In this Privacy Policy,
"Rehab365," "we," "our," or "us" refers to Set Gaji Sdn Bhd (Registration No :
202401017533 (1563383-H)) a private company limited by shares incorporated under the laws of
Malaysia, with its registered address at Level 4, No.1, 3 & 5
Jalan Medan Tuanku 1
Chow Kit
50300 Kuala Lumpur. We are committed to protecting your privacy, and this Privacy Policy details
how we handle your Personal Data when you use our services, including our mobile application
“Rehab365” and website at www.rehab365.setlary.my (collectively “the Platform”).
1. Scope of this Privacy
Policy
This Privacy Policy applies to our services and is incorporated into the User Terms
and Conditions (“Terms and Conditions”) that you have agreed to in order to use
our services. The terms used in this Privacy Policy have the same meaning as those
defined in the Terms and Conditions as well as in any agreement that you may enter with
us and/or our Affiliates in relation to our Services, unless otherwise specified or
required by context. Please note the following:-
- This Privacy Policy does not apply to Personal Data collected through
third-party services (including third-party websites or mobile apps) that may be
accessed through our services;
- We may collect, use, disclose, and retain your Personal Data in the course of
providing our Services;
- We may share your Personal Data with our affiliates, business partners, and
third party service providers to provide our services, fulfil our obligations,
facilitate our Services, enforce our rights, and to conduct our businesses (as
outlined in Item 7 below); and
- You have rights regarding your Personal Data, which you can exercise by
contacting us as described in Item 11 below.
Please read this Privacy Policy carefully to understand how we collect, use, and
manage your Personal Data. By using our services, you agree to the collection, use, and
processing of your Personal Data in accordance with this Privacy Policy, as updated from
time to time. If you do not agree with this Privacy Policy, you must refrain from using
our Services.
2. Changes to this Privacy
Policy
- We may revise or add specific instructions, policies, and terms to this Privacy Policy
at our discretion. Any changes will be communicated to you via our mobile
application, direct communication, or other appropriate means. By continuing to use our
Services after any changes to this Privacy Policy, you agree to the revised Privacy
Policy.
3. The Information We Collect
and How We May Collect It
- In providing our services, we collect and process the following types of information:-
-
Personal Data:
Information about an identifiable individual, including Identity Data,
Contact Data, Biometric Data, Location Data, Log Data, Payment Data, Medical Claim
Data, and Marketing and Communications Data, as defined under Malaysia’s
Personal Data Protection Act 2010 (“PDPA”);
-
Identity Data:
Your name, gender, date of birth, identification/passport number,
nationality, and photocopy of identity document or passport;
-
Contact Data:
Your residential address, mailing address, email address, and phone
numbers;
-
Location Data:
Information about your location, including GPS, WiFi, compass,
accelerometer, or other sensors in your device;
-
Log Data:
Technical information collected automatically when you use our services,
including mobile carrier information, device configuration, web browser
details, IP address, MAC address, device type, model, version, and
identification number, as well as usage information;
-
Marketing and Communications Data:
Your preferences for receiving marketing information and communication
preferences;
-
Payment Data:
Your bank account details, payment information, and transactional data;
and/or
-
Medical Claim Data:
Your medical claim submission information such as claim amount, approved/rejected status.
- You must ensure that the Personal Data you provide is accurate and not
misleading, and keep it updated by notifying us of any changes. We may request
documentation to verify your Personal Data. We disclaim liability for service failures
due to inaccurate or incomplete Personal Data. You can access and update your Personal
Data at any time by contacting us as detailed in the Item 12 below.
- We may also collect and store your data through your relevant employment
as you have agreed in the Terms and Condition and any such agreement in relation to the
provision of our Services to you.
4. How We May Use Your
Personal Data
We may
use your Personal Data for various purposes, including but not limited to:-
- Providing our services to you;
- Processing transactions or communications with third parties (e.g., your
employer) via our services;
- Identification, verification, due diligence, or know-your-customer
purposes;
- Responding to, processing, or fulfilling your requests for products and
services, and notifying you of service issues and unusual account actions;
- Enforcing our Terms and Conditions or any other applicable agreements that
you may enter into in relation to our provision of the Services;
- Customer service, security, fraud-detection, archival, and backup
purposes;
- Understanding how you access and use our services to improve them and
respond to customer preferences, including language and location customization,
personalized help, and instructions;
- Conducting due diligence or screening activities in compliance with legal
or regulatory obligations or our risk management procedures;
- Auditing our services and business;
- Investigating any actual or suspected violations of our Terms and
Conditions, fraud, unlawful activity, omission, or misconduct;
- Storing, hosting, and backing up your Personal Data;
- Developing new services and improving existing ones;
- Software verification or administering software upgrades;
- Conducting business and commercial transactions; and/or
- Any other purposes notified to you at the time of obtaining your
consent.
If we rely on your consent to use your Personal Data in a specific way and you change your
mind, you may withdraw your consent by contacting us as detailed in Item 12 below. Upon
receipt of such withdrawal notice, we will stop using your Personal Data. However,
withdrawing your consent may impact our ability to provide you with our Services.
5. Security Practices
- We employ a variety of security technologies and procedures to prevent the loss,
misuse, unauthorized access, or disclosure of your Personal Data. We implement stringent
security measures, although we cannot guarantee absolute security unless required by
applicable laws or regulations.
6. Advertising
- We may use your Personal Data for advertising purposes in accordance with
this section. This includes offering advertising that is more relevant to you or sending
you direct marketing information or materials promoting our products and services or
those of our affiliates, business partners, and service providers.
- We will honour your request not to use your Personal Data for marketing purposes. You
can make such a request by contacting us as detailed in Item 12 below, following
relevant instructions on our marketing communications, or adhering to service-specific
guidance. We do not share your Personal Data with advertisers but may share anonymized
or pseudonymized data with them to offer more relevant advertising.
7. Sharing of Your Personal
Data
- We will not transfer your Personal Data to third parties except as
permitted under this Privacy Policy and/or the Terms and Conditions as you have agreed
in utilizing out Services or with your consent. We may share your Personal Data with our
Affiliates, business partners, and service providers to provide our services, fulfil our
obligations, enforce our rights and conduct our business.
- Any third-party collection and use of your Personal Data will be in
compliance with this Privacy Policy and subject to appropriate confidentiality and
security measures. You consent to such third-party use and sharing of your Personal Data
as described herein.
- Under certain circumstances, we may be required to retain, preserve, or disclose your
Personal Data to comply with legal requirements, including:-
- Complying with applicable laws or regulations;
- Responding to a court order or other legal process; and/or
- Responding to requests by government authorities, law enforcement agencies, or
similar bodies.
8. Communications from Us
- We may send you notifications via email, SMS and/or our Platform. You can opt out of
these notifications at the website user account level or device level. However, you
cannot opt out of service-related announcements necessary for service maintenance.
9. Third-Party Services on Our
Services
- We may send you notifications via email, SMS and/or our Platform. You can opt out of
these notifications at the website user account level or device level. However, you
cannot opt out of service-related announcements necessary for service maintenance.
10. Retention of Your Personal
Data
- We retain your Personal Data as long as necessary for business requirements or legal
obligations. We will take reasonable steps to delete or anonymize your Personal Data
once it is no longer needed for these purposes.
11. Your Rights
12. Contact
- If you wish to contact us regarding this Privacy Policy or to exercise your rights
under the PDPA, please contact our team via email at [email protected].