan kami untuk menghantar bahan pemasaran langsung termasuk berita, tawaran, promosi, dan tawaran pemasaran bersama berkaitan dengan [penyelesaian perkhidmatan pelanggan berbilang saluran, automasi pemasaran CRM sosial, dan jualan dalam talian-gabung-luar talian (OMO)] kami yang kami anggap mungkin menarik minat anda, tetapi kami tidak boleh menggunakan data peribadi Pelanggan kami tanpa persetujuan mereka. Jika mana-mana Pelanggan memilih untuk tidak menerima sebarang komunikasi pemasaran langsung, mereka boleh menarik balik sebarang persetujuan yang diberikan tanpa sebarang caj pada bila-bila masa dengan menghubungi kami di privacy@omnichat.ai.

Walaupun anda memilih untuk tidak menerima pemasaran langsung, kami masih boleh menghantar komunikasi bukan pemasaran lain yang perlu bagi kami untuk menyediakan Produk dan Perkhidmatan kami kepada anda.

F. PENYIMPANAN DATA PERIBADI

Kami menyimpan Data Peribadi untuk tempoh yang tidak melebihi apa yang diperlukan bagi tujuan Data Peribadi itu dikumpul dan selaras dengan Undang-Undang Yang Terpakai (“Tempoh Penyimpanan”).

Tanpa menjejaskan peraturan am di atas, kami akan menyimpan dan menyimpan Data Peribadi:

  1. apabila dikumpul untuk Pelanggan kami, untuk tempoh sehingga Pelanggan kami mengarahkan kami untuk memusnahkan atau mengembalikan Data Peribadi tersebut atau untuk tempoh masa yang dipersetujui antara kami dan Pelanggan kami di bawah perjanjian berasingan;
  2. untuk tempoh masa seperti yang diperlukan untuk menyediakan Produk dan Perkhidmatan;
  3. untuk tempoh yang diperlukan untuk memproses dan mengendalikan permintaan Pelanggan kami; atau
  4. untuk masa yang diperlukan bagi mematuhi undang-undang yang terpakai.

 

Apabila Tempoh Penyimpanan tamat atau atas permintaan Pelanggan, kami akan memadamkan Data Peribadi atau menyahcamkan Data Peribadi sehingga ke peringkat di mana tidak mungkin untuk mengenal pasti semula seseorang individu. Tempoh Penyimpanan boleh diubah apabila pembatalan atau pendaftaran semula dalam Produk dan Perkhidmatan, atau selaras dengan Undang-Undang Yang Terpakai.

G. PENGKONGSIAN DAN PEMINDAHAN DATA PERIBADI

Kami berkongsi maklumat yang dikumpul seperti yang digariskan di bawah dan di mana Pelanggan telah meminta kami berbuat demikian atau bersetuju sebaliknya, atas dasar perlu tahu:

  1. Sekutu Omnichat: Data Peribadi yang dikumpul boleh diakses oleh atau dikongsi dengan sekutu kami yang terlibat dalam menyediakan perkhidmatan komunikasi berbilang saluran yang mungkin terletak di wilayah Hong Kong atau Taiwan.
  2. Penyedia perkhidmatan: Kami akan berkongsi Data Peribadi yang dikumpul dengan penyedia perkhidmatan pihak ketiga atau sub-pemproses yang memproses data tersebut untuk kami bagi tujuan yang ditetapkan dalam Bahagian C atau untuk tujuan Pelanggan kami. Ini termasuk:
    1. penyedia perkhidmatan awan: AWS Cloud (Singapura) dan/atau MongoDB Cloud yang terletak di Singapura dan Hong Kong, yang mungkin tidak terletak di mana Pelanggan berada.
    2. penyedia perkhidmatan pengehosan: Amazon Web Services (AWS) yang terletak di Singapura dan Hong Kong; MongoDB Atlas yang terletak di Singapura dan Hong Kong
    3. penyedia perkhidmatan undang-undang, perakaunan dan perkhidmatan profesional lain yang terletak di Hong Kong;
    4. pintu laluan pembayaran atau penyedia perkhidmatan pemprosesan pembayaran yang terletak di Amerika Syarikat; dan
    5. penyedia perkhidmatan penyelenggaraan hubungan pelanggan yang terletak di Amerika Syarikat;
  3. pihak berkuasa kerajaan atau penguatkuasaan undang-undang; dan/atau
  4. pemegang serah hak atau pengganti kami.

 

Apabila kami memindahkan Data Peribadi keluar dari Malaysia, kami akan mematuhi keperluan pemindahan data merentas sempadan di bawah APDP 2010 Malaysia dan garis panduan yang terpakai, memastikan langkah perlindungan yang mencukupi dikuatkuasakan.

Kami mempunyai addendum pemprosesan data dengan rakan kongsi dipercayai kami yang dimasukkan dalam perjanjian perkhidmatan kami dengan rakan pemprosesan dan penyimpanan data kami. Sokongan, pembangun dan ahli pasukan kami yang lain terletak di pelbagai bahagian dunia, dan mereka mungkin mempunyai akses kepada Data Peribadi dari luar tempat tinggal Pelanggan untuk menyediakan sokongan tepat pada masanya bagi menyelenggara Produk dan Perkhidmatan kami secara berterusan.

Dengan menggunakan Produk dan Perkhidmatan, anda bersetuju bahawa Data Peribadi boleh diproses oleh subkontraktor sedemikian di negara yang mungkin tidak menawarkan tahap perlindungan data yang sama seperti negara tempat tinggal Pelanggan. Walau bagaimanapun, kami hanya akan memindahkan Data Peribadi selaras dengan Undang-Undang Yang Terpakai.

Kami telah mengambil langkah kontraktual yang munasabah untuk memastikan subkontraktor kami memproses Data Peribadi mengikut arahan kami dan untuk tujuan kami seperti yang ditetapkan dalam Dasar ini. Subkontraktor kami dilarang menggunakan Data Peribadi untuk sebarang tujuan lain tanpa persetujuan Subjek Data.

H. KESELAMATAN DATA PERIBADI

Kami mengambil pelbagai langkah untuk mengamankan Data Peribadi. Kami menggunakan sarana organisasi dan teknikal yang sesuai untuk melindungi Data Peribadi daripada sebarang kehilangan, pemusnahan, pengubahan, atau penggunaan Data Peribadi yang tidak dibenarkan, menyalahi undang-undang atau bersifat menyalahgunakan. Kami meletakkan kewajipan yang sama ke atas subkontraktor kami yang memproses Data Peribadi untuk tujuan kami dan atas arahan kami.

Data Peribadi diensampelkan (di-encrypt) dalam pangkalan data semasa berehat dan semasa transit. Kami mengehadkan secara ketat skop kakitangan yang boleh mengakses Data Peribadi dan maklumat, dan menghendaki mereka mematuhi kewajipan kerahsiaan kontraktual mereka. Sekiranya berlaku pelanggaran data atau insiden keselamatan Data Peribadi yang lain, kami akan mengaktifkan pelan tindak balas kecemasan untuk mencegah perluasan insiden keselamatan tersebut dan memaklumkan anda serta pihak berkuasa berkaitan selaras dengan Undang-Undang Yang Terpakai.

Sejauh yang dibenarkan oleh Undang-Undang Yang Terpakai, kami tidak akan bertanggungjawab atas sebarang kerugian, kerosakan, atau kos langsung atau tidak langsung yang dialami atau ditanggung oleh Subjek Data sekiranya berlaku pelanggaran data, atau jika Data Peribadi tertakluk kepada penggunaan, akses, pemadaman, atau pengubahan yang tidak dibenarkan.

I. HAK SUBJEK DATA

Pelanggan menikmati hak-hak berikut di bawah Dasar ini:

  1. Hak untuk dimaklumkan
    Dasar ini menggariskan jenis maklumat yang kami kumpul, tujuan pemprosesan Data Peribadi dan asas undang-undang untuk berbuat demikian serta pemindahan, penyimpanan dan pengendalian Data Peribadi anda oleh kami. Menurut Seksyen 7(3) APDP 2010 Malaysia, Dasar ini disediakan dalam Bahasa Inggeris dan Bahasa Malaysia.
  2. Hak untuk mengakses
    Pelanggan berhak mengakses Data Peribadi yang berada dalam pegangan atau di bawah kawalan kami. Hak untuk mengakses merangkumi hak untuk mengetahui bagaimana kami menggunakan Data Peribadi dalam amalan dan dengan siapa kami berkongsi maklumat tersebut.
  3. Hak untuk pembetulan
    Pelanggan boleh menghubungi kami untuk membetulkan mana-mana Data Peribadi yang berada dalam pegangan atau di bawah kawalan kami.
  4. Hak untuk pemadaman dan hak untuk mengehadkan pemprosesan kepada penyimpanan
    Pelanggan boleh meminta kami memadamkan Data Peribadi atau mengehadkan pemprosesan Data Peribadi di mana tiada alasan yang sah untuk sebarang pemprosesan berterusan. Walau bagaimanapun, hak untuk pemadaman tertakluk kepada hak sah kami di bawah Undang-Undang Yang Terpakai untuk mengekalkan Data Peribadi bagi tujuan sah kami, seperti penguatkuasaan hak undang-undang kami. Jika Pelanggan menghendaki kami mengehadkan pemprosesan Data Peribadi selain daripada tujuan penyimpanan, kami boleh menggunakan Data Peribadi tersebut semula jika terdapat alasan yang sah di bawah Undang-Undang Yang Terpakai bagi kami berbuat demikian.
  5. Hak untuk kebolehalihan data
    Pelanggan berhak menerima salinan Data Peribadi yang kami proses. Pelanggan boleh meminta kami memindahkannya kepada pihak lain, kecuali dalam keadaan tertentu selaras dengan Undang-Undang Yang Terpakai.
  6. Hak untuk membantah
    Pelanggan berhak membantah pemprosesan atau penggunaan Data Peribadi kami pada bila-bila masa. Khususnya, Subjek Data boleh membantah penggunaan Data Peribadi kami untuk tujuan pemasaran langsung.
  7. Hak untuk dimaklumkan tentang pelanggaran
    Kami hendaklah memaklumkan Pelanggan dan mana-mana badan kawal selia yang terpakai secara bertulis sekiranya berlaku pelanggaran Data Peribadi yang disyaki atau sebenar selaras dengan kewajipan statutori.

 

Untuk menjalankan hak anda, anda boleh berbuat demikian dengan menghantar e-mel ke privacy@omnichat.ai.

J. KANAK-KANAK

Produk dan Perkhidmatan kami tidak ditujukan kepada orang di bawah umur 18 tahun (“Kanak-kanak”). Kami tidak dengan sengaja mengumpul, meminta, memasarkan atau memproses Data Peribadi milik Kanak-kanak.

K. PEMPROSESAN UNTUK PELANGGAN

Anda mengakui dan memahami bahawa sesetengah Pelanggan kami akan secara berkerap mendedahkan kepada kami Data Peribadi yang dikumpul oleh Pelanggan tersebut dalam perjalanan mengakses dan menggunakan Produk dan Perkhidmatan kami. Mana-mana yang berkenaan, Pelanggan bersetuju untuk memberikan kami hak bukan eksklusif untuk memproses Data Peribadi tersebut sebagai pemproses data semata-mata untuk menyediakan Produk dan Perkhidmatan kami.

Dalam senario di mana kami memproses Data Peribadi sebagai pemproses data untuk tujuan Pelanggan kami, kami hendaklah:

  1. memproses, mengguna atau mendedahkan Data Peribadi mengikut keperluan untuk pelaksanaan kewajipan kontrak kami kepada Pelanggan kami atau sebaliknya di bawah persetujuan Pelanggan;
  2. tidak membuat penggunaan bebas terhadap data tersebut sama sekali untuk tujuannya sendiri;
  3. bertindak pada setiap masa hanya mengikut arahan dan keperluan Pelanggan berkenaan dengan Data Peribadi tersebut;
  4. memastikan bahawa kami mempunyai langkah-langkah teknikal dan organisasi yang munasabah dan sesuai untuk melindungi daripada pemprosesan Data Peribadi yang tidak dibenarkan atau menyalahi undang-undang dan daripada kehilangan atau pemusnahan yang tidak disengajakan, atau kerosakan kepada Data Peribadi;
  5. memastikan bahawa semua kakitangan yang mempunyai akses kepada dan/atau memproses Data Peribadi diwajibkan untuk menjaga kerahsiaan data tersebut;
  6. memaklumkan Pelanggan tanpa kelengahan yang tidak munasabah apabila menyedari pelanggaran data peribadi yang menjejaskan Data Peribadi;
  7. atas arahan bertulis Pelanggan, memadamkan atau mengembalikan Data Peribadi dan salinannya kepada Pelanggan; dan
  8. menyelenggara rekod dan maklumat yang lengkap dan tepat untuk menunjukkan kelakuan mematuhi klausa ini.

L. PAUTAN PIHAK KETIGA

Produk dan Perkhidmatan kami mungkin merangkumi pautan ke laman web pihak ketiga yang tidak ditadbir oleh Dasar ini. Kami tidak mengumpul atau mengakses data yang mungkin telah dikumpul oleh pihak ketiga ini atas budi bicara mereka.

Penyerapan pautan pihak ketiga tidak bermakna kami meluluskan, memberi kuasa atau sebaliknya bergabung dengan laman web yang disambungkan oleh pautan tersebut. Pelanggan dinasihatkan untuk menyemak notis privasi laman web pihak ketiga tersebut sebelum memberikan sebarang Data Peribadi kepada laman web tersebut atau menggunakan perkhidmatan laman web tersebut.

Kami tidak bertanggungjawab atas penggunaan Data Peribadi oleh pihak ketiga tersebut dan kami tidak dapat menjamin bahawa mereka mempunyai tahap dasar perlindungan data yang sama seperti kami.

M. SYARAT PENGGUNAAN PRODUK DAN PERKHIDMATAN KAMI

Terma Dasar ini dimasukkan ke dalam Terma Penggunaan kami yang boleh dirujuk oleh Subjek Data di pautan berikut: https://www.omnichat.ai/terms.

N. PERUBAHAN KEPADA DASAR

Kami berhak untuk mengubah Dasar pada bila-bila masa. Jika kami mengubah Dasar, kami akan menyampaikan perubahan tersebut kepada anda melalui pemberitahuan atau amaran yang disediakan kepada anda di bawah Produk dan Perkhidmatan, atau mana-mana sarana lain yang sesuai, contohnya melalui e-mel, supaya Pelanggan akan dimaklumkan sepenuhnya tentang perubahan tersebut. Sebarang perubahan kepada Dasar akan berkuat kuasa tiga puluh (30) hari selepas perubahan tersebut disampaikan kepada anda. Penggunaan berterusan anda terhadap Produk dan Perkhidmatan kami akan dianggap sebagai penerimaan terhadap perubahan kepada Dasar tersebut.

O. PEMUTUSAN (SEVERANCE)

Jika mana-mana bahagian atau peruntukan Dasar ini dilarang atau dianggap tidak sah atau tidak boleh dikuatkuasakan, bahagian atau peruntukan tersebut tidak akan berkuat kuasa sejauh larangan atau ketidakbolehkuatkuasaan tersebut tanpa membatalkan peruntukan selebihnya di sini.

P. UNDANG-UNDANG YANG MENTADBIR

Dasar ini hendaklah ditadbir oleh, dan ditafsirkan mengikut, undang-undang Malaysia. Sebarang pertikaian, kontroversi, perbezaan atau tuntutan yang timbul daripada atau berkaitan dengan Dasar ini, termasuk kewujudan, kesahihan, tafsiran, pelaksanaan, pelanggaran atau penamatannya atau sebarang pertikaian mengenai kewajipan bukan kontrak yang timbul daripada atau berkaitan dengannya hendaklah dirujuk kepada dan akhirnya diselesaikan secara timbang tara yang ditadbir oleh Pusat Arbitrasi Antarabangsa Asia (“AIAC”) di bawah Peraturan Arbitrasi AIAC yang berkuat kuasa apabila Notis Arbitrasi diserahkan. Tempat kedudukan timbang tara ialah Kuala Lumpur, Malaysia. Klausa timbang tara ini hendaklah ditadbir oleh undang-undang Malaysia. Bilangan arbiter ialah satu. Prosiding timbang tara hendaklah dijalankan dalam Bahasa Inggeris.

Q. BERHUBUNG DENGAN KAMI

Jika anda mempunyai sebarang soalan atau kebimbangan mengenai Dasar ini atau untuk menjalankan hak anda di bawah Dasar ini, sila hubungi Pegawai Perlindungan Data kami:

Nama: Pak Hui

Alamat: Unit 2201, 22/F, Exchange Tower, 33 Wang Chiu Rd, Kowloon Bay, Hong Kong

Alamat E-mel: privacy@omnichat.ai

Nombor Telefon: +852 28899282

Book a Demo

Please fill in the form below and we will be in touch shortly.
1-on-1 consultation
Tailor-made solutions
Successful use cases
*By submitting the form, I agree to receive marketing communications and other promotional offers from Omnichat.
Success
Thanks for filling out your information, and we will get in touch soon!