Privacy Policy

We do not transact through the App or Site directly with anyone we know to be under the age of 18. If you are under the age of 18, you should use the App or Site only with involvement of a parent or guardian and should not submit any Personal Data to us. By providing any Personal Data to us, you declare that you are over the age of 18.

In order to use certain functionalities of the I-Ruma Product, you will have to create a user account which requires you submit certain Personal Data.

When you register and create an account, we require you to provide us with your name, conatct number and/or email address as well as a user name that you select. We also ask for certain information about yourself such as contact number, email address, shipping address, photo identification, bank account details, age, date of birth, gender, and interests.

Upon activating an account, you will select a user name and password. Your user name and password will be used so you can securely access and maintain your account.

As with most websites, your computer sends information which may include Personal Data about you that gets logged by a web server when you browse our Site.

This typically includes Protocol ("IP") address, operating system, browser name/version, the referring website, requetsed page, date/time, and sometimes a cookie which can be disable using your browser preferences, to help the Site remember your last visit.

If you are logged in, this information is associated with your personal account. The information is also include in anonymous statistics to allow us to understand how visitors use our Site.

We will/may collect, use, disclose and/or process your Personal Data for one or more of the following purposes:

• Administering, facilitating, processing and/or dealing in any matters relating to your use or access of the App or Site
• Monitoring, processing and/or tracking your use of the App or Site in order to provide you with a seamless experience, facilitating or administering your use of App or Site, and/or to assist us in improving your experience in using the App or Site
• Scanning or be scanned on a unique QR code made available at the entrance of the premises to facilitate effective registration process and contact- tracing of visitors
• Managing, operating, administering and providing you with as well as to facilitate the provision of our services, including, without limization, remembering your preferences
• Tailoring your experience by displaying content according to your interest and preferences
• Assessing and processing your request for the purchase of and/or subscription to our products and/or services
• Registering you as a user of I-Ruma Product and/or to deal with, process and/or administer the account that you may open with us, inclucing to faciities your transactions or activites on the App or Site; or your transactions or activities with us
• Administering and managing your relationship with us, including processing applications, orders, payments, and providing requested products or services. If you send purchases to a third party, you consent to us sharing your identifying details (e.g., name) with them. Delivery may also require disclosing certain personal data (such as name and contact details) on parcels or related documents, which may be visible to others.
• Carrying out your instruction or responding to any enquiry given by (or purported to be given by) you or on your behalf including responding to your customer service enquiries and complaints; or responding to or dealing with your interactions with us
• Contacting you via phone, text, email, or mail to manage your account, use of the App or Site, relationship with us, and any transactions. This may involve sending correspondence or notices that include certain personal data on delivery materials, which could be visible on envelopes or packages.
• To prevent or investigate any fraud, unlawful activity or omission or misconduct, whether or not there is any suspicion of the aforementioned; dealing with and/or investigating complaints
• Complying with or as required by any applicable law, governmental or regulatory requirements of any relevant jurisdiction, including, without limitation, meeting the requirements to make disclosure under the requirements of any law binding on RED IDEAS or on its related corporations or affiliates
• Conducting research (e.g., surveys, analytics, and profiling) to improve our services and better understand your preferences. This may include contacting you via email or mail for surveys or interviews.
• Storing, hosting, and backing up (whether for disaster recovery or otherwise) of your Personal Data
• For marketing purposes, we may send you promotional information about products, services, or events (including those of third parties) via email, push notifications, in-app messages, or other technologies (e.g., geo-location), in compliance with the PDPA.
• To implement and maintain information technology systems, including to store and process Personal Data in computer database and servers
• To produce statistics and research for internal and statutory reporting and/or record-keeping requirements

(The purpose set out above shall be collectively referred to as the "Purposes")

The Purposes for which we will/may collect, use disclose or process your Personal Data depend on the circumstances. In the event such purpose does not appear above, we will notify you of such other purpose at the time of obtaining your consent, unless processing of the applicable data without your consent is permitted bt the PDPA.

In conducting our business, we may/will need to disclose your Personal Data to third parties, whether located within or outside Malaysia, for one or more of the above Purposes. In this regard, you hereby acknowledge, agree and consent that we are permitted to disclose your Personal Data to such third parties for one or more of the above Purposes and for the said third parties to subsequently collect, use, disclose and/or process your Personal Data.

Without limiting the generality of the foregoing, such third parties include:

• Our related corporations and affiliates either in Malaysia or overseas
• Any of our agents, contractors or third-party service providers, including but not limited to those which provide administrative or other services to us such as mailing houses, telecommunication companies, logistics companies, information technology companies and data centres
• Our business partners
• Any other person to whom such disclosure is required by law or regulary requirement or pursuant to a court order.

In the event we need to provide our service providers with the information they need to perform their services and work with them, we shall require our service providers to adhere to strict privacy guidelines and not to use your Personal Data for unauthorised purposes.

For the avoidance of doubt, in the event that PDPA or other applicable laws permit an organisation such as us to collect, use or disclose your Personal Data without your consent, such permission granted by the laws shall continue to apply.

Third parties may unlawfully intercept or access Personal Data transmitted to or contained on the App or Site, technologies may malfunction, or might be accessed, abused or misused information through no fault of ours. We will nevertheless deploy reasonable security arrangements to protect Personal Data as required by the PDPA.

Should you provide us with Personal Data individual other than yourself, you represent, warrant and hereby confirm that:

• Prior to disclosing such Personal Data to us, you would have and had obtained consent from the individual whose Personal Data are being disclosed to us, to permit you to disclose the individual's Personal Data for the Purposes; and permit us to collect, use, diclose and/or process the individual's Personal Data
• Any Personal Data of individual that you disclosed to us is accurate
• You are validly acting on behalf of such individual and that you have the authority to provide their Personal Data to us

We endeavour to take all reasonable steps to ensure your Personal Data is kept confidential and secure, and to take appropriate technical and organizational measures to prevent unlawful or accidental destruction, accidental loss, unauthorized disclosure or access or other unlawful forms of processing. We will not rent, trade, distribute or sell any Personal Data that you give us to any thrid-party unless we receive your prior consent or applicable law permits the same. However, your Personal Data is accessible by a limited number of employees who have special access rights to such systems

Your Personal Data is contained behind secured networks and appropriate security arrangments will be taken to prevent any unauthorized access, collection, use, disclosure, copying, modification, leakage, loss, damage and/or alteration of your Personal Data. However, we cannot assume responsibility for any unauthorized use of your Personal Data by third parties which are wholly attributable to factors beyond our control

For your convenience, the App includes functionality allowing you to remain logged in to the App so that you do not have to re-enter your password each time you access the App. If you choose to remain logged in, you should be aware that anyone with access to your mobile device will be able to access and make changes to your account. You agree that we will not be responsible for any unauthorized transactions or activities with us using your App account as we logically are only in a position to assume that any user of your App account is you.

We will retain Personal Data in accordance with the PDPA and/or other applicable laws. We will destroy or anonymize Personal Data as soon as it is reasonable to assume that:

• The purpose for which that Personal Data was collected is no longer being served by the retention of such Personal Data
• Retention is no longer necessary for any legal or business purposes. If you cease using the App or Site, or your permission to use the App, Site and/or the storing, using and/or disclosing your Personal Data in accordance with this Privacy Policy and our obligations under the PDPA.

Subject to applicable law, we may securely dispose of your Personal Data without prior notice with you.

If you have an account with us, you may personally access and/or correct your Personal Data currently in our possession or contol through the Account Settings page on the App or Site. If you do not have an account with us, you may request to access and/or correct your Personal Data currently in our possession or control submitting a written request to us. We will need enough information from you in order to ascertain your identity as well as the nature of your request to enable us to deal with your request. Please submit your written request to hello@i-ruma.com.

For a request to access Personal Data, once we have sufficient information from you to deal with the request, we will seek to provide you with the relevant Personal Data within 14 days. Where we are unable to respond to you within the said 14 days, we will notify you of the soonest possible time within which we can provide you with the information requested. The PDPA exempts certain types of Personal Data from being subject to your access request.

For a request to correct Personal Data, once we have sufficient information from you to deal with the request, we will deal with your request in compliance with the PDPA, including correcting your Personal Data within 14 days. Where we are unable to do so within the said 14 days, we will notify you of the soonest practicable time within which we can make the correction.

We reserve the right to decline the request to correct Personal Data as PDPA exempts certains types of Personal Data from being subject to your correction request and situations when correction need not be made by us despite your request

You may withdraw your consent for the collection, use and/or disclosure of your Personal Data in our possession or under our control by submitting a request to hello@i-ruma.com and we will process in accordance with the PDPA and other applicable laws.

• We will process your request within a reasonable time once we have verified your identity and received your clear withdrawal instructions. Your withdrawal of consent could result in certain legal consequences arising from such withdrawal.
• In the regards, depending on the entext of your Personal Data, it may mean that we may not be able to fulfil the transaction you have entered into with us or continue with your relationship with us, or send you information that you have requested, as examples depending on the cricumstances.

We use a variety of tracking technologies on our Site and App:

• Cookies: We may use cookies to identify you and enhance your experience on the Site. Cookies are small text files stored on your device to support functionality. While security measures are in place, we are not responsible for data breaches beyond our control over the Internet. You may disable cookies in your browser, but this may limit certain features. Where cookies collect personal data, it will be used for stated purposes. By using the Site, you consent to our use of cookies.
• Web Beacons: Web beacons are small graphic images on a website or in an email that can be used for such things as recording the pages and advertisements clicked on by users, or tracking the performance of email marketing campaigns.
• Analytics Tags: We use analytical tags to analyse what you like to do and the effectiveness of our features. They can also help us customize your browsing experience. We may use information collected through analytical tags or tracked links in combination with your Personal Data you provide to us with other Personal Data such as purchase history and demographic information.
• Web Server Logs: Web server logs are records of activity created by the mobile device or computer that delivers the webpages you request to your browser. The Web server log also may record information about your browser, such as your IP address and the cookies set on your browser by the server.
• Geo-Location Technologies: We may use geo-location technology to determine your location, either from information you provide (e.g., postal code) or via your device. You can allow or deny location access when prompted. If enabled, we may use this data to send location-based offers. You can opt out anytime through your device settings.
• QR Codes: QR code consists of black squares arranged in a square grid on a white background which can be read by an imaging device such as a camera. QR code is a machine-readable optical label that contains information about the item to which it is attached. QR codes often contain data for a locator, identifier, or tracker that points to a website or application. Application include product tracking, item identification, time tracking, document management, and general marketing.

Our App and Site contain areas where you can submit information to us such as our registration service; and also features such as cookies and performance tracking technology that automatically collect information from the visitors to our App or Site.

During the registration process, you must provide us with a password, your name, address and a valid email address, etc. It is your responsibility to keep your password strictly confidential.

Our privacy practices will be continuously assessed against new technologies, business practices, and our users' needs. As we update and diversify our services, our Privacy Policy may evolve. We reserve the right to change its Privacy Policy at any time and notify you by posting an updated version of the policy on the App and Site.