1. Introduction
Right Eye Sdn Bhd (“Right Eye”) takes your right to privacy seriously and is committed to protecting your personally identifiable information (“personal data”) in line with the Personal Data Protection Act 2010 and other applicable laws. This Privacy Statement sets out Right Eye’s approach to handling personal data.
This Privacy Statement applies to personal data collected by Right Eye but does not apply to personal data collected by other entities not under Right Eye’s control, such as third-party websites linked from our site.
Right Eye may amend this Privacy Statement from time to time. As such, you are expected to read this Privacy Statement each time you wish to provide your personal data to Right Eye. Substantial amendments to this policy will be announced on our website.
Where we collect personal data directly from you, we may provide additional personal data protection notices that set out in more detail how your personal data will be used.
2. Purposes and legal basis for processing personal data
Right Eye may need to process your personal data for purposes including but not limited to:
- Providing consulting, training, and other services to you or your organization.
- Assessing the suitability of service providers and their personnel.
- Enforcing the rights and obligations in a contract, including making payments.
- Recruitment, appointments, and employment.
- Marketing and communication, including sending you information about our services and events if you are on our mailing list.
- Ensuring the security of our premises and systems.
- Audit or legal purposes.
The legal basis we rely on for processing your personal data may be:
- Your consent.
- Performance of a contract or in order to enter into a contract with you or your employer.
- Compliance with our legal obligations.
- Protection of your vital interests.
- Right Eye’s legitimate interests.
3. Types of Personal Data collected and processed by Right Eye
The types of personal data which Right Eye may need to process include but are not limited to:
- Name, address, contact details, identification number, and passport number.
- Occupation, designation, and employer.
- Details of professional experience and educational qualification.
- Sensitive or special categories of personal data, such as religion or health data, if relevant to a specific service or employment.
- Information relating to disciplinary proceedings.
- Details of shareholdings, business interests, and positions.
Right Eye will only collect and process personal data to the extent that such personal data is necessary for the relevant purpose.
4. How Personal Data is collected by Right Eye
Right Eye may collect personal data directly from you where it is necessary or practical to do so. When we collect your personal data, we will inform you how we may use or disclose it. In some cases, it may be necessary for Right Eye to collect your personal data from other persons, with or without your knowledge or involvement, as part of our business activities such as recruitment or procurement.
For visitors to Right Eye’s premises, we may collect personal data prior to entry for identity verification and security purposes. Right Eye may also use CCTVs at exterior perimeters and within our premises, which may collect photo, video, or voice recordings of individuals for safety, crime prevention, and crime detection.
5. Protection of personal data
Right Eye ensures the security of your personal data by taking appropriate security measures to preserve its confidentiality.
In some instances, it may be necessary for us to process sensitive or special categories of personal data. In such cases, we will apply additional care as required by law.
If we disclose any of your personal data to any entities (whether within or outside of Malaysia), we will ensure such entities appropriately safeguard the personal data provided to them.
6. Disclosure of Personal Data to Third Parties
We will not share your data with third parties unless:
- It is provided for in this Privacy Statement.
- Your consent is obtained.
- A service provided requires interaction with a third party, or is provided by a third party on our behalf.
- It is pursuant to legal action or law enforcement.
Right Eye may disclose your personal data to third parties including but not limited to:
- Other parties authorized by you.
- Regulatory and governmental agencies as permitted or required by law.
- Third-party service providers.
- Past or future employers of employees or prospective employees, within and outside of Malaysia.
Where Right Eye appoints a third-party service provider to process personal data on our behalf, we will instruct such third party to only process the data for the specific purposes required by Right Eye.
7. Cross-Border Transfers of Personal Data
Right Eye may transfer your personal data outside of Malaysia (including jurisdictions which do not have a law substantially similar to the PDPA) to the parties set out in paragraph 6 where the transfer is necessary for any of the purposes set out in paragraph 2, the transfer is permitted under the law, or the transfer is authorized by you.
8. Retention of personal data
It is Right Eye’s policy to retain personal data for as long as it is necessary for the purpose for which it was collected, or for other purposes that are not incompatible with the original purpose, and as required by law. Where the personal data is no longer necessary, it will be disposed of.
9. Data Subject’s Rights
You may have certain rights under applicable data protection laws. For example:
- Right to Access: You may have the right to request confirmation as to whether your personal data is being processed by Right Eye and to access a copy of the personal data we hold about you to ensure it is accurate, complete, not misleading, and up-to-date.
- Right to Correct: You may have the right to request Right Eye to correct or complete any personal data you believe is inaccurate, out of date, or incomplete.
- Rights of Data Portability: Provided it is technically feasible, you may have the right to request Right Eye to transmit your personal data to a third party.
- Withdrawal of Consent / Cessation of Processing: In circumstances where Right Eye relies on your consent to process your personal data, you may have the right to withdraw your consent or request for us to cease any of our processing of your personal data. However, such a request may result in Right Eye being unable to engage you on certain matters.
We aim to address your request as soon as practical and may request additional information and verification of your identity in order to respond.
10. Contact Information
If you have any questions about this privacy statement or wish to exercise your data subject rights, you may contact us through the contact page.