Privacy Policy – Hot and Roll

At Hot & Roll Holdings Sdn. Bhd. (“Hot & Roll”) we are committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, and protect your personal information which you have provided to Hot & Roll in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

The purpose of this Privacy Policy is to help you understand how Hot& Roll Holdings Sdn. Bhd. (collectively, “Hot & Roll”, “we”, “us” or “our”) collect, record, hold, store, use, process and/or disclose (“Process”) the Personal Information provided by the members through the use of our mobile applications (“App”).

Information We Collect

By using our application you agree to share the following personal information (collectively referred as ‘Personal Date”) but not limited to:

Your name, mobile number, email address and birth date when you grant us the permission by using our mobile app.
Your preferences and purchase history of our products
Personal preference such as language used in app, marketing and communication channel, product or content interest
Other information that are, have been or may be collected from time to time to accommodate to the use of our in-app services

2. How We Use Your Information

We use the information we collect for the following purposes:

To set up and manage your membership, including recording the total WRAPPEZ Points collected and any eligible rewards;
To provide you with information about campaigns, events, plans, other services or products that we may offer from time to time.
To analyse trends, demographic, and track purchase behaviour to improve services in which you will not be identify you as a specific individual
For other legitimate business purposes, including fraud detection and prevention purposes, maintenance of business records and compliance with our legal obligations and/or To third parties with whom we have contracted to provide services to us (such as analysis on our behalf) for any of the purposes described above. Where we disclose your personal data to third parties, we shall ensure that such data will not be used for any reason other than to provide the services they have contracted to provide us;
To notify you of any changes and updates related to the Application, terms and conditions, services and activities offer from time to time

Collection of personal data

Your Personal Data may be collected through the data provided by you, your authorised representatives or from a variety of sources including but limited to when you register as a member with us, browse the Application, when you initiate contact with us either through verbal or written communications (e.g. enquiries, complaints, comments or feedbacks), when you participate in surveys, questionnaires, contests, offers, campaigns, or promotion run by us or through an appointed third party, when you commence a business relationship with us, interact with us on any social media networks, or from such other sources where you have given your consent for the disclosure to the extent permitted by applicable laws.

Payment Information

Payment transactions are processed through a third-party provider. When you select the order option, you will be redirected to a secure payment gateway to complete your transaction. We do not store your payment details directly.

Data Sharing with Third Parties

We do not share your personal information with third parties except when the it is requested by:

Companies or organisations that act as our agents, contractors, vendors, suppliers, service providers or professional consultants (include without limitation to auditors, consultants, lawyers, advisors);
Federal and state governments, courts of law, ministries and government agencies;
Law enforcement agencies and regulators;
Companies or organisations that assist us in processing your transactions and payments and business associates and other parties for purposes that are related to the purpose of collecting and using your Personal Data;

0. Security Measures

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include encryption and secure login protocols.

PDPA Compliance

In compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, we are committed to ensuring that your personal data is:

Processed lawfully and fairly.
Collected for specified, legitimate purposes and not further processed in a way incompatible with those purposes.
Accurate and kept up to date.
Kept in a form that allows identification of data subjects only for as long as necessary for the purposes of processing.
Protected by appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction.

Your Rights and Choices Under PDPA
Under the PDPA, you have the right to:

Access: Request access to the personal information we hold about you.
Correction: Request that we correct any information that is inaccurate or incomplete.
Withdrawal of Consent: You have the right to withdraw your consent for the collection and processing of your personal data. Please note that withdrawing consent may limit your access to certain app features or services.
Deletion: Request that we delete your personal information, subject to legal or contractual obligations.

To exercise any of these rights, please contact us using the details provided below.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted in this document, and the effective date will be updated. We encourage you to review this policy periodically for any updates.

Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal information, or if you wish to exercise your rights under the PDPA, please contact us at:

Hot & Roll Holdings Sdn Bhd

No. 11, Jalan PP 11/4,

Alam Perdana Industrial Park,

Taman Putra Perdana, 47130 Puchong,

Selangor Darul Ehsan.

General Line: +603-8322 2799

Email: general@hotandroll.com