Privacy policy
Komehyo Malaysia Sdn. Bhd. Privacy Policy
We at Komehyo Malaysia Sdn. Bhd. (“KMSB”, “Company”, “us”, “we”, “our” or “ours”) understand the importance of personal data (“Personal Data” refers to any data whether recorded in a material form or not, from which the identity of an individual as defined under the applicable regulations, guidelines, orders made under the Personal Data Protection Act (Malaysia) 2010 (Act 709) and any statutory amendments or re-enactments made thereof from time to time (collectively referred to as the “PDPA”). We endeavor to protect Personal Data through our compliance with the PDPA and this privacy policy for processing of Personal Data (“Privacy Policy”), and by appropriately processing the Personal Data of our customers.
1. We will collect Personal Data as provided in Clause 5 below in a lawful and appropriate manner including without limitation for the performance of contract, entering into contract, compliance with legal obligations and other legitimate business purposes directly related to our functions or activities.
2. We will not collect, use or disclose any Personal Data unless you have given consent, whether in writing or by electronic means, prior to or at the time of such collection, use or disclosure, except as otherwise permitted under the applicable laws and regulations.
3. We will collect your Personal Data for the purposes as provided in Clause 6 below. If we intend to use your Personal Data for any additional purposes not specified herein, we will notify you accordingly and ensure that such use remains within the scope of the stated purposes.
4. You may submit a written request to our Data Protection Officer at the contact details provided in this Privacy Policy to request access to and obtain a copy of your Personal Data held by us, to request correction of any inaccurate, incomplete, or outdated information, to request the transfer of your Personal Data to another data controller and to withdraw your consent to the processing of your Personal Data at any time. However, the withdrawal of consent may affect our ability to continue providing you with certain products or services. You may request that we transfer your Personal Data directly to another data controller where technically feasible. Such requests must be made in writing to us, and we reserve the right to refuse a request where it is not technically possible or permitted under the PDPA.
5. Collection of Personal Data
5.1. We may collect Personal Data from you in various ways, including when you:
● Register an account or make a purchase on our website;
● Visit our store and make a purchase or enquiry;
● Subscribe to our newsletters, promotions or loyalty programs;
● Participate in our marketing campaigns, contests or surveys;
● Contact us for customer service or product support; or
● Provide feedback or interact with us through social media platforms.
5.2. The types of personal data we collect may include but are not limited to the following:
● Name;
● NRIC/passport number;
● Contact details such as phone number and email address;
● Date of birth, gender and nationality;
● Delivery address and billing information;
● Payment details and transactional history;
● Financial information; and
● Device and browsing information, for online users.
6. Purposes of Collecting Personal Data
6.1. We collect and process your personal data for the following purposes:
● To verify your identity and manage your customer account;
● To process your orders, payments and deliveries;
● To provide customer service and respond to your enquiries;
● To send you updates, promotions, offers and newsletters;
● To improve our products, services, and website experience;
● To manage and operate loyalty or membership programs;
● To conduct marketing research, data analytics, and surveys; and
● To comply with legal and regulatory requirements.
7. Disclosure of Personal Data
7.1. Except as otherwise specified, we will not share or disclose any Personal Data to any third parties unless consent has been obtained, deemed consent applies or such disclosure is permitted without consent under the PDPA.
7.2. You hereby acknowledge and consent that we may disclose your Personal Data to our related companies, affiliates, business partners, service provider, and professional advisors, whether within or outside Malaysia, for the purposes stated in this Privacy Policy.
7.3. We will take all reasonable steps to ensure that such third parties protect your information and use it only for the purposes stated in this Privacy Policy.
7.4. We may disclose Personal Data to government authorities, regulators or other relevant parties as required or permitted by law without your consent in circumstances including but not limited where such disclosure is necessary for any purpose as permitted under the PDPA, to prevent or respond to life threatening situation, relates to data that is publicly available, serves the public interest, protects vital interests, fulfill contractual obligations, enables the performance of public duties, supports legitimate interests, complies with legal obligations, facilitates investigations or the prevention of crime, serves evaluation, research, statistical, artistic or journalistic purposes, relates to the provision of legal services, involves credit reporting as permitted by law or is necessary for employment or employee benefits purposes or where disclosure is made by or to a public agency.
8. Security of Personal Data
8.1. Internet is used in a global environment, using it to collect and process Personal Data involves the transmission of data on an international basis. The Personal Data that we collect from you may be transferred to, accessed in and stored at, a destination outside Malaysia, these Personal Data will always be held securely and in line with the requirements of any applicable regulations regarding PDPA.
8.2. We will ensure that the Personal Data collected by us or on our behalf is properly kept and having adequate security measurement to protect the processing of the Personal Data from any loss, misuse, modification, unauthorized or accidental access or disclosure or alteration.
8.3. We will ensure protection of Personal Data in our possession or under our control by making security arrangements to prevent unauthorized access, collection, use, disclosure, copying, modification, and disposal.
8.4. While we strive to protect your Personal Data, please note that no security measures are perfect or impenetrable. In the event where you believe your privacy has been breached, please contact us immediately. In the event of any data breach that is likely to result in harm to you, we will take immediate steps to contain the breach, assess the impact and notify you and the relevant authorities as required under the PDPA or other applicable laws.
9. Retention of Personal Data
9.1. We will retain your Personal Data for a period of ten (10) years or such longer period as required or permitted by applicable laws and regulations.
9.2. Once the Personal Data is no longer required for the purposes for which it was collected and retention is no longer necessary for legal, regulatory or business purposes, we will take all reasonable steps to permanently delete, destroy or anonymize such data in a secure manner.
9.3. If you withdraw your consent from us to process your Personal Data, we will cease processing your data, except to the extent necessary for us to comply with our legal obligations under the applicable laws and regulations.
10. Marketing and Promotions
10.1. We may use your Personal Data to send you updates about our products, promotions, special offers, events or other information that may interest you. These updates may be sent by email, SMS, phone calls or social media. We will only send you marketing materials if you have given your consent.
10.2. You may unsubscribe or opt out at any time by clicking the “unsubscribe” link in our messages or by contacting us directly.
10.3. Even if you choose not to receive marketing messages, we may still contact you about your purchases, transactions or account-related matters.
11. Cookies (For Website Users)
11.1. Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic and personalize content and advertisements. Cookies are small text files stored on your device when you visit our website. They help us recognize your device, remember your preferences, and improve the functionality and performance of our website. For further information, visit https://allaboutcookies.org.
11.2. Our website uses cookies to improve your experience including keeping you signed in and understanding how you use our website. There are number of different types of cookies, and our website uses functionality cookies to remember choices you make, such as your username, preferred language or region to provide a more personalized experience.
11.3. We may allow third-party service providers such as analytics companies or advertising networks to place cookies on your device to collect information about your online activities across websites. These third parties may use the data collected to provide us with analytics services or to deliver targeted advertising based on your browsing behavior.
11.4. You may control or disable cookies through your browser settings at any time. However, please note that disabling certain cookies may affect the functionality or performance of our website and limit your ability to use certain features.
12. Third-Party Links and Websites
12.1. Our website may contain links to third-party websites, plug-ins or applications that are not operated or controlled by us. Once you click on such a link or access a third-party platform, you will leave our website and any Personal Data you provide on those third-party sites will be subject to their own privacy policies and practices.
12.2. We do not have control over and are not responsible for the content, security or privacy practices of such third party websites or platforms. The inclusion of a link on our website does not imply endorsement or recommendation of the linked site or its operator. We encourage you to review the privacy policies of those websites before submitting any Personal Data to them.
12.3. We shall not be liable for any loss, damage or misuse of Personal Data arising from your use of, or reliance on, any third-party websites or platforms.
13. Contact Us
13.1. For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer:
KOMEHYO MALAYSIA SDN. BHD.
Suites 27-01, 27th Floor
Menara Keck Seng
No.203, Jalan Bukit Bintang
55100 Kuala Lumpur
Email: service@komehyo.com.my
Telephone Number: +60129383470
14. Others
14.1. We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any material amendment to this Privacy Policy will be made available on our website or any other available means as may be appropriate. If you continue to engage our services or purchase our products, you shall be deemed to accept such changes. The latest version will be posted on our website with the “Last Updated” date revised accordingly.
14.2. This Privacy Policy is issued in English and Bahasa Malaysia. In the event of any inconsistencies, the Privacy Policy in the English language shall prevail.
14.3. We do not knowingly collect, use or disclose Personal Data from individuals under the age of eighteen (18) without the consent of their parent or legal guardian. If you are a minor or an individual who are not legally competent to give consent, you should not provide your Personal Data to us without consent from your parent or legal guardian. If we become aware that we have inadvertently collected Personal Data from a minor without the required consent, we will take reasonable steps to delete such data from our records as soon as practicable.
This privacy policy was last updated on 31st October 2025.
