Privacy Policy
We, CT Hardware Sdn Bhd, are committed to protecting the privacy and security of your personal information, in accordance with the applicable data protection laws in Malaysia. This privacy policy, together with our cookies policy, explains how we use any information we collect about you and forms part of our terms of business.
This privacy policy applies to personal information about:
• visitors to our website;
• customers who purchase goods or services or create an account with us; and
• our suppliers.
If you have any questions at all about this policy or the Website, or about how we use and process your personal information, please do not hesitate to contact us by e-mail at info@cthardware.com or, alternatively, in writing to No.1, Jalan SS 2/3, Petaling Jaya 47300 Selangor.
WHAT INFORMATION DO WE COLLECT?
When you place an order (in-store, online or via our contact centre) we gather a selection of personal data. Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
These types of data include:
Identity Data:
Includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender.
Contact Data:
Billing address, delivery address, email address and telephone numbers.
Financial Data:
Bank account or payment card details.
Transaction Data:
Details about payments to and from you and other details of products and services you have purchased from us.
Technical Data:
Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
Profile Data:
Includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
Usage Data:
Information about how you use our website, products and services.
Marketing and Communications Data:
Your preferences in receiving marketing from us and your communication preferences.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
External Links:
Our site may, from time to time, contain links to and from other websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
HOW WE COLLECT YOUR DATA?
We collect different information about you in a number of ways:
Information you give us
When you create an account, make a purchase, sign up to our newsletter, register for an event, request marketing materials or give us feedback, we will store the personal information you give us such as your name, email address, postal address, telephone number and card details (encrypted in the form of an authorisation token). We will also keep a record of your purchases and any communications you have with us.
Automated technologies or interactions
As you interact with our website, we may automatically collect Technical Data about your equipment and Usage Data regarding your browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. For more information on cookies, please see our Cookie Policy.
Information from third parties
We do not seek to obtain, have never and will never purchase personal information about you from third parties.
However we do use Aggregated Data sources from third parties to improve the systems, services and products we provide to you and generally make informed business decisions as set out below:
• Analytics information from providers such as Google
• Advertising network performance such as Facebook and Google AdWords
• Search information providers such as Google
This third party Aggregated Data often relies on your use of cookies. For more information on cookies, please see our Cookie Policy.
In some specific situations such as fraud prevention, we may seek to access and use information about you that is placed in the public domain.
WHAT WE DO WITH YOUR INFORMATION?
In general you can visit our website without telling us who you are and without revealing any information about yourself. If, however, you decide to register with us, you will be asked to provide some personal information such as your contact details. We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
• Internal record keeping.
• We may use the information to improve our products and services.
• We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided.
• From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail. We may use the information to customise the website according to your interests.
We will only ever use your data to provide you with a service. Any circumstances where we are sharing your data with third party processors (e.g a courier company) these parties are only processing your data in a way which allows us (CTH) to give you a better shopping experience. These third parties are not able to store or use your data for their own purposes.
We may need to disclose your personal data where we are under a legal duty to comply with any legal obligation or in order to enforce or apply our Terms and Conditions and other agreements. We may also need to disclose it to protect our rights, property or safety of our customers or others which includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
We have set out in the following table all the ways in which we use your personal information. We will only use your information when the law allows us to, and the legal bases on which we rely upon to do so are also included in the table. In some instances, depending on the specific purpose for which we are using your data, there may be more than one lawful ground for processing your information.
Purpose / Activity |
Type of Data |
Lawful basis for processing including basis of legitimate interest |
To register you as a new customer |
• Identity |
• Contractual obligation |
When you make an online purchase when logged in to your account |
• Identity |
• Contractual obligation |
When you make an online purchase and check out as a guest (only transactional) |
• Identity |
• Contractual obligation |
When you make a purchase in store or by telephone |
• Identity |
• Contractual obligation |
When you contact us by any means with queries, complaints etc |
• Identity |
• Contractual obligation |
When you ask us to email you about a product or service e.g. you ask for a product manual |
• Identity |
• Contractual obligation |
When you live chat with us |
• Identity |
• Contractual obligation |
When you request to join our Email Club mailing list |
• Identity |
• Consent |
When you request a 'back in stock' email notification |
• Identity |
• Contractual obligation |
When you engage with us on social media |
• Identity |
• Contractual obligation |
When you enter prize draws or competitions |
• Identity |
• Consent |
When you choose to complete any surveys we send you |
• Identity |
• Consent |
When you comment on or review our products, content and services |
• Identity |
• Consent |
When you book any kind of appointment with us or book to attend an event e.g. outdoor service and or roadshow event |
• Identity |
• Contractual obligation |
When you fill in any forms e.g. a member application |
• Identity |
• Contractual obligation |
When you’ve given a third party permission to share with us the information they hold about you |
• Identity |
• Consent |
When you use our shops, visit our premises or attend an event, we may record your image on CCTV systems operated for security or you may feature in photography taken that is then used for marketing purposes |
• Identity |
• Legitimate compliance |
To make suggestions and recommendations to you about goods or services that may be of interest to you |
• Identity |
• Legitimate interests |
When you browse our website we may record data analytics to improve our products/services and marketing/communications with you |
• Identity |
• Legitimate interests |
To deliver relevant website content/advertisements and measure/understand the effectiveness of the advertising we serve to you |
• Identity |
• Legitimate interests |
To administer and protect our business and this website (including troubleshooting, data analysis, logging, testing, maintenance, support, reporting and hosting of data) |
• Identity |
• Legitimate interests |
We may collect data from publicly accessible sources (such as government agencies) where you have given consent to share information or it is made public by law |
• Identity |
• Contractual obligation |
HOW WE PROTECT YOUR INFORMATION?
We understand how important data security is to you and therefore take all appropriate steps to safeguard the collection, transmission and storage of the data we collect. We use appropriate measures to protect the information that you give to us through our website and the information we collect and store about our customers.
All areas of our website are protected with secure connections over “https” technology. This is a standard technology which provides a secure connection between internet browsers and websites, allowing you to transmit private data online. Firewalls are used to block unauthorised access to our servers, which are themselves based in a secure location. Within our organisation, we restrict access to personal information. Only employees who need the information to do their jobs have access to it.
Unfortunately, the transmission of information via the internet is not completely secure and we cannot guarantee the security of information you submit via our website. However, once we have received your information, we will take appropriate technical and organisational measures to protect your personal information against loss, theft and unauthorised use, access or modification.
If you have created an account or registered to use any online services, your account details may be password protected. It is your responsibility to keep your password confidential and to sign out once you have finished browsing. We ask you not to share a password with anyone. We also recommend that you avoid using the same password for different online accounts. These passwords are encrypted and not visible by us
HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?
When we collect or process your personal information we will only keep it for as long as it is necessary to provide our services to you and to comply with our legal and contractual obligations.
The period for which we keep your personal information will be determined by a number of criteria, including the purposes for which we are using the information, the amount and sensitivity of the information, the potential risk from any unauthorised use or disclosure of the information, and our legal and regulatory obligations.
At the end of that retention period, your data will be either deleted or anonymised. In the latter scenario the data will be used in a non-identifiable way for statistical and business planning purposes.
Example retention periods
For purposes such as tax, accounting and warranty we will keep a record of all orders placed with us for the legally required duration of seven years.
WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?
We may share your personal information with the following third parties for the purposes described below:
• Tax, customs and excise authorities
• Regulators, courts and the police
• Fraud-screening agencies
• Central and local government
• Insurance companies
• Other professional advisors
• Other service providers (couriers, IT systems, website management, marketing agency, etc)
We may also share your personal information if we believe this necessary to enforce or apply our terms and conditions or to protect and defend our rights, property or the safety of our customers and other users of the website.
We may reveal and/or transfer your personal information to others in connection with a reorganisation of all or part of our business, if the majority of our shares are bought by another company or if we transfer all or some of our assets to another company.
LINKS TO OTHER WEBSITES
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this Privacy Policy. You should exercise caution and look at the privacy statement applicable to the website in question.
YOUR RIGHTS OVER YOUR PERSONAL DATA
You have the right to ask us to:
• Confirm what personal information we hold about you and provide you with a copy of that data;
• Correct any personal information that is inaccurate;
• Remove your personal information where there is no good reason for us to continue to hold that data;
• Temporarily stop using your information if you are questioning our right to use that data;
• Stop using your personal information unless we can demonstrate a valid reason why we need to continue to hold that data e.g. to support a product warranty;
• Stop using your personal information to send you marketing materials such as our catalogue, marketing email, discounts or vouchers.
• Provide you with the personal information that you have provided to us, in a structured and commonly-used electronic format, or transmit that information directly to another company if that is technically feasible. This applies where we are using your personal information on the basis of your consent or because it is necessary to perform a contract with you (see How do we use your personal information, above).
Our security procedures mean that we may request proof of identity before we are able to disclose your personal information to you or comply with other requests.
We want to make sure that the personal information we hold about you and your preferences as to how we contact you are accurate and up to date. If any of the details are incorrect, please let us know (details below) and we will amend them.
If you have a data subject request or complaint regarding the handling of your data then please email info@cthardware.com
We may update this notice from time to time. The latest version of this notice will be posted on our website.