Privacy Policy

Effective date : May 15, 2024

Our app, FASTENTIX, operated by BLYON FASTENTIX SDN BHD, acknowledges our responsibility to safeguard your Personal Data and comply with Applicable Law. This policy outlines how we collect, use, and disclose your Personal Data when you use our service. We are dedicated to appropriately managing, safeguarding, and processing your Personal Data in accordance with this Policy, which extends to all Personal Data obtained from you through our Platforms.

By using the Services, registering an account with us, visiting our Platforms, or accessing the Services, you acknowledge and agree to be bound by the terms outlined (collectively, the “Agreement”) and accept the practices, requirements, and policies outlined in this Privacy Policy. Your consent to our collection, use, disclosure, and processing of your personal data as described herein.

For the purposes of understanding FASTENTIX’s Personal Data Protection Policy (“Policy”), capitalized terms used in this Policy shall have the following meanings:

• “Applicable Laws” means Malaysia’s Personal Data Protection Act 2010 and its subsidiary legislations and regulations as amended from time to time;
• “Apps” means our FASTENTIX mobile app on iOS and Android;
• “FASTENTIX, we, us, or our” means Blyon Group Berhad and it’s licensors;
• “Personal Data” means any data, whether true or not, which is (a) about an individual who can be identified (i) from that data; or (ii) from that data and other information to which we have or are likely to have access and would include data in our records as may be updated from time to time, or (b) defined as “personal data” or “personal information” under any applicable Data Protection Laws;
• “Policy” means terms and policies available on https://app.fastentix.com/policy/;
• “Platforms” means collectively Fastentix’s Apps, Social Media and Website, and any other websites or applications which we may own or operate from time to time;
• “Same-Day-Delivery” refers to the service of delivering items or packages on the same day they are ordered. This expedited delivery option is often offered by retailers, courier services, or online platforms to meet customers’ urgent delivery needs.
• “Services” referred to as ‘Platforms,’ encompass Fastentix’s various digital assets, including but not limited to our mobile applications (‘Apps’), presence on social
  media platforms, and our official website (‘Website’). Additionally, this definition extends to any other websites or applications that we may own or operate at
  different points in time;
• “Social Media Account” means FASTENTIX’s pages and accounts on third party social media platforms such as Instagram, Facebook, Twitter;
• “Website” means the FASTENTIX’S website accessed at the following address at www.fastentix.com.my;

Fastentix Policies and Procedures for handling customer information have been created with the understanding that Internet technologies are still evolving and that Internet business methods are continuing to evolve to meet the needs and opportunities of the changing technologies. As a result, our Policies and Procedures are subjected to change.

HOW DO WE ACCESS YOUR PERSONAL DATA ?

We access user data only to the extent necessary to provide our better services. We do not collect more data than is required, and we do not use your data for purposes other than those outlined in this privacy policy.

We only access user data with your explicit consent. When you first use our app and/or signup with our Services and/or within the Platforms, we will request permission to access certain types of data, such as your location or camera, and other related data documented within this Policy. You can choose to grant or deny these permissions, and you can modify your preferences at any time in your device settings. However, there is no other way to deny any of the data  required for the successful process without compromising the integrity and functionality of the service and/or application.

HOW DO WE COLLECT YOUR PERSONAL DATA ?

We may collect your Personal Data upon:

1. Your registration or opening an account with us on the Website or the Apps;
2. Your used in any of our related services, such as subscribing to our newsletter, product notifications;
3. Browsing our products and services or otherwise interact with our Website and Apps;
4. Accept our cookies on your device;
5. You interact with our Customer Service Team or other company representatives, for example, via our webform, emails, telephone calls, letters, or face-to-face meetings;
6. You interact with us on our Social Media platforms, such as liking our posts, commenting on our posts, private messaging us on our Social Media platforms; 
7. Your participation in our contests, promotions, lucky draws, initiatives or any request for additional Personal Data such as customer surveys; 
8. We receive references from business partners and third parties, for example, where they referred you to us to enjoy the benefits of a joint promotion or collaboration;
9. You authorized our Company representative submits your Personal Data to us for any purpose reasonably authorized by you, for example if such representative is
   purchasing our product or service to be delivered to you or as a gift;
10. Our third-party analytics and other service providers provide your Personal Data to us, which was collected and processed by them and disclosed to us pursuant to
    their separate privacy policies; or 
11. When you voluntarily submit your Personal Data to us for any reason.

We normally do not obtain your credit card details, whether to process your payment or for customer service purposes. Your credit card details are obtained, processed and stored directly by our third-party payment processors pursuant to their Terms of Use and Privacy Policies. None of your credit card details are stored with us. However, we may collect your bank account details to process refunds if any.

Please also take note of our Cookies Policy below in respect of the data collected and used by third-party cookies and trackers on our Website and Apps.

Please ensure that all Personal Data submitted to us is complete, accurate, true and correct. Failure to do so may result in our inability to provide you with the products and services you have requested. We may also collect your Personal Data in circumstances where such collection does not require consent under Applicable Laws.

WHAT PERSONAL DATA WILL BE COLLECTED ?

During your use of our Service and/or Platform, we may collect Personal Data from you.
The types of Personal Data that we may collect includes but is not limited to:

1. name;
2. email address;
3. phone number;
4. delivery and/or billing address;
5. date of birth;
6. gender;
7. profile pictures;
8. location;
9. network and device data;
10. shopping and/or browsing behaviors;
11. voice recording (for customer service calls);
12. any other personally identifiable information which you have provided us in any forms you may have submitted to us, or in the course of any other forms of interaction between you and us;
13. government-issued identification or other pertinent information as part of our standard procedures for due persistence, know-your-customer (KYC) protocols,
    identity verification processes, and/or fraud prevention measures;
14. transaction data, including the details on searches, purchases, advertising and content that has been interacted with us within the Platforms;

If you provide us with Personal Data related to a third party by submitting such Personal Data to us, you represent to us that you have obtained the consent of the third party to provide us with their Personal Data for the respective purposes. By (1) clicking “Yes” on our Policy pop-up or any Web form referring to this Policy on any of our online Platforms, (2) submitting your Personal Data to us when signing up for an account on the Website, (3) browsing our Website, or (4) ordering or purchasing any of our products and services, you are agreeing to the Terms of this Policy.

COLLECTION OF OTHER DATA

Social Media Intergration

If you sign up for our Platform using your Social Media Account, link your Fastentix account to your Social Media Account, or use any Fastentix social media features, we may access information about you that you have voluntarily provided to your Social Media Account provider, in accordance with that provider’s policies. We will manage and use any such personal data in accordance with this Privacy Policy at all times. This information may include, but is not limited to:

1. name;
2. email address;
3. profile picture;
4. friend list;
5. Any other information that you have made public or allowed the social media provider to share;

By linking your Social Media Account or using Fastentix social media features, you consent to the collection, use, and sharing of your personal data as described in this
Privacy Policy.

Platform and Services

When you browse our Platform, your device automatically transmits data to our web server, which typically includes information about your device such as its Internet Protocol (IP) address, operating system, browser type, and unique device identifier (UDID) or mobile equipment identifier (MEID). This data may also include details like the referring website, pages visited, and timestamps, along with the use of cookies to enhance your browsing experience, which can be managed through your browser settings. If you’re logged in, this information is linked to your personal account and is used for anonymous statistical analysis to improve our site’s functionality.

Our mobile applications have utilize technologies like GPS and Wi-Fi to collect precise location information from your device. This data is used for purposes such as providing location-based services (e.g. Same-Day-Delivery), delivering relevant content, or enabling location sharing with other users. You have the option to revoke permission for location tracking through your device settings, and for assistance, you can contact your mobile service provider or device manufacturer.

Similar to browsing behavior, when you interact with content, advertisements, or software on our Platform or through our Services, your device may send us information such as IP address and operating system. However, instead of page views, this data includes details about the specific content, ads, or software accessed, along with timestamps.

HOW DO WE USED YOUR PERSONAL DATA ?

We may use and disclose your Personal Data for purposes necessary to provide you with our products as services, including to:

1. register and maintain your user account and to verify your identity or age;
2. process your order for our products or services, process or collect your payment for the order;
3. deliver or perform the products or services you purchased, including our couriers calling or messaging you to obtain your delivery instructions;
4. process your returns or refunds in accordance with our Terms of Service;
5. provide you with supporting services and functions related to your user account, such as saved items in cart, wish list, brand or product notifications;
6. communicate with you in relation to (i) your queries, requests and feedback, (ii) material changes to our Website or Apps Terms of Service, Policy or other terms
   and conditions, and (iii) matters relating to the operation of your account; 
7. personalize and improve your customer experience when you visit the Website and the Apps, for example by prioritizing products and services appearing in your search results or feed;
8. monitor and enforce compliance with our Terms of Service, including dispute resolution;
9. comply with (i) internal risk controls, (ii) the terms of our access to payment processing, financial or banking services such as credit card disputes, fraud, billing
   errors, or (iii) any applicable law; and
10. ensure our Website and Apps function properly and to improve their performance, by carrying out activities such as debugging, statistical analyses for optimizing our Website and Apps.

(collectively, the “Purposes”)
In addition, we may use and disclose your Personal Data for the following purposes, to:

1. send you marketing communications in relation to our sales, products, services, promotions or the Platforms;
2. send you marketing communications in relation to the sales, products, services or promotions of business partners, including promotional mail together with your
   order;
3. deliver ads which are related to our products and services which may be of interest to you on the Platforms or other websites, apps or online platforms;
4. enable businesses to deliver ads which are related to their products and services which may be of interest to you;
5. provide you with our add-on or premium services such as FASTENTIX NOW;
6. invite you to our private customer events;
7. process your participation in our promotions, lucky draws, initiatives or any request for additional Personal Data such as customer surveys;
8. process your participation in our business partners’ loyalty or point redemption programs;
9. conduct market and customer research, analysis or tracking;
10. promote our products and services on our Platforms;
11. manage the administrative and business operations of FASTENTIX and complying with internal policies and procedures;
12. improve your customer experience across all touchpoints and training our customer experience team, such as by recording and monitoring phone calls; and
13. any specific purpose in relation to a particular product or service, which we may separately notify you on the product or service page;

(collectively, the “Additional Purposes”)

We may also use your Personal Data (a) for other purposes which are reasonably related to the Purposes and where we have obtained and maintain related consent, the Additional Purposes; or (b) in circumstances where such use does not require consent under Applicable Laws.

Note: If you withdraw your consent for us to use and process your Personal Data the Purposes or the Additional Purposes, we may no longer be able to provide you with the related products, services or benefits associated with our promotion.

WHO WILL YOUR PERSONAL DATA BE SHARED WITH ?

In relation to our use of your Personal Data for the Purposes or Additional Purposes, we may disclose your Personal Data to our:

1. directors, employees, temporary workers;
2. FastSeller and/or FastMerchant, who supply and deliver the products or services you ordered through the Website or Apps;
3. All users who you have transacted or interacted with on the Platforms or in connection with your use of the Services for the stated purposes above;
4. payment processors, who process your payment on the Website and the Apps;
5. logistics providers, such as courier services which will deliver your order to you;
6. business partners who separately maintain an account with you for loyalty or point redemption programs;
7. business partners or vendors in connection with the processing of any promotion, event or service organised by us;
8. professional advisers and consultants;
9. agents, contractors or service providers who provide operational services to us, such as online cloud storage and processing, marketing optimization, information
   technology, telecommunications, security or other relevant services which requires their collection, use or disclosure of your Personal Data; and
10. any other party whom you authorize us to disclose your Personal Data to;

We may also disclose your Personal Data (a) for other purposes which are reasonably related to the Purposes and where we have obtained and maintain related consent, the Additional Purposes; or (b) in circumstances where such disclosure does not require consent under the Applicable Laws.

We do our best to minimize the disclosure of your Personal Data to the information necessary to perform the related Purpose or Additional Purpose.

HOW DO WE DISCLOSE YOUR PERSONAL DATA COLLECTED ?

Fastentix will not disclose its customers’ personal and account information unless it believes it is necessary to identify, contact, or take legal action against someone causing harm or interfering with the rights or property of Fastentix, its customers, or others.

Additionally, disclosure may occur if Fastentix has a good faith belief that it is required by law.

You are solely responsible for sharing such data in publicly accessible areas of the Platform, like user forums or testimonial sections, and any associated risks. We assume
no responsibility for your decisions in this regard. It’s up to you to exercise discretion when disclosing such information on the Platform.

Fastentix will refrain from disclosing the contents of any electronic mail or other electronic communications stored or transmitted for its customers to third parties, except for the following circumstances:

• It is necessary in order to provide service to the customer;
• It is necessary to protect the legitimate interests of Fastentix and its customers;
• It is required to cooperate with interception orders, warrants, or other legal processes that Fastentix determines in its sole discretion to be valid and enforceable; and
• It is necessary to provide to a law enforcement agency when the contents are inadvertently obtained by Fastentix and appear to pertain to the commission of a
  crime.

Fastentix explicitly states that it has no intention to censor, edit, or continuously monitor communications stored on or transmitted through its facilities by customers or others. However, Fastentix reserves the right to review, delete, or restrict access to communications that could potentially harm Fastentix, its customers, or third parties. This action may be taken in cases of actual or suspected violations of Fastentix policies, among
other grounds.

In the event that Fastentix is acquired by another company, merges with another company, or trades a significant portion of its assets to another company, your Personal Data may be shared with that company. In such cases, Fastentix will notify you in accordance with the notice provisions outlined in the Terms of Use.

Fastentix might share your Personal Data with affiliated third parties to support the provision, maintenance, evaluation, and enhancement of the Platform, Services, and other Fastentix offerings. Additionally, Fastentix may share your Personal Data with affiliated third parties for marketing, advertising, or offering Fastentix products and services to you, which may include third-party products and services. Fastentix will undertake reasonable measures to ensure these affiliated third parties refrain from utilizing your Personal Data for unrelated purposes.

HOW TO UPDATE OR CORRECT YOUR PERSONAL DATA?

You may access or correct of any of your Personal Data mentioned in above section entitled “What Personal Data Will Be Collected ?” by logging in to your user account on the Website or Apps under “Account Information” and clicking the “Edit” button under each relevant field.

For Personal Data that cannot be corrected by you by logging in to your user account on the Website or Apps, you may request to access and correct such Personal Data by submitting a written request to us via our customer service at support@fastentix.com. We may need to request additional information from you to validate your identity before providing the access or making the correction in order to preserve the authenticity of a individual.

We will do our best to respond to Personal Data access and correction requests within 21 days from the date of receipt of the requests. Where we are unable to meet this timeline, we will update you with the soonest possible time within which we can provide the information or make the correction. Please note that certain types of Personal Data access and correction requests may be exempted under Applicable Laws.

We will make reasonable efforts to ensure Personal Data likely to be used by us or disclosed by us to another organization is accurate and complete. However, you should
update us of any changes in your Personal Data. We will not be responsible for relying on inaccurate or incomplete Personal Data if you have not updated us of changes. Note that we may charge you a reasonable fee for the handling and processing of your Personal Data access request.

We will send your corrected Personal Data to every other person or entity to which such Personal Data was disclosed by FASTENTIX within the year OR twelve (12) months
before the date of the correction, unless such person or entity does not need the corrected Personal Data for any legal or business purpose or unless we reasonably believe that the other person or entity has ceased using such Personal Data for the purpose for which such disclosure was made.

RETENTION AND DELETION OF PERSONAL DATA

Your Personal Data is retained only for as long as necessary to fulfill the purposes outlined in our Privacy Policy or as required by Law. We have implemented stringent data retention practices to ensure that your personal information is not kept longer than is necessary for the purposes for which it was collected. Once the retention period expires, your Personal Data is securely deleted or anonymized to prevent unauthorized access or use when it is no longer needed for legal, business, or operational purposes.

In the event that you cease using our Platforms, or if your permission to use our Platforms and/or Services is terminated, we may continue to retain, use, and disclose your Personal Data in accordance with this Privacy Policy and Applicable Laws. We reserve the right to securely dispose of your Personal Data in accordance with legal requirements, without prior notice to you.

REQUEST TO WITHDRAW CONSENT

Withdraw Consent on Promotional Information

If you wish to withdraw your consent for us to send you sales, marketing or promotional information, please inform us as follows:

1. to withdraw consent from receiving SMS promotions: please unsubscribe by following the steps provided in the promotional SMS;
   
   • to withdraw consent from promotional emails: please click on the Unsubscribe link in the promotional emails;
   • to withdraw consent from receiving promotional material with your order package: please email our Data Protection Officer at the email address provided
     below.

Once we receive notification that you wish to withdraw your consent for receiving marketing or promotional materials or communications, it may take up to thirty (30) days for your withdrawal to be reflected in our systems. Therefore, you may still receive marketing or promotional materials or communications during this period.

If you withdraw your consent to receive marketing or promotional materials through a specific communication mode (e.g. SMS), we may still contact you for other purposes in relation to the products and services via other communication modes you have subscribed to (e.g. email).

Withdraw Consent on Personal Data

You may withdraw your consent for the collection, use, access, and/or disclosure of any of your Personal Data in our possession or under our control by submitting a written request via email to support@fastentix.com. Note that, depending on the nature of the consent withdrawal, we may not be able to continue to provide you with some or all of our products or services. We will process such a request within a reasonable time from receiving notice from you of your withdrawal of consent. Once the processing is complete, we will no longer collect, use and/or disclose your Personal Data, except to the extent we retain your Personal Data for compliance, regulatory or other legal purposes.

PERSONAL DATA TRANSFER

If Personal Data is transferred out of Malaysia, we will comply with Applicable Laws in doing so. This includes: (i) obtaining your consent, unless an exception exists under
Applicable Laws or any other Laws, and (ii) taking reasonable steps to ascertain whether the foreign recipient of the Personal Data is bound to comply with standards of protection that are at least comparable to the Applicable Laws.

INFORMATION ON CHILDREN

By default, we do not knowingly collect Personal Data about children under the age of 13. The Services are not intended for children under the age of 13. We only collect Personal Data from children under the age of 13 with verifiable parental or legal guardian consent or as permitted by law. We does not take any liability in the event that Personal Data of a children under the age of 13 in your care is disclosed to us. You hereby consent to the processing of the child’s personal data, to accept and to agree to be bound by this Policy on behalf of your children.

The Personal Data of children is handled with utmost care and is retained only for as long as necessary to provide the requested Services or as required by Law. Parents or legal guardians have the right to review the personal information collected from their children, request its deletion, or withdraw consent for further collection or use, as been outlined in Section “Your Rights”. We do retain Personal Data of children beyond the necessary period or for purposes other than those explicitly stated. We will take steps to delete the information as soon as possible, except where it is required by Applicable Law to keep it.

SECURE DATA HANDLING

We will also put in place reasonable security arrangements to ensure that your Personal Data is adequately protected and secured. We employ industry-standard security
measures to protect your data from unauthorized access, collection, use, disclosure, copying, modification, leakage, loss, damage or alteration.

Your data is encrypted during transmission and securely stored on servers with restricted access. We regularly review and update our security protocols to mitigate potential risks and address emerging threats. We also do conduct regular audits and assessments to maintain compliance with relevant data protection regulations.

Access to your data is limited to authorized personnel who are bound by strict confidentiality obligations. In the event of any security incident, we have procedures in
place to promptly respond, investigate, and notify affected individuals as required by Law. However, we will not be responsible for any unauthorized use of Personal Data by third parties which is attributable to factors beyond our control.

THIRD PARTY COOKIES AND TRACKER

We or our authorized service providers and advertising partners may use cookies or other features to collect or share information in connection with your use of our Services or Platforms. Cookies are files with a small amount of data which may include an anonymous unique identifier. They help websites remember information about your visit, such as login details, preferences, and browsing history, which enhances your user experience.

Our servers will automatically record data sent by your browser, such as the technical and usage data upon visiting the Platforms using your computer, mobile device, or any other internet-connected device. This data is collected for analysis and evaluation to help us improve our website, services, and products. It also helps us personalize content to better match your interests, make the Services and Platforms more convenient and useful for you, and provide more relevant advertising related to market products, services, and features.

You can instruct your browser to refuse the third party cookies or to indicate when a cookie is being sent. Note that this may result in the loss of Website functionality, restrict your use of the Website, or delay or affect the way in which the Website operates.

THIRD PARTY SERVICES

We may embed content provided by others or include links to other websites and applications. These services may include analytics tools, advertising networks, payment
processors, courier delivery, or other service providers that assist us in delivering and improving our Services.

While we take every precaution to select reputable and trustworthy partners, it’s important to note that third-party services may have their own privacy policies and practices that are beyond our control. We are not responsible for the practices of these companies. We strongly advice you to review and consult the Privacy Policies of any third-party services you interact with to understand how they handle your Personal and Sensitive Information.

YOUR RIGHTS

Your Personal Data is your rights. These rights including:

1. To enquiries on what Personal Data does Fastentix is hold relating to you, the right to request copies of your personal data, and how that data is processed and used by Fastentix (often referred to as a ‘Subject Access Request’);
2. To have Fastentix rectify inaccurate (if any) Personal Data which Fastentix holds about you.
3. To have Fastentix remove Personal Data which relates to you if it is no longer necessary for Fastentix to continue to process it, or if Fastentix has no lawful basis to store, process or retain it (though Fastentix does have rights to refuse these requests in certain situations);
4. To withdrawn to Fastentix processing your Personal Data;
5. To be informed about the existence of any automated decision making and profiling of your Personal Data, and where appropriate, be provided with meaningful
   information about the logic involved, as well as the significance and the envisaged consequences of such processing that affects you;

Shall you need to exercise any of these rights, feel free to get in touch with us at https://fastentix.com.my.

UPDATES ON DATA PROTECTION POLICY

As part of our efforts to ensure that we properly manage, protect and process your Personal Data, we will be reviewing our policies, procedures and processes from time to time. In this regard, Fastentix may update this Policy to ensure that it is consistent with industry trends and any changes in legal or regulatory requirements. We reserve the right to amend the terms of this Policy at our absolute discretion.

Subject to your rights at law, you agree to be bound by the prevailing terms of the Policy as updated from time to time on our Website. Any amended Policy will be posted on our website and can be viewed at https://app.fastentix.com/policy/. By continuing to use our Platforms and/or Services after the Policy has been amended, you hereby agree to be bound by the terms of such amended Policy.

You are encouraged to visit the above Website from time to time to ensure that you are well-informed of our latest policies in relation to Personal Data protection.

GOVERNING LAW

This Policy and your use of this Website shall be governed in all respects by the Laws of Malaysia.

LANGUAGE

In the event of any conflict between the English version and versions in other languages of this Privacy Policy, the English version shall prevail.

CONTACT US

For any inquiries relating to your Personal Data or about this Policy, if you have a complaint regarding the collection, use or handling of your Personal Data by us, or a
question about how we are complying with Applicable Laws, you may contact our Customer Service via one of the following methods:

• Email address: support@fastentix.com
  Attention to the ‘Customer Service Officer’.
• Blyon Group Berhad Office address: No 13 & 13A, Jalan P4/8B, Bandar Teknologi Kajang, 43700 Semenyih, Selangor.
  Attention to the ‘Customer Service Officer’.

Emails and letters should clearly state that you are making a data protection query, request or complaint in the subject line to ensure the matter is dealt with expediently. We will strive to deal with any query, request or complaint promptly and fairly.

Our business changes constantly, and our Privacy Notice may also change. You should check our website frequently to see recent changes. You can see the date on which the latest version of this Privacy Notice was posted. Unless stated otherwise, our current Privacy Notice applies to all personal information we have about you and your account.

We stand behind the promises we make, however, and will never materially change our policies and practices to make them less protective of personal information collected in the past without informing affected customers and giving them a choice.