*Providing the Customer Personal Information to us is voluntary. By providing Personal Information to us, the Customer agree and consent to the terms and conditions of this.

Privacy Policy.

PERSONAL INFORMATION

 Personal Information We May Collect
“Personal Information” is information that identifies the Customer as an individual, such as:

• First Name
• Last Name
• Date of Birth
• Email Address
• Gender
• Ethnicity
• Address
• Telephone number (including home and mobile phone numbers)
• Profile picture (optional)
• Country of residence

In some cases, we may use a third party payment service to process purchases and/or collect donations made through the Sites. In these cases, the Customer Personal Information may be collected by this third party and not by us, and will be subject to the third party’s privacy policy, rather than this Privacy Policy. We have no control over, and not responsible for, third party’s use or disclosure of the Customer Personal Information.

If the Customer submit any Personal Information relating to other people to us or to our service providers in connection with the Sites, the Customer represent that the Customer have the authority to do so and to permit us to use such Personal Information in accordance with this Privacy Policy.

How We May Collect Personal Information
We and our service providers may collect Personal Information in a variety of ways, including: 

• Through the Sites:  We may collect Personal Information through the Sites, e.g., when the Customer sign up for a newsletter, make a purchase or participate in any of our promotions, sweepstakes and contests.
• Offline:  We may collect Personal Information from the Customer offline, such as when the Customer contact customer service. 
• Online tracking:  Because we do not track our Site users over time and across third-party websites, we do not respond to browser do-not-track signals.
• From Other Sources:  We may receive the Customer Personal Information from other sources, such as public databases; joint marketing partners; social media platforms; from people with whom the Customer are friends or otherwise connected on social media platforms, as well as from other third parties.  For example, if the Customer elect to connect the Customer social media account to the Customer Website account, certain Personal Information from the Customer social media account will be shared with us, which may include Personal Information that is part of the Customer profile or the Customer friends’ profiles.
• Mobile usage:  If we are able to identify the Customer as a user of a mobile app, we may, for example, link the Customer activity with Tmall Commerce Sdn Bhd to one of Tmall Commerce Sdn Bhd’s mobile applications. If the Customer have downloaded one or more of our mobile applications, the Customer can opt in to location sharing for additional application capabilities. For example, geo-location will use the Customer device’s latitude and longitude or the Customer device’s location capabilities (e.g. GPS or Wi-Fi) to let the Customer receive information and offers. Or, in-store location through the use of the Customer phone’s Bluetooth signal, LED light chip technologies, or other technologies will permit us to find nearby products for the Customer, get the Customer real-time offers, and more. To learn how to opt out of sharing the Customer location with us, go to the Choices and Access section of this privacy policy.

To the extent permitted by applicable law, the Personal Information the Customer provide through the Sites may be combined with Personal Information and Other Information that the Customer provide to us (via online or offline means), that is publicly available, or that we may otherwise obtain online or offline, including, for example, from providers of demographic and other information, social media platforms and other third parties.

How We May Use and Process Personal Information
To the extent permitted by applicable law, we may collect, use, disclose or otherwise process the Customer Personal Information:

• to respond to the Customer inquiries and fulfill the Customer requests, such as to send the Customer newsletters or to respond to the Customer questions and comments.
• to send administrative information to the Customer, for example, information regarding the Sites and changes to our terms, conditions, and policies.  Because this information may be important to the Customer use of the Sites, the Customer may not opt-out of receiving these communications.
• to complete and fulfill the Customer purchase and/or the Customer donation, for example, to process the Customer payments, have the Customer order delivered to the Customer, communicate with the Customer regarding the Customer purchase and provide the Customer with related customer service.
• to provide the Customer with updates and announcements concerning our products, promotions, marketing activities and programs and to send the Customer invitations to participate in special programs via the Sites.
• to re-contact the Customer if we have not heard from the Customer in a while.
• to send the Customer advertising/promotional material from any of our affiliates, and from our promotional and strategic partners.
• to personalize the Customer experience on the Sites by presenting products and offers tailored to the Customer.
• to process rewards, prizes, and donations, as applicable. 
• to allow the Customer to participate in polls, sweepstakes, instant win promotions, contests and other promotions and to administer these activities.  Some of these activities have additional rules, which could contain additional information about how we use and disclose the Customer Personal Information, so it is important that the Customer read the additional rules carefully.
• to allow the Customer to send messages to a friend through the Sites.  By using this functionality, the Customer are telling us that the Customer are entitled to use and provide us with the Customer friend’s name and email address, phone number, or other contact information. 
• to allow the Customer to contact and be contacted by other users through the Sites, as permitted by the applicable Site.
• to permit the Customer to participate on message boards, chat, profile pages and blogs and other services to which the Customer are able to post information and materials (including our Social Media Pages).  Please note that any information the Customer post or disclose through these services will become public information, and may be available to visitors to the Sites and to the general public. We urge the Customer to be very careful when deciding to disclose the Customer Personal Information, or any other information, on the Sites. Please see the “Choices and Access” section below, to learn how the Customer may request removal of the Customer posts.
• to permit the Customer to participate in social sharing, including live social media feeds. 
• for our business purposes, such as analyzing and managing our businesses, market research, audits, developing new products, enhancing our Sites, improving our services and products, identifying usage trends, determining the effectiveness of our promotional campaigns, tailoring the Sites experience and content based on the Customer past activities on the Sites, and gauging customer satisfaction and providing customer service (including troubleshooting in connection with customer issues). 
• as we believe to be necessary or appropriate: (a) under applicable law, including laws outside the Customer country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities, including public and government authorities outside the Customer country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, the Customer or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

How Personal Information May Be Disclosed
To the extent permitted by applicable law, the Customer Personal Information may be disclosed:

• to our affiliates for the purposes described in this Privacy Policy. Tmall Commerce Sdn Bhd is the party responsible for the management of the jointly-used Personal Information.
• to our third party service providers who provide services but not limited to, such as delivery, Payment Gateway, website hosting, data analysis, payment processing, order fulfillment, infrastructure provision, IT services, event and promotion management, customer service, email delivery services, credit KK App processing, auditing services and other similar services to enable them to provide services.
• to our third-party strategic partners with whom we may enter into a special relationship.  We will provide the Customer with choices regarding this sharing prior to sharing the Customer Personal Information with a particular strategic partner. Because these third parties will use the Customer Personal Information in accordance with their own privacy practices, the Customer should check their websites for information regarding their privacy practices.
• In connection with promotions, for example, to third parties that are sponsors of sweepstakes, instant win promotions, contests and other promotions, to provide lists of the names and countries of residence of winners and/or to announce the names of visitors on the Sites (e.g., on our blog) or otherwise in accordance with the rules applicable to the applicable promotion. To the extent that the terms and conditions of the rules concerning the treatment of the Customer Personal Information conflict with this Privacy Policy, the terms and conditions of the rules shall control.
• to identify the Customer to anyone to whom the Customer send messages through the Sites.
• by the Customer, on message boards, chat, profile pages and blogs and other services to which the Customer are able to post information and materials (including our Social Media Pages).  Please note that any information the Customer post or disclose through these services will become public information, and may be available to visitors to the Sites and to the general public. We urge the Customer to be very careful when deciding to disclose the Customer Personal Information, or any other information, on the Sites.
• if the Customer participate in social sharing (such as if the Customer connect the Customer social media account to the Customer Site account or log-into the Customer Site account from the Customer social media account), to the Customer friends associated with the Customer social media account, to other users of the Sites and to the Customer social media account provider, in connection with the Customer social sharing activity.  For example, if the Customer register on the Sites using a social media account, we may post a generic registration message on the Customer social media profile, and if the Customer click a social media “like” button on a Site while logged in to the Customer social media account, the Customer actions will be transmitted to the applicable social media provider and may be available on the Customer social media profile.  By connecting the Customer Site account and the Customer social media account, the Customer authorize us to share information with the Customer social media account provider and the Customer understand that the use of the information we share will be governed by the social media site’s privacy policy.  If the Customer do not want the Customer Personal Information shared with other users or with the Customer social media account provider, please do not connect the Customer social media account with the Customer Site account and do not participate in social sharing on the Sites.
• by the Customer, if the Customer participate in a live social media feed (which the Customer may do, for example, by referencing us in the Customer social media post or “liking” us on a social media platform).  If the Customer do participate, the Customer public username and profile photo may be displayed on the Sites along with the Customer post. 
• to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings).
• as we believe to be necessary or appropriate: (a) under applicable law, including laws outside the Customer country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities, including public and government authorities outside the Customer country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, the Customer or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

OTHER INFORMATION

Other Information We May Collect

“Other Information” is any information that does not reveal the Customer specific identity, such as:

• Browser and device information
• Server log file information
• Information collected through cookies, pixel tags and other technologies
• App usage data
• Demographic information and other information provided by the Customer
• Location information
• Aggregated information

We may use and disclose Other Information for any purpose, except where we are required to do otherwise under applicable law.  If we are required to treat Other Information as Personal Information under applicable law, then, in addition to the uses listed in the “How We May Collect Other Information” section below, we may use and disclose Other Information for all the purposes for which we use and disclose Personal Information.

How We May Collect Other Information

We and our third party service providers may collect Other Information in a variety of ways, including: 

• Through the Customer browser or device:  Certain information is collected by most browsers or automatically through the Customer device, such as the Customer Media Access Control (MAC) address, computer type (Windows or Macintosh), screen resolution, operating system name and version, device manufacturer and model, language, Internet browser type and version, service provider, and the name and version of the Sites (such as the App) the Customer are using.  We use this information for statistical purposes as well as to ensure that the Sites function properly.
• Through server log files:  The Customer “IP Address” is a number that is automatically assigned to the computer or device that the Customer are using by the Customer Internet Service Provider (ISP).  An IP Address is identified and logged automatically in our server log files whenever a user visits the Sites, along with the time of the visit and the page(s) that were visited.  Collecting IP Addresses is standard practice on the Internet and is done automatically by many websites.  We use IP Addresses for purposes such as calculating Sites usage levels, helping diagnose server problems, and administering the Sites.  Please note that we treat IP Addresses, server log files and related information as Other Information, except where we are required to do otherwise under applicable law.
• Using cookies:  Cookies allow a web server to transfer data to a computer or device for recordkeeping and other purposes.  We use cookies and other technologies to, among other things, better serve the Customer with more tailored information and facilitate the Customer ongoing access to and use of the Sites.  If the Customer do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows the Customer to decline the use of cookies
• Using Adobe Flash technology (including Flash Local Stored Objects (“Flash LSOs”)) and other similar technologies:  We may use Flash LSOs and other technologies to, among other things, collect and store information about the Customer use of the Sites.  If the Customer do not want Flash LSOs stored on the Customer computer or device, the Customer can adjust the settings of the Customer Flash player to block Flash LSO storage using the tools contained using the Website Storage Settings Panel. The Customer can also control Flash LSOs by going to the Global Storage Settings Panel and following the instructions (which may include instructions that explain, for example, how to delete existing Flash LSOs (referred to “information” on the Macromedia site), how to prevent Flash LSOs from being placed on the Customer computer or device without the Customer being asked, and (for Flash Player 8 and later) how to block Flash LSOs that are not being delivered by the operator of the page the Customer are on at the time).  Please note that setting the Flash Player to restrict or limit acceptance of Flash LSOs may reduce or impede the functionality of some Flash applications, including, potentially, Flash applications used in connection with the Sites or our online content. We expect our service providers and technology suppliers to honor any decision by the Customer to restrict or limit Flash LSOs, but we cannot guarantee that they will do so.
• Using pixel tags, web beacons, clear GIFs or other similar technologies:  These may be used in connection with some Sites pages and HTML-formatted email messages to, among other things, track the actions of Sites users and email recipients, measure the success of our marketing campaigns and compile statistics about Sites usage and response rates.
• Through the Customer use of an App.  When the Customer download and use an App, we and our service providers may track and collect App usage data, such as the date and time the App on the Customer device accesses our servers and what information and files have been downloaded to the App based on the Customer device number. 
• From the Customer:  Information, such as date of birth, gender, personal characteristics, hobbies and interests, consumption habits, zip code and the Customer preferred means of communication, may be collected when the Customer voluntarily provide it.  Unless combined with Personal Information, this information does not personally identify the Customer or any other user of the Sites.
• Physical Location:  We may collect the physical location of the Customer device by, for example, using satellite, cell phone tower or WiFi signals. We may use the Customer device’s physical location to provide the Customer with personalized location-based services and content, including advertising. We may also share the Customer device’s physical location, combined with information about what advertisements the Customer viewed and other information we collect, with our marketing partners to enable them to provide the Customer with more personalized content, including advertising and to study the effectiveness of advertising campaigns. In some instances, the Customer may be permitted to allow or deny such uses and/or sharing of the Customer device’s location, but if the Customer choose to deny such uses and/or sharing, we and/or our marketing partners may not be able to provide the Customer with the applicable personalized services and content.
• By aggregating information:  Aggregated Personal Information does not personally identify the Customer or any other user of the Sites (for example, we may use Personal Information to calculate the percentage of our users who have a particular telephone area code).
• From the Customer camera: The Sites may include functionality that permits the Customer to use live video streams from the Customer device camera, if the Customer have affirmatively activated the camera for use with the Sites.  The functionality may work by identifying the Customer facial features, such as the Customer eyes, nose, mouth, and chin, in the video streams.  The functionality does not use facial recognition to uniquely identify a specific face. This functionality is used to provide the Customer with an enhanced interactive experience.  We and our service providers do not collect, capture, or record the video-stream information or any information about faces in the video stream—the information stays on the Customer device and is removed when the Customer turn off the browser or app.  However, we and our service providers may collect other information about how the Customer use the functionality, such as how often and how long the Customer use it.

In some instances, we may combine Other Information with Personal Information (such as combining the Customer name with the Customer zip code).  If we combine any Other Information with Personal Information and, the combined information will be treated by us as Personal Information as long as it is combined.

THIRD PARTY SITES
This Privacy Policy does not address, and we are not responsible for, the privacy, information or other practices of any third parties, including any third party operating any site to which these Sites contain a link.  The inclusion of a link on the Sites does not imply endorsement of the linked site by us or by our affiliates. 

While Tmall Commerce Sdn Bhd does operate its own e-commerce sites, please note that the Sites may contain a link to e-commerce websites, including some e-commerce websites that are The KK Supermart & Superstore Sdn Bhd branded.  This Privacy Policy does not govern any e-commerce websites to which the Sites may contain a link, unless such a website contains a link to this Privacy Policy. Any Personal Information that the Customer provide through the e-commerce website will be subject to the privacy policy of the e-commerce site, and not this Privacy Policy. We have no control over, and shall not be responsible for, the use of information collected through the e-commerce site.

Additionally, we may provide the Customer with access to third-party functionality that permits the Customer to post content to the Customer social media account(s).  Please note that any information that the Customer provide through use of this functionality is governed by the applicable third party’s privacy policy, and not by this Privacy Policy.  We have no control over, and shall not be responsible for, any third party’s use of information that the Customer provide through use of this functionality.

We are also not responsible for the collection, usage and disclosure policies and practices (including the data security practices) of other organizations, such as Facebook, Apple, Google, Microsoft, RIM or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider or device manufacturer, including in connection with any Personal Information the Customer disclose to other organizations through or in connection with the Apps or our Social Media Pages. 

THIRD-PARTY ADVERTISING-RELATED VENDORS

Please note that our online and email advertising-related vendors may use pixel tags, web beacons, clear GIFs or other similar technologies in connection with the Sites to help manage our online and email advertising campaigns and strengthen the effectiveness of such campaigns.  For example, if a vendor has placed a unique cookie on the Customer computer, the vendor may use pixel tags, web beacons, clear GIFs or other similar technologies to recognize the cookie during the Customer visit to the Sites and to learn which of our online advertisements may have brought the Customer to our Sites, and the vendor may provide us with such Other Information for our use.  Please note we may link such Other Information provided to us by our vendors to Personal Information about the Customer that we have previously collected.  The combined information may identify the Customer as an individual and if so, such combined information will be treated as Personal Information hereunder as long as it is so combined.

We may use third-party advertising companies to target advertisements to the Customer on our Sites, across the web, on the Customer mobile device and on any of the Customer other devices, based on the Personal Information and Other Information we have collected from and about the Customer, as well as information relating to the Customer and other users’ visits to this and other websites and online services.  To do so, these companies may place or recognize a unique cookie on the Customer browser (including through the use of pixel tags) or recognize an identifier associated with the Customer mobile device.  These companies may also use these technologies, along with Personal Information and Other Information they or we collect on the different devices the Customer use, to recognize the Customer across the devices the Customer use, such as a mobile device and a laptop or other computer. 

SECURITY
We use reasonable organizational, technical and administrative measures to protect Personal Information under our control.  Unfortunately, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure.  If the Customer have reason to believe that the Customer interaction with us is no longer secure (for example, if the Customer feel that the security of any account the Customer might have with us has been compromised), please immediately notify us of the problem by contacting us in accordance with the “Contacting Us” section below (note that physical mail notification will delay the time it takes for us to respond to the problem).

CHOICES AND ACCESS

The Customer choices regarding our use and disclosure of the Customer Personal Information

We give the Customer choices regarding our use and disclosure of the Customer Personal Information for marketing purposes. 

• If at any time the Customer wish to stop receiving phone, mail, SMS, and email marketing communications from us, please just let us know by contacting us using the contact information listed below in the “Contacting Us” section or by using the unsubscribe feature in the marketing email the Customer received. In the Customer request, please indicate that the Customer wish to stop receiving email marketing communications from us. 
• In addition, we will not disclose the Customer Personal Information to third parties, including our subsidiaries, for the third party’s direct marketing purposes if we have received and processed a request from the Customer that the Customer Personal Information not be shared with third parties for that purpose. If the Customer would like to submit such a request, please just let us know by contacting us using the contact information listed below in the “Contacting Us” section.  Please clearly indicate that the Customer request that Tmall Commerce Sdn Bhd not disclose the Customer Personal Information to The KK Supermart & Superstore Sdn Bhd subsidiaries and/or other third parties for their direct marketing purposes.

Please note that changes may not be effective immediately.  We will endeavor to comply with the Customer reasonable request(s) as soon as reasonably practicable.  Please also note that if the Customer do opt-out of receiving marketing-related messages from us, we may still send the Customer important administrative messages, and the Customer cannot opt-out from receiving administrative messages.

How the Customer can access, change or suppress the Customer Personal Information

Subject to any exceptions under applicable laws, the Customer may submit a request to us to access, review, correct, update, suppress, delete or otherwise limit our use of the Customer Personal Information that has been previously provided to us.  Please contact us using the contact information listed below in the “Contacting Us” section and clearly describe the Customer request. 

In the Customer request, please make clear what information the Customer would like to have changed, whether the Customer would like to have the Customer Personal Information suppressed from our database or otherwise let us know what limitations the Customer would like to put on our use of the Customer Personal Information.  We will try to comply with the Customer request as soon as reasonably practicable.  Note that despite our efforts, there may be residual information that will remain within our databases and other records, which will not be removed or changed.  Further, please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that the Customer began prior to requesting such change or deletion (e.g., when the Customer make a purchase or enter a promotion, the Customer may not be able to change or delete the Personal Information provided until after the completion of such purchase or promotion). 

If the Customer have an account with us, the Customer may make changes and updates on the account profile page by logging into the Customer account through the Site and making such changes.  Any changes the Customer make on the Customer account profile page through the Site will be reflected on that same Site; however, it may not be reflected on other sites operated by The KK Supermart & Superstore Sdn Bhd on which the Customer may have accounts.

If the Customer are under 18 and a registered user of the Sites, the Customer may ask us to remove content or information that the Customer have posted to the Sites by contacting.  Please note that the Customer request does not ensure complete or comprehensive removal of the content or information, as, for example, some of the Customer content may have been reposted by another user.

RETENTION PERIOD
We will retain the Customer Personal Information for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. 

USE OF SITES BY MINORS
The Sites are directed to individuals who are permitted to share their Personal Information without parental consent and we request that other individuals (including individuals under the age of 13) not provide Personal Information through the Sites.

SENSITIVE DATA
We ask that the Customer not send us, and the Customer not disclose, any sensitive Personal Information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, health or medical condition, criminal background or any other organisation membership) on or through the Sites or otherwise to us.

UPDATES TO THIS PRIVACY POLICY
We may change this Privacy Policy.  Please take a look at the “Last Updated” legend at the top of this page to see when this Privacy Policy was last revised.  Any changes to this Privacy Policy will become effective when we post the revised Privacy Policy on a Site.  The Customer use of the Sites following these changes means that the Customer accept the revised Privacy Policy.

CONTACTING US
If the Customer have any questions about this Privacy Policy, the Customer may email us at enquiry@kkgroup.my