Privacy Policy
1. Introduction
Kloth Malaysia Sdn Bhd and Kloth Singapore Pte Ltd (collectively, "Kloth", "we", "our", or "us") are committed to protecting your personal data in accordance with applicable data protection laws, including the Personal Data Protection Act 2010 (Malaysia) and the Personal Data Protection Act 2012 (Singapore).
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data across our operations, including our website, online shop, programmes, and services.
By engaging with us, you consent to the processing of your personal data in accordance with this Policy.
2. Definition of Personal Data
"Personal Data" refers to any information that relates to an identified or identifiable individual, including but not limited to:
-
Name
-
Identification number
-
Contact details (email, phone number, address)
-
Photographs and video recordings
-
Employment or organisation details
-
Online identifiers and transaction data
3. Collection of Personal Data
We may collect your Personal Data through:
-
Registration for programmes, events, or initiatives
-
Creation of an account on our website or online shop
-
Purchases and transactions via our online shop
-
Communication via email, phone, website, or social media
-
Participation in campaigns, surveys, or outreach activities
-
Submission of forms (physical or digital)
-
Website usage (via cookies and analytics tools)
-
Participation in recycling or sustainability programmes
Online Shop & Account Data
When you register or transact, we may collect:
-
Full name
-
Email address
-
Phone number
-
Billing and shipping address
-
Login credentials (username and password)
-
Purchase history and preferences
-
Payment information (processed securely via third-party providers; we do not store full card details)
4. Purpose of Processing Personal Data
We process Personal Data for the following purposes:
-
Managing registrations, participation, and engagement
-
Creating and administering user accounts
-
Processing orders, payments, and deliveries
-
Providing customer support and responding to enquiries
-
Communicating updates, confirmations, and service-related notices
-
Personalising user and shopping experience
-
Improving services, campaigns, and operational efficiency
-
Internal reporting and impact measurement
-
Compliance with legal and regulatory obligations
-
Marketing and promotional communications (subject to consent and applicable laws)
-
Fraud prevention, security monitoring, and risk management
5. Consent and Notification
Where required, we will obtain your consent before collecting, using, or disclosing your Personal Data. We will notify you of the purposes for which your data is collected, used, or disclosed.
You may withdraw your consent at any time, subject to legal or contractual restrictions.
6. Disclosure of Personal Data
We may disclose your Personal Data to:
-
Employees and authorised personnel
-
Service providers (e.g. logistics, IT, payment processors)
-
Business partners, collaborators, and sponsors
-
Regulatory authorities or government agencies
-
Professional advisors (e.g. auditors, lawyers)
All third parties are required to protect your Personal Data.
7. Cross-Border Transfers
Your Personal Data may be transferred between Malaysia and Singapore, and to other jurisdictions where necessary. We will ensure that such transfers comply with applicable laws and that adequate protection is provided.
8. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect your Personal Data from unauthorised access, disclosure, or misuse.
9. Retention of Personal Data
We retain Personal Data only as long as necessary to fulfil the purposes outlined in this Policy or to comply with legal and regulatory requirements. Transaction records may be retained for audit, tax, and compliance purposes.
10. Data Breach Management
In the event of a data breach, we will take appropriate steps to assess and mitigate the impact and, where required under applicable laws, notify relevant authorities and affected individuals.
11. Access and Correction
You have the right to:
-
Request access to your Personal Data
-
Request correction of inaccurate or incomplete data
Requests may be made via the contact details below.
12. Marketing and Do Not Contact Preferences
We will only send marketing communications in accordance with applicable laws. Where required, we will obtain your consent.
For Singapore users, we comply with applicable Do Not Call (DNC) requirements. You may opt out of marketing communications at any time.
13. Cookies and Website Usage
Our website uses cookies to:
-
Enhance user experience
-
Analyse traffic and performance
You may manage cookies through your browser settings.
14. Data Protection Officer (DPO)
We have appointed a Data Protection Officer responsible for ensuring compliance with applicable data protection laws.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Updates will be published on our website.
16. Contact Information
For any enquiries, requests, or complaints:
Kloth Malaysia Sdn Bhd & Kloth Singapore Pte Ltd
Email: ask@klothcircularity.com
