This statement outlines the Privacy Policy and practices of Taiyou International Sdn. Bhd. (the “Company”), its subsidiaries, and associated companies worldwide (collectively, the “Group”) regarding the collection, use, and/or disclosure of customers’ personal data. This statement is provided in accordance with the Personal Data Protection Act (Act 26 of 2012) (the “PDPA”).

Please note that this Privacy Policy complements, and does not limit or replace, the purposes for which you provide the Group with your personal data, which may be expressly stated in any form used for submission of personal data to the Group.

Personal Data

What kind of personal information we collect
The personal information collected by us may include (but is not limited to) the following:Name, Age, Gender, Date of Birth

• Race, Nationality, and Identity Card Number / Passport Number
• Contact information including Home Address, Telephone Number, and Email Address
• Your purchase details and history to help us offer tailored promotions to you

The purposes for collecting your personal data include:

• Providing updates on the latest sales and promotions
• Offering promotions from third-party merchants or strategic partners that we cooperate with to provide benefits to our customers
• Enabling your use of the services provided by the Group, including necessary communication (via SMS, email, etc.)
• Addressing enquiries made by you
• Maintaining and updating data
• Conducting statistical analysis
• Administrative or operational purposes
• Tax filing preparation
• Processing credit notes and refunds
• Collecting fees, charges, and expenses for services provided
• Verification and identification purposes
• Carrying out billing, accounting, auditing, and maintaining proper book-keeping to explain the Company’s operations and business
• Disclosure of relevant records to auditors for financial report preparation

If you have provided personal data of individuals other than yourself to the Group, you confirm that you have obtained the requisite consent from these individuals for the collection, use, and disclosure of their personal data.

Data Quality

The Company will take reasonable steps to ensure that the personal data it collects, uses, or discloses is accurate, complete, and up to date.

Data Security

The Company will take reasonable measures to protect the personal data it holds from misuse, loss, unauthorized access, modification, or disclosure. The Company will not retain personal data longer than necessary and will take reasonable steps to destroy or permanently de-identify personal data when it is no longer needed.

Upon your written request, you are entitled to access or correct the personal data about you that is in the possession or under the control of the Group. A fee may be charged (if necessary) for processing your request. You may send your data access or correction request, or any inquiries about this policy, by making a written application to us at: inquiry@combi.com.my.

Access and Correction

You are entitled to access the personal data about you held by the Company and information about how it has been used or disclosed in the past year. This can be done by making a written application to the Designated Person (as defined below). The Company reserves the right to charge a fee for this service and to refuse requests that it deems to occur with unreasonable frequency.

If you request a correction of an error or omission in your personal data, the Company will make such corrections as soon as practicable and send the corrected data to any organizations that received it prior to the correction, unless that organization does not require the corrected data for any legal or business purposes.

The Company may choose not to provide access or correction in accordance with exceptions under the PDPA, including cases where:

• The Company has reasonable grounds to believe the correction should not be made
• The request is frivolous or vexatious, or the information requested is trivial
• The personal data relates to an ongoing prosecution
• Disclosure would reveal confidential commercial information that may harm the Company’s competitive position
• The personal data was collected for an investigation and proceedings have not been completed

Transborder Data Flows

If your personal data is transferred to a country or territory outside Malaysia, we will ensure that the recipients provide a standard of protection to your personal data that is comparable to that provided herein.

Personal Data Erasure

You may request the deletion of your personal data by emailing inquiry@combi.com.my. Upon deletion, all collected information will be removed from our database, and all loyalty entitlements, including shopping points and redemption, will be forfeited.

Enquiries and Complaints

If you have any queries, requests, or wish to make any applications concerning your personal information or data, please contact us:

• Contact Number: +6019 310 7808
• E-mail: inquiry@combi.com.my