PERSONAL DATA PROTECTION NOTICE

SURENPOWER ENTERPRISE (collectively referred to as “we”, “us”, “our”) respects and is committed to the protection of your personal data and your privacy. This Personal Data Protection Notice (“Notice”) explains how we collect and handle your personal data in accordance with the Malaysian Personal Data Protection Act 2010 (“Act”). Please note that we may amend this Notice at any time without prior notice and any such amendment will be notified via our website or by email.

(1) Personal Data

1.1 Type of personal data

Personal data means any information which relates to you and which was collected or provided to us for the purposes stated in Section (2) below.

Personal data may include your

• Name
• Contact details (including mobile number and e-mail address)
• Address
• Gender
• Date of birth
• Information in audio and/or video format (including voice, video recording, closed-circuit television CCTV or security recording)
• Images (including photographs)
• Any other information that may be required by us to provide you with the services stated in Section (2) below.

1.2 Source of personal data

We collect your personal data directly from you, such as through our website or indirectly from third parties. For example:

• when you provide your personal data online;
• when you contact us directly online or physically upon enquiry of our products and / or services;
• through third parties such as our business partners;
• through cookies from the use of our website.

All provision of personal data is on a voluntary basis. However, if you decide not to provide us with any of your personal data, we may not be able to provide you with the products / services requested.

(2) Purposes for collecting and processing your personal data

Your personal data is collected and further processed as required or permitted by law and to give effect to your requested commercial transactions, including the following:

• to contact you regarding our latest product / services information, upcoming events, promotions, advertising, marketing and commercial materials which we feel may interest you upon your request;
• for our internal records management;
• to carry out market analysis and research and customer profiling to gauge the market trends;
• to provide you with customer support;
• to ensure that the content of our website is presented in the most effective manner for you and for your computer and / or device; and
• for internal investigations, audit or security purposes.

We will only keep your Personal Data for as long as is necessary to meet the purposes outlined above.

(3) Disclosure or transfer of personal data (within or outside of Malaysia)

Your personal data provided to us may be disclosed or transferred to the following classes of third parties (within or outside of Malaysia) as required under the law or pursuant to relevant contractual relationships (for example, where we appoint third party service providers) or for the purposes or directly related to the purposes stated in Section (2) above:

• Companies related to the SURENPOWER ENTERPRISE (including subsidiaries, holding companies and associated companies);
• potential or actual purchasers, successors-in-title of the business or share (wholly or in part) of the SURENPOWER ENTERPRISE (including their advisers and representatives) as a result of a potential, proposed or actual sale of business, disposal, acquisition, merger or re-organisation;
• our business partners such as insurance companies, banks and financial institutions, as and when required or authorised by law;
• government departments or agencies, statutory authorities and industry regulators, as and when required or authorized by law;
• any person to whom we are compelled or required to do so under law or in response to a competent or government agency;
• law enforcement agencies; and
• third parties appointed by us to provide services to us or on our behalf (such as auditor, lawyer, company secretary, service providers, printing companies, telecommunications company and contractors).

(4) Websites

4.1 Links to other sites

Our websites may contain links to other websites not related to the SURENPOWER ENTERPRISE and we therefore assume no responsibility for the contents or the privacy policies and practices on those websites. We encourage all users to read the privacy statements of those sites, as their privacy practices may differ from those of the SURENPOWER ENTERPRISE.

4.2 Cookies

In processing your information, cookies, which are text files placed into the memory of your computer, may be used. We are able to use these cookies to identify you. We may be able to collect the following information during your visit to our website and / or the fully qualified domain name from which you accessed our site, or alternatively, through your internet protocol (“IP”) address:

• the date and time in which you accessed our website;
• the URL of any webpage from which you accessed our website; and
• the web browser which you are using and the pages which you have accessed.

Some websites may require you to provide a limited amount of information in order to obtain the services you requested (i.e. name, email address, contact number). This personal data will only be used for its intended purpose, i.e. to respond to your message or deliver the requested service.

(5) Keeping your Personal Data secure

We will use reasonable technical and procedural measures to safeguard your Personal Data, for example by:

• ensuring that access to any personal account you have with us is controlled by a password and username which are unique to you;
• storing your Personal Data on secured servers; and
• restricting access to Personal Data on a ‘need to know’ basis.

Whilst we will use all reasonable efforts to safeguard your Personal Data, please note that the use of the internet and/or our Platforms cannot be made entirely secure and we therefore are unable to guarantee the security or integrity of any Personal Data which is transferred from you or to you via the Platforms.

(6) Further rights of data subjects in the European Union (“EU”)

If you are a data subject in the EU, you may contact us to exercise the following further rights:

• request for the erasure of your Personal Data;
• request for the restriction of processing of your Personal Data;
• object to the processing of your Personal Data; and/or
• request to transfer your personal Data to you or a third-party.

All requests made to us in exercising the rights above will be processed within a reasonable time except where we refuse such requests in accordance with any applicable laws or regulations.

(7) Changes to this Policy

We may amend this Policy (including the Cookies Policy) from time to time. The updated versions will be posted on our Platforms and date stamped so that you are aware of when the Policy was last updated. If we make significant amendments to the Policy, we will notify you in advance and allow you the opportunity to review the revised Policy prior to such changes taking effect. We also recommend that you check the relevant websites or sections of the Platforms regularly for any updates.

(8) Right to access and amend personal data

You have the right to access and correct your personal data held by us. We will make every endeavour to ensure your personal data is accurate and up-to-date therefore you can log in to your account via the members’ portal to update your personal data.

(9) Limiting the processing of personal data, further enquiries and complaints

If：

• you would like to obtain further information on how to limit the processing of your personal data; or
• you would like to make an enquiry or have any requests in respect of your personal data;

(10) Conflict

In the event of any conflict between this English language Personal Data Protection Notice and its corresponding Bahasa Malaysia and Chinese language Personal Data Protection Notice, the terms in this English language Notice shall prevail.

Updated 30 October 202