? ? 10 Hi A A B B C C D D F F

Privacy Policy

1. Introduction

1. This is the privacy policy (“Privacy Policy”) of Banyan Padu Sdn Bhd and its subsidiaries, affiliates, brands, related and/or associated companies/brands and jointly controlled entities (including all of their shareholder(s), director(s), employee(s), supplier(s), contractor(s) and/ or permitted person(s) (collectively referred to as "instaSpace", “we”, “us” or “our”). instaSpace is committed to respecting and protecting your privacy online. This Privacy Policy explains our practices regarding the collection, use, disclosure, storage, transfer and/or processing of your personal data.

2. This Privacy Policy is incorporated as part of the instaSpace’s Terms of Use. Your access to the Platform and/or use of the Service is subject to the Terms of Use and this Privacy Policy. Unless specifically defined in this Privacy Policy, the defined terms shall have the same meaning as defined in the Terms of Use.

3. To process, administer and/or manage your relationship with us, we will necessarily need to collect, use, disclose, store, transfer and/or process your personal data. This Privacy Policy applies to personal data about you and/or individuals provided by you, possessed by us or that we obtain about you, whether now or in the future. We will only process your personal data in accordance with the prevailing personal data protection and privacy laws of the countries we operate in and this Privacy Policy.

4. If you are a company, an entity or an organisation, references to the term “you” and “your” shall also include your employees, representatives and agents.

5. By accessing, browsing, downloading and/or using our Platform and/or Service, or by dealing with us, you acknowledge that you have read and understood this Privacy Policy and agree to us processing your personal data in accordance with the manner set out in this Privacy Policy, as may be amended from time to time.

6. We may revise or update this Privacy Policy at any time by posting a revised/an updated version on the Platform. Unless stated otherwise, any revision or update takes effect immediately. Your continued access and/or use of our Platform and/or Service or dealing with us after a revision or update to this Privacy Policy constitutes your acknowledgment and binding acceptance of the revised or updated Privacy Policy.

2. Collection of Personal Data

1. The term “personal data” means any information, whether recorded in a material form or not, and with other information, from which a person is identified or identifiable.

2. We may collect the following personal data from you:

  • Identity data, such as your name, nationality, gender, date of birth, biometric data, image;
  • Contact data, such as billing address, delivery address, email address, and phone number(s);
  • Account data, such as bank and credit/debit card details, e-wallets, payment details, financial information and employment information;
  • Transaction data, such as payment manners, details about payments to and from you, and other details of goods, products and/or services you have purchased from or through us;
  • Technical data, such as internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, mobile carrier, URLs, and other technology(ies) on the devices you use to access the Platform and/ or Service;
  • Profile data, such as your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses;
  • Location data, such as GPS coordinates or similar geographical information of your computer or mobile device;
  • Usage data, such as information on how you use the Platform and/or the Services; and/or
  • Marketing and communications data, such as your preferences in receiving marketing from us and our third parties and your communication preferences.

The types of personal data collected depend on the purpose(s) of collection. We may process your personal data by way of collecting, recording, altering, holding, storing, transferring, erasing, correcting, retrieving, destructing, aligning, combining, disclosing and/or deleting it.

3. Your personal data may be collected from you during your course of dealing with us in any way or manner including pursuant to any transactions and/or communications made from/with us. We may also collect your personal data from a variety of sources, including without limitation in the following situations:

  • When you register an account with us;
  • When you submit any forms to us, including (but not limited to) application or registration form, whether online or by way of a physical form;
  • When you enter into any transaction or provide other documentation or information in respect of your arrangement with us;
  • When you use any of the features or functions available on the Platform and/or Services;
  • When you use our or our Merchant’s products, services, publications or marketing collaterals;
  • When you participate in a meeting, event, activity contest, promotional activity, loyalty programme or survey;
  • When you follow, like or are a fan of instaSpace’s social media pages; and/or
  • Other publicly available sources and directories.

4. In addition, we may also receive, store and process your personal data which are provided or made available by any third parties whom you have authorised, credit reference/reporting bodies, regulatory and law enforcement authorities, for reasons including delivery of our Service, performance of conditions of agreements and/or to comply with our legal and regulatory obligations.

5. You must only submit personal data which is accurate and not misleading, and you must keep it up to date and inform us of changes. We shall have the right to request for documentation to verify the personal data provided by you as part of our verification processes.

6. If you provide personal data of any third party to us, you represent and warrant that you have duly obtained the necessary consent from that third party to share and transfer his/her personal data to us, and for us to collect, use and disclose that data in accordance with this Privacy Policy.

3. Purpose of Acquiring and Processing Your Data

1. The personal data as provided/furnished by you to us or collected by us from you or through such other sources as may be necessary for the fulfilment of the purposes at the time it was sought or collected, may be processed for the following purposes (collectively referred to as the “Purposes”):

Where you are a User:

  • to register and administer your user Account with us;
  • to process, manage or verify your identity;
  • to provide, maintain and improve the Platform and/or Service to you;
  • to respond to, process, deal with, fulfil, validate and/or or complete your orders/purchases/transactions and notify you of any service issues and unusual account actions;
  • to verify and carry out financial transactions in relation to payments you make online/offline;
  • to process payment from you, including authorising and processing online banking, credit/debit card transactions and sending receipts to you;
  • to deal with or facilitate customer service, carry out your instructions, deal with or respond to any enquiries, requests or complaints given by (or purported to be given by) you or on your behalf;
  • to contact you or communicate with you for the purposes of administering and/or managing your relationship with us or your use of our Services, such as but not limited to communicating administrative information to you relating to our Services. You acknowledge and agree that such communication by us could be by way of the mailing of correspondence, email, notices, push-notifications or via the communication channel on the Platform to you, which could involve disclosure of certain personal data about you to bring about delivery of the same;
  • to personalise and improve your user experience with the Platform and/or Service;
  • to facilitate your participation in, and our administration of, any of our activities including contests, promotions, campaigns, polls or surveys;
  • to conduct market research or surveys, internal marketing analysis, customer profiling activities, analysis of customer patterns and choices, usage and activity trends analysis in relation to the Platform and/or Service and our users’ demographics (on an anonymised basis);
  • to carry out due diligence or other screening activities (including, without limitation, background checks) in accordance with legal or regulatory obligations or our risk management procedures that may be required by law or that may have been put in place by us;
  • to protect and/or enforce our legal rights and interests, including defending any claim;
  • to comply with our legal and regulatory obligations under the applicable laws, legislation, regulations or court orders;
  • to comply with or as required by any request or direction of any governmental/law enforcement authorities; or responding to requests for information from public agencies, ministries, statutory bodies or other similar authorities;
  • to detect, investigate and prevent any suspicious transaction, fraud, prohibited or illegal activities, omission, misconduct or misuse of the Platform and/or Service, whether relating to your use of our Platform and/or Services or any other matter arising from your relationship with us, and whether or not there is any suspicion of the aforementioned;
  • to transfer or assign our rights, interests and obligations under any agreements entered into with us;
  • for internal administrative and updating purposes, such as auditing, data analysis, record keeping, contact lists, risk management, security, etc; and/or
  • for our storage, hosting back-up (whether for disaster recovery or otherwise) of your personal data, whether within or outside your country,
  • to conduct automated-decision making processes in accordance with any of these purposes; and/or
  • any other purposes which we notify you of at the time of obtaining your consent;
  • and you agree and consent to us using and processing your personal data for the Purposes as identified in this Privacy Policy.

2. Marketing and promotional purposes

We may also use and process your personal data for the following marketing and promotional purposes (“Marketing and Promotional Purposes”):

  • to send you information, alerts, push-notifications, newsletters, updates, promotional materials, special privileges announcements on products, services, upcoming contests, events, activities, promotions, campaigns, polls or surveys offered/organised by us and/or our selected third parties (business/marketing partners, sponsors, advertisers) which may be of interest to you;
  • to send you seasonal/festive greetings or messages;
  • to notify and invite you to events or activities organised by us and/or our selected third parties (business/marketing partners, sponsors, advertisers) which may be of interest to you;
  • to process your registration to participate in or attend an event or activity and to communicate with you regarding your attendance at the event or activity; and/or
  • to share your personal data within our organisation and our selected third parties (business/marketing partners, sponsors, advertisers) who may communicate with you to market their products, services, events or promotions from time to time by SMS, phone call, email, fax, mail, social media and/or any other appropriate communication channels.

You have the right at any time to request us to stop sending you any marketing and promotional materials or contacting you for Marketing and Promotional Purposes. You may also click on the “Unsubscribe” link embedded in the relevant marketing and promotional email in order not to receive any marketing and promotional email in the future. If you unsubscribe, we may still send you non-marketing and promotional communications, such as those about your Account, about the Platform and/or Service, reminders of unutilized promo codes, rebates or our other ongoing business relations.

3. If you are a User, your user profile information such as your username will be used to identify you when you use the Platform and/or Service. Your username may be displayed to other users when you submit your rating and/or review. We will not directly disclose or share your user email address and other information without your consent.

4. We may also use, process and share non-personally identifiable, aggregated, statistical and/or anonymous data with third parties for data analytics and to analyse and develop our marketing strategy and further improve and enhance the Platform and/or Service.

5. You agree and consent to us using and processing your personal data for the Purposes as identified in this Privacy Policy.

6. We will seek your separate consent for any other purposes which do not fall within the categories stated above.

4. Consequences of Not Consenting to This Privacy/not Providing Your Personal Data 

The collection of your personal data by us may be mandatory or voluntary in nature depending on the Purposes for which your personal data is collected. Where it is mandatory for you to provide us with your personal data, and you fail or choose not to provide us with such data, or do not consent to the above or this Privacy Policy, we will not be able to provide our Platform and/or Service to you.

5. Disclosure of Your Personal Data

We will not sell, rent, transfer or disclose any of your personal data to any third party without your consent. However, we may disclose some of your personal data to the following third parties, for one or more of the above Purposes:

  • our subsidiaries, related and/or associated companies;
  • your immediate family members and/or emergency contact person as may be notified to us from time to time;
  • successors in title to us;
  • our Merchants for each item that you may reserve, purchase or subscribe on the Platform and your comments or feedback of such merchant, as if you reserved, purchased, subscribed and gave comments or feedback directly with the Merchant;
  • our selected third parties (business/marketing partners, sponsors, advertisers) who (singly or jointly with us) offer new products or services, promotions or organise contests, events, activities or campaigns;
  • any person under a duty of confidentiality to which has undertaken to keep your personal data confidential which we have engaged to discharge our obligations to you;
  • any party in relation to legal proceedings or prospective legal proceedings;
  • auditors, consultants, lawyers, accountants or other financial or professional advisers appointed in connection with our business on a strictly confidential basis, appointed by us to provide services to us; any party nominated or appointed by us either solely or jointly with other service providers, who provide services or conduct data processing on our behalf, or for data centralization and/or logistics purposes;
  • data centres and/or servers located within or outside your country for data storage purposes;
  • storage facility and records management service providers;
  • government agencies, law enforcement agencies, courts, tribunals, regulatory/professional bodies, industry regulators, ministries, and/or statutory agencies or bodies, offices or municipality in any country, if required or authorised to do so, to satisfy any applicable law, regulation, order or judgment of a court or tribunal or queries from the relevant authorities;
  • credit reference/reporting agencies for the purpose of credit checking on you;
  • our business/marketing partners, third party product and/or service providers, suppliers, vendors, distributors, contractors or agents, on a need to know basis, that provide related products and/or services in connection with our business on our behalf or to assist us with the provision of the Platform and/or Service to you;
  • insurance companies for the purpose of applying and obtaining insurance policy(ies), if necessary;
  • financial institutions for the purpose of applying and obtaining credit facility(ies), if necessary;
  • banks and financial institutions, merchants and credit/debit card companies in connection with your commercial transactions with us;
  • the general public when you become a winner in a contest, participate in our events or activities, submit your rating and/or review or other features of the Platform and/or Service that are viewable by the general public without compensation for advertising and publicity purposes;
  • any third party (and its advisers/representatives) in connection with any proposed or actual reorganization, merger, sale, consolidation, acquisition, joint venture, assignment, transfer, funding exercise or asset/share sale relating to all or any portion of our business or in the unlikely event of insolvency, bankruptcy or receivership; and/or
  • any other person reasonably requiring the same in order for us to operate and maintain our business or carry out the activities set out in the Purposes or as instructed/authorised by you.

6. Accuracy of Your Personal Data

We take it that all personal data provided by you is accurate and complete, and that none of it is misleading or out of date. You will promptly update us in the event of any change to your personal data. Please note that your failure to maintain accurate, complete and up-to-date personal data (including having an invalid or expired payment method) may result in your inability to access and use the Platform and/or Service.

7. Your Rights

1. To the extent that the prevailing personal data protection and privacy laws of the countries we operate in allow, you have the right to request for access to, request for a copy of, request to update or correct, your personal data held by us. We may charge a small fee (such amount as permitted under the applicable law) to cover the administration costs involved in processing your request to access your personal data. Notwithstanding the foregoing, we reserve our rights to rely on any statutory exemptions and/or exceptions to collect, use and disclose your personal data.

2. In addition, you also have the right, by notice in writing, to inform us on your withdrawal (in full or in part) of your consent given previously to us subject to any applicable legal restrictions, contractual conditions and a reasonable duration of time for the withdrawal of consent to be effected. However, your withdrawal of consent could result in certain legal consequences arising from such withdrawal. In this regard, depending on the extent of your withdrawal of consent for us to process your personal data, it may mean that we will not be able to continue with your existing relationship with us or the contract that you have with us will have to be terminated.

You may correct, update or delete your personal data at any time by editing your profile on the Platform. However, please note that your personal data may be retained on our back-up systems for some time. In addition, you cannot delete information associated with past transactions as we keep track of these records.

8. Retention of Your Personal Data

Any of your personal data provided to us is retained for as long as the purposes for which the personal data was collected continues; your personal data is then destroyed or anonymised from our records and back-up systems in accordance with our retention policy in the event your personal data is no longer required for the said purposes unless its further retention is required to satisfy a longer retention period to meet our operational, legal, regulatory, tax or accounting requirements.

9. Security of Your Personal Data

1. We are committed to ensuring that your personal data is stored securely. In order to prevent unauthorised access, disclosure or other similar risks, we endeavour, where commercially practicable, to implement appropriate technical, physical, electronic and procedural security measures in accordance with the applicable laws and regulations and industry standard to safeguard against and prevent the unauthorised or unlawful processing of your personal data, and the destruction of, or accidental loss, damage to, alteration of, unauthorised disclosure of or access to your personal data.

2. We will make reasonable updates to our security measures from time to time and ensure the authorised third parties only use your personal data for the Purposes set out in this Privacy Policy. Notwithstanding this, we cannot and shall not be held responsible for such third parties actions or inactions in relation to your personal data.

3. The Internet is not a secured medium. However, we will put in place various reasonable security procedures with regard to the Platform and your electronic communications with us. All our employees and data processors, who have access to, and are associated with the processing of your personal data, are obliged to respect the confidentiality of your personal data.

4. Unfortunately, no data transmission over the Internet or any wireless network can be guaranteed to be 100% secured. While we take commercially practical steps to protect your personal data, we cannot and do not accept responsibility for any unauthorised access, unlawful interceptions or loss of personal data transmitted to or from instaSpace and are not responsible for the actions of any third parties that may receive any such personal data.

10. Personal Data From Children and Other Individuals 

1. To the extent that you have provided (or will provide) personal data about your family members, spouse, other dependents (if you are an individual), directors, shareholders, employees, representatives, agents (if you are a corporate, an entity or an organisation) and/or other individuals, you confirm that you have explained to them that their personal data will be provided to, and processed by, us and you represent and warrant that you have obtained their consent to the processing (including disclosure and transfer) of their personal data in accordance with this Privacy Policy.

2. In respect of children (i.e. individuals under the age of 18 or the legal age for giving consent pursuant to the applicable laws in your country) or individuals not legally competent to give consent, you confirm that you are the parent or legal guardian or person who has parental responsibility over them or the person appointed by court to manage their affairs or that they have appointed you to act for them, to consent on their behalf to the processing (including disclosure and transfer) of their personal data in accordance with this Privacy Policy.

11. Transfer of Your Personal Data Outside of Your Country 

Our information technology storage facilities and servers may be located in other countries outside of your country. This may include, but not limited to, instances where your personal data may be stored on servers located outside of your country. In addition, your personal data may be disclosed or transferred to entities located outside your country. Please note that these foreign entities may be established in countries that might not offer a level of data protection that is equivalent to that offered in your country under the applicable laws in your country. You hereby expressly consent to us transferring your personal data outside of your country for such purpose.

12. Internet and Mobile Application Use

1. You acknowledge that the provision of your personal data to us over the Internet is entirely at your own risk.

2. You further acknowledge that if you post your rating and/or review on the Platform, your rating and/or review will become a public information and will be retained by us even after your account has been terminated. Your email address and phone number will not be visible to others through any rating and/or review that you post.

3. If any part of the Platform links you to other websites, those websites do not operate under this Privacy Policy and we do not accept any responsibility or liability arising from those websites. We suggest you to read and understand those websites’ privacy policy before you provide your personal data to those websites.

4. We use cookies (an alphanumeric identifier that we transfer to your computer’s or mobile device’s hard drive so that we can recognise your web browser or mobile device, track your visits to the Platform or remember your username and/or password each time log-in) to monitor your use of the Platform. All such demographic data collected through cookies are not personal data and we may use this data in aggregated, statistical and/or anonymised form. You may disable cookies by changing the settings on your web browser or mobile device, although this may mean that certain features on the Platform will not function properly if you set your web browser or mobile device to not accept cookies.

5. In addition to using cookies and related technologies as described above, we may also permit certain third party companies to help us tailor advertising that we think may be of interest to users and use other data about user activities on our Platform and/or Service (e.g., to allow them to tailor ads on third party services). These companies may deliver ads that might also place cookies and otherwise track user behaviour.

6. The Platform may integrate with social sharing features and other related tools which allow you to share information with your friends or the public, depending on the settings you establish with the social sharing network. The social sharing network’s use of your personal data made available by instaSpace is governed by that social sharing network’s privacy policy, not by this Privacy Policy. By connecting your social sharing network account through the Platform, you agree that we may collect your personal data from your social sharing network account only in accordance with your privacy settings you have set up under your social sharing network account and for the Purposes provided under this Privacy Policy.

7. We may automatically receive, record and store location services information from your computer or mobile device when you interact with us. You hereby consent to our use of anonymised location services information collected from you. Where the location services information is personally identifiable, we will give you the options to manage your disclosure of this information. Depending on the functionalities available on your computer or mobile device, you may benefit from advanced options to manage the location services information. A computer or mobile device may report its GPS location at the time you interact with us if the location services settings are enabled. Such information is not identified as personal data, except where we are required to do otherwise under applicable law.

8. Our collection of your computer or mobile device location information is solely at your discretion. You can enable or disable location services when you use the Platform at any time, through your computer or mobile device settings. Should you use the Platform with location services enabled, you consent to our collection and dissemination of your computer or mobile device location information through the Platform, as specified in this Privacy Policy. Under no circumstances shall we be liable for claims or for any damages therefrom, arising out of your informed decision to allow other users to see your computer or mobile device location information, as specified in this Privacy Policy.

13. English Version to Prevail

In the event of any inconsistencies or discrepancies between the English version and other translated versions of this Privacy Policy, the English version shall prevail.

14. Contact Details

If you have any questions about this Privacy Policy, or have any further queries, or would like to make a complaint or data access, correction or limitation request in respect of your personal data, you may do so by contacting us at [email protected] or via the communication channel on the Platform.