Personal Data Protection Act 2010 was enacted by the government to regulate the processing of data. ISETAN OF JAPAN SDN BHD (ISETAN) is committed to ensuring that Customer’s privacy is protected in accordance with the relevant laws.

This privacy policy sets out ISETAN’s policy and practices in collecting, using, processing, and disclosing your Personal Data. It also sets out your rights in respect of your Personal Data that is being collected, used, processed, and disclosed by us.

NOTICE UNDER PERSONAL DATA PROTECTION ACT 2010

You are given notice that the Services will only be made available to you subject always to your acceptance and expressly consent to the provisions of this Privacy Policy, and such express acceptance and consent shall be evidenced by your clicking, checking, or indicating accordingly on the relevant consent portion of the registration forms or such other documents as may be furnished by us to you. 

You hereby agree and accept that by submitting an application or registration form, and your use or continued use of the Services, as the case may be, you acknowledge and accept this Privacy Policy, and you authorize and consent to your personal data being processed by us and where required, disclosed to third parties. For the avoidance of doubt, you hereby explicitly consent to us processing your personal data including any sensitive personal data.

1) PERSONAL DATA

Personal Data that we collect includes but is not limited to the following:

Customers:

• Personal data such as name, gender, address, NRIC number/passport number, race, birthdate, marital status, nationality, valid postal address, e-mail address, mobile phone number, credit card number, 3-digit card security code, card expiry date, personal interest, and any other personal information.
• Your image captured by camera or video when you attend promotional or other events held at our premises or organized by us, or captured as part of a promotional contest or other marketing
  activities: and/or
• Information automatically collected when you visit our website such as IP address, web browser, software, transaction information, and other information.

Business Partners (vendors, suppliers, tenants, or service providers):

• Your personal details or your employees such as name, IC number, address, gender, race, telephone number, mobile telephone number, and email address, and other details as necessary for the conduct of the business transaction between you and us:
• When you visit our premises, your image by way of video surveillance in certain parts of our premises is part of our security infrastructure.
• Your image captured by camera or video when you attend promotional or other events held at our premises or organized by us, or captured as part of a promotional contest or other marketing
  activities: and/or
• Information is automatically collected when you visit our website or use the platforms that we
  provide to our business partners for purposes of transaction between us such as IP address and other information.

Certain Personal Data requested by us are mandatory, and you must provide and agree to the processing of such mandatory information by us. Failing to update this information during the relevant time request or upon refusal to disclose it by you may result in us not being able to: 

Customers:

• Conduct or complete the relevant sale and purchase transaction (including online transactions) with you;
• Process or perform your request;
  
• Approve or continue your Isetan Membership;
• Process your application for contest or redemption of complimentary gifts;
• Provide you with information updates, products, or services that you have requested; and/or
• Allow your entry into our premises or events, for security purposes.

Business Partners (vendors, suppliers, tenants, or service providers):

• Conduct or complete the relevant business transaction with you;
• Allow your entry into our premises or events, for security purposes; and/or
• Allow you to use our platforms provided to our business partners.

2) COLLECTION OF PERSONAL DATA

We collect your personal data in the ways set out below:

• We collect your personal data when you voluntarily provide it to us. For example, you may provide your personal data to us when you fill up a registration form with us, fill up surveys or questionnaires, interact on our social media platforms or websites, participate in contests or events organised by us, and use biometric features to identify yourself.
• Your personal data may be collected by us through the normal use or operation of our Services.
• Your personal data may be collected by us through other sources. Such sources including but are not limited to referral programs, publicly available data, when our Users set you as an emergency contact, service providers or partners, insurance and financial service providers, governmental sources of data, and credit reporting agencies.

2.1 Personal Data of Minors

In the event that any personal data of a minor is disclosed to us, you hereby signify your consent to the processing of the minor’s personal data as a parent or legal guardian of the minor and accept and agree to be bound by this Privacy Policy, and take responsibility for the minor’s actions. In the event that you are a minor and intend to provide your personal data to us, you hereby confirm and acknowledge that you have obtained your parent or legal guardian’s consent and permission to be bound by this Privacy Policy.

2.2 Personal Data of Other Individuals

In the event you provide the personal data of other individuals (such as your spouse, family members, or friends) to us, you represent and warrant that you have obtained such individual’s consent for their personal data to be collected, used, processed and disclosed as set out in this Policy. As an example, you may provide personal data of other individuals as your emergency contact.

3) USE OF PERSONAL DATA

We use and process your personal data for the purposes as set out below (“Purposes”). The Purposes including but are not limited to:

• To process the Customer’s registration with ISETAN and to administer the Customer’s account.
• To provide, personalize, maintain, and improve our Services;
• To ensure the safety and security of our Services and all Users;
• For testing, research, analysis, and products or services development;
• To investigate and resolve queries, claims, or disputes, or as allowed or required by applicable law;
• To promote, advertise, or market our products and Services; and
• To contact or communicate with you; and
• For all other purposes incidental and associated with any of the above.

4) DISCLOSURE OF PERSONAL DATA

We need to share personal data with various parties for the Purposes. Such parties including but are not limited to, our subsidiaries, associated companies, jointly controlled entities and affiliates, service providers, business partners, governmental and regulatory authorities, legal advisors, and other Users.

5) RETENTION OF PERSONAL DATA

We will retain your personal data for as long as legally required or for as long as necessary to provide you with any Services or for any of the other purposes listed in this Privacy Policy. We will take reasonable steps to destroy or permanently delete your personal data in our custody if your personal data is no longer needed for the purposes set out above.

6) PROTECTION OF PERSONAL DATA

We value your personal data. We will take reasonable legal, organizational and technical measures to ensure that your personal data is protected against unauthorized access and disclosure. We limit access to your personal data to our employees on a need to know basis. We will only process your personal data in an authorised manner and we will treat your personal data with confidentiality. Nevertheless, please understand that the transmission of data and information through the Internet and mobile networks is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through the Internet or mobile network, and therefore, any transmission remains at your risk.

AMENDMENTS AND UPDATES TO THE PRIVACY POLICY 

ISETAN OF JAPAN SDN BHD (ISETAN) reserves the right to revise, update, amend, and change the conditions under this statement on “Privacy and Personal Data Policy” from time to time due to changes in applicable laws and regulations and you shall deemed to have agreed to such revision (s) without objection if you continue to be a subscriber of Isetan Kuala Lumpur Newsletter.

If you wish to make a request for access or correction of your personal data or would like to withdraw your consent in connection with your personal data being processed by us, please contact: 

CRM Department
Suria KLCC, Kuala Lumpur City Centre
50088 Kuala Lumpur

Telephone:
+603 2382 7777
Ext: 2212/2210 / Fax: +603 2382 6666

Working Hours:
9:30 am – 6:00 pm, Monday to Friday (except Public Holiday)

Isetan Customer Service email: customer@isetankl.com.my

We may legally refuse to comply with your request for access or correction to your personal data and if we refuse to comply with such request, we will inform you of our refusal and the reason for our refusal.

The original version of this Privacy Policy is drafted in the English language. In the event of any inconsistency or conflict between the English version and the Bahasa Malaysia version of this Privacy Policy, the English version shall prevail over the Bahasa Malaysia version.

Updated as of October 2023