privacy policy

This Privacy Policy (the "Policy”) is issued pursuant to the enactment of the Personal Data Protection Act 2010 (the "Act”) to regulate the collection and processing of your Personal Data (as herein defined) by Carching Ventures Sdn. Bhd. (the "Company"). We respect your right to privacy and is committed to ensuring that your Personal Data is protected in compliance with the PDPA. Please read the the Policy to learn about how we gather, use, disclose and share information.

 

By visiting our website www.carching.co (including its related sites and subdomains), downloading the Company's applications, interacting with any of our digital content or use any of our services (the "Services"), you are trusting us with your information and agree to our collection, use, disclosure and sharing of your personal information in accordance with the Policy.

​

definitions

​

For the purpose of this Policy:

​

(a) “Authorised Companies” includes the Company's staff, internal and external stakeholders, contractors, partners, advertisers, agents or third party suppliers or service providers with whom the Company enters into an agreement in connection with or for the purposes of or related to, whether directly or indirectly, the Services;

​

(b) “Carching”, “we”, “us” or “our” means, Carching Ventures Sdn Bhd, a limited liability company incorporated in Malaysia;

​

(c) “Personal Data” means any data, whether true or not, about an individual who can be identified (whether directly or indirectly)

(i) from that data; or

(ii) from that data and other information to which we have or are likely to have access and includes any Sensitive Personal Data or expression of opinion about the individual as well as any data in our records updated from time to time; and

​

(d) “Sensitive Personal Data” comprises information as to your physical or mental health or condition, political opinions or any other information designated as such.

​

data we collect

​

We want you to understand the types of information we collect as you use our services. Here is a list of the main information, but not limited to, that we collect and process:

​

(a) Personal information such as full name and gender;

​

(b) Contact information such as your email address and mobile number;

​

(c) National ID number, driver's license and road tax;

​

(d) Home and work addresses, including frequent places;

​

(e) Information on your car such as the brand, model, colour, plate number and car grant or V.O.C;

​

(f) Bank account number; and

​

(g) Location-based information

​

You should ensure that all Personal Data submitted to us is complete, accurate, true and correct. Failure on your part to do so may result in our inability to provide you with the Services you have requested.

​

If you provide us with any Personal Data relating to a third party (e.g. information of your spouse, children, parents, and/or employees), by submitting such information to us, you represent to us that you have obtained the consent of the third party to provide us with their Personal Data for the respective purposes.

​

why we collect

​

When you register with as a brand ambassador or advertiser, we generally collect data as you access our Services for the following key purposes:

​

(a) To provide our Services. This includes providing communications, promotions and information on events which may be of interest to you that is organised, managed, facilitated, provided sponsored and/or participated by the Company;

​

(b) To ensure that you do meet the criteria of the programmes organised by us on behalf of the Company's clients;

​

(c) To compute necessary reports, analytics, study and assessment for the day-to-day operational requirement of the Company and further development and improvement of the Services;

​

(d) To facilitate operations between the Company and its Authorised Companies in carrying out the operations necessary, and to facilitate payment between all parties, if any; and

​

(e) To investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or as otherwise required by law.

​

how we share

​

We are committed to remain your information confidential and not share it with any other parties other than the parties you have authorised as described below:

​

(a) The Company

We share your information internally on need to know basis for: data processing and storage; providing you with access to our services; providing customer support; making decisions about service improvements; product development; and for other purposes described in the “Use of Information” section of this Policy.

 

(b) Authorised Companies

We use other companies, agents or contractors to perform services on our behalf or to assist us with the provision of services to you and has undertaken to keep such information confidential, provided such person or company has a legitimate right to such information. For example, we may engage Service Providers to provide marketing, advertising, communications, infrastructure and IT services, to personalise and optimise our service, to process credit card transactions or other payment methods, to provide customer service, to collect debts, to analyse and enhance data (including data about users' interactions with our service), and to process and administer consumer surveys. In the course of providing such services, these Service Providers may have access to your personal or other information. We do not authorise them to use or disclose your personal information except in connection with providing their services and will require them to delete or destroy the information.

 

(c) Promotional Offers

We may offer joint promotions or programmes that, in order for your participation, will require us to share your information with third parties. In fulfilling these types of promotions, we may share your name and other information in connection with fulfilling the incentive. Please note that these third parties are responsible for their own privacy practices.

 

(d) Cross Border Transfers

We process and store data on servers located both inside and outside of the Malaysia. Countries where we process data may have laws which are different, with some providing more protection than others. Regardless of where your information is processed, we apply the same protections described in this Policy.

​

(e) Business Transfers

In connection with any reorganisation, restructuring, merger or sale, or other transfer of assets, we will transfer information, including personal information, provided that the receiving party agrees to respect your personal information in a manner that is consistent with our Policy.

​

Notwithstanding, personal information may be disclosed for any purpose other than the above if:

 

(a) The disclosure is necessary for the purpose of preventing or detecting a crime, or for the purpose of investigations or was required or authorised by or under any law or by the order of a court;

​

(b) The Company acted in the reasonable belief that we had in law the right to disclose the personal information to the other person; • the Company acted in the reasonable belief that we would have had your consent if you had known of the disclosing of the personal information and the circumstances of such disclosure; or

​

(c) The disclosure was justified as being in the public interest in circumstances as determined by the minister charged with the responsibility for the protection of personal information.

 

You may also choose to disclose your information in the following ways, but not limited to:

​

(a) While using the Services, you may have opportunities to post reviews, feedback or other information publicly, and third parties could use the information you disclose; or

​

(b) Certain portions of our service may contain a tool which gives you the option to share information by email, text message and social, within the Services, or other sharing applications, using the clients and applications on your smart device; and social plugins and similar technologies allow you to share information. Social plugins and social applications are operated by the social networks themselves, and are subject to their terms of use and privacy policies.

​

data security

​

We're committed to protecting our users' personal data. We implement appropriate technical and organisational measures to help protect the security of your personal data. However, be aware that no system is ever completely secure. The Company has implemented security policies, rules and technical measures to protect your Personal Data from unauthorised access, improper use or disclosure, unauthorised modification, unlawful destruction or accidental loss. All our employees and data processors, who have access to and are associated with the processing of Personal Data, are obliged to respect the confidentiality of your Personal Data.

​

In discharging its responsibilities with respect to the confidentiality of Personal Data, the Company will employ a number of safeguards, appropriate to the sensitivity of the information, to protect Personal Data against loss or theft, as well as unauthorised access, disclosure, copying, use, or modification. Such safeguards will include physical measures, organisational measures and technological measures, for example locked filing cabinets, restricted access to offices, security clearances and limiting access on a “need to know” basis and use of passwords and encryption. Procedures for implementing these measures will be communicated to the Company's employees and third parties to ensure compliance with this principle. The Company will store your Personal Data as long as the purpose it was collected for remains valid and thereafter for a period of seven years or any other period of time required and/or permitted by Malaysian law.

​

We may use cookies and similar technologies on the Services. The Company may use cookies for various purposes, such as to save you the need to re-enter your username and password each time you log in, to facilitate the use of the Services, to collect statistical information, to verify information, and to customise the Services to your personal preferences and for information security purposes. Some of the cookies may expire when the session ends and you exit your browser. Other cookies are saved on your computer’s hard drive. If you wish to block the Services' cookies, then please use the help button in your browser and follow the necessary instructions. However, bear in mind that disabling cookies may complicate or even prevent your use of the Services, or certain features thereof.

​

We implement security safeguards designed to protect your data, such as HTTPS. We regularly monitor our systems for possible vulnerabilities and attacks. However, we cannot warrant the security of any information that you send us.

​

accessing your data

​

To ensure that the personal information collected is accurate, complete, not misleading and kept up-to-date, we have designed specific fields with rules, if applicable, to reduce errors, wrong information and incomplete fields. We will also be sending notifications on a periodic basis to remind you to review the validity of your information. In situations where we deem information that was inputted is insufficient or inaccurate, we will reach out to you to provide further information or revise the current one, if necessary.

 

On the other hand, you have rights over your information. You can request access to your personal information and to correct or update out-of-date or inaccurate personal information we hold about you, except where compliance with a request to such access or correction is refused under the Act. After creating an account with us, you can most easily do this by visiting the "Account" portion of the application, where you have the ability to access and update your information.

 

We may reject requests that are unreasonable or not required by law, including those that would be extremely impractical, could require disproportionate technical effort, or could expose us to operational risks such as free trial fraud.

​

keeping your data

​

We keep your personal information only as long as necessary to provide you our products and services, including legitimate and essential business purposes, such as maintaining the quality and performance of our products and services, making data-driven business decisions, complying with our legal obligations, and resolving disputes. Upon your request, we will delete or anonymise your personal information so that it no longer identifies you, unless, we are legally allowed or required to maintain certain personal information, including situations such as the following:

 

(a) If there is an unresolved issue relating to your account, such as an outstanding credit on your account or an unresolved claim or dispute we will retain the necessary personal information until the issue is resolved;

(b) Where we are required to retain the personal information for our legal, tax, audit, and accounting obligations, we will retain the necessary personal information for the period required by applicable law; and/or

(c) Where necessary for our legitimate business interests such as fraud prevention or to maintain the security of our users.

 

Such request can be made by emailing us at 321go@carching.co.

​

be updated

​

We may occasionally make changes to this Policy as and when required. When we make material changes to this Policy, we'll provide you with prominent notice as appropriate under the circumstances. For example, we may display a prominent notice on our website, send you an email or device notification. To make sure you are aware of any latest changes, please review this policy periodically.

 

Continuing to use the Services will indicate your acceptance of the amended terms in the Policy. If you do not agree with any of the amended terms, please avoid any further use of the Services.

​

let's talk

​

If you have any questions or concerns regarding the Policy, you should contact us via our Customer Support Line at 321go@carching.co. We welcome any feedback and comments on the Policy as well, which will be taken into consideration for future revisions, if any.