Privacy Policy

The Personal Data Protection Act 2010 (the "Act"), which regulates the processing of personal data in commercial transactions, applies to all entities under and/or related to Collective (the "Church") (collectively, “our”, “us” or “we”). For the purpose of this written notice ("Notice"), the terms “personal data”, “sensitive personal data” and “processing” shall have the same meaning as prescribed in the Act.

This Notice is meant to be read together with the Terms of Use of which cross-refers to this Privacy Policy Notice.

This Notice serves to inform you that your personal data is being processed by the Church and by using or accessing https://collective.my (the “Website”) and/or other related applications, you hereby give your consent to the processing of your personal data.

Your “personal data” includes your full name, gender, date of birth, email address, home or office mailing address, telephone number, NRIC no., passport number, bank account no. and credit or debit card nos., location, donation history, educational qualifications, religious information, preferences, interests and all other related personal data we may again collect from you on any subsequent occasion.

Where the Church collects, uses or otherwise processes any sensitive personal data, the Church shall obtain your explicit consent through an affirmative action, including but not limited to registration, submission of forms, donation transactions, subscription enrolment, electronic acknowledgement, consent checkboxes or other similar mechanisms, unless otherwise permitted by law. When you agree to the terms of this Privacy Policy, you expressly consent to the processing of your sensitive personal data.

Your personal data is being or is to be collected and further processed for:

(a)

communicating with you on any information, detail, and/or material in relation to the program, activity and/or works of the Church;

(b)

operation of the Website;

(c)

performing the general terms and conditions, including but not limited to the Terms of Use of the Website;

(d)

responding to your inquiries and/or complaints;

(e)

processing payments and the relevant documents for registration and/or subscription to any program, activity or works of the Church;

(f)

conducting surveys and/or analysis about the program, activity or works of the Church;

(g)

facilitating and administering payment transactions, including through licensed third-party payment gateway service providers, provided that payment card information shall only be retained by the Church to the extent necessary and permitted by applicable law;

(h)

transferring, storing and processing personal data outside Malaysia where reasonably required for operational, administrative or business purposes and subject to applicable legal requirements;

(i)

carrying out operational and administrative functions, including account administration, system maintenance, technical support, security monitoring, fraud prevention, auditing and record keeping;

(j)

conducting internal analysis, marketing activities, service improvement, and enhancing the Website, programmes, activities and services offered by the Church;

(k)

compliance with any legal requirements; and

(l)

such other purposes directly related to the foregoing.

(collectively, the “Purposes”).

The Church does not sell, rent or lease the personal data and/or information collected to third parties. The Church may, from time to time, contact you on behalf of external partners about a particular offering that may be of interest to you. In those cases, your unique personally identifiable information (e-mail, name, address, telephone number) is not transferred to the third party. In addition, the Church may share data with trusted partners to help us perform statistical analysis, send you e-mail or postal mail, provide support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to the Church, and they are required to maintain the confidentiality of your information.

Your personal data, and all other information that you may provide us from time to time, is being or is to be collected from: the Website(s) and/or its related applications, registration for events, programmes and Church activities, forms submitted to the Church whether in physical form or through the Website, membership applications, subscriptions and account registrations, donations, tithes, offerings and related payment transactions, inquiries, feedback, complaints and other communications with the Church, surveys, questionnaires and promotional activities, communications through social media platforms, messaging applications and other communication channels, and from third party payment gateway(s).

In operating this Website, we may use a technology called "cookies." A cookie is a piece of information that the computer that hosts our Website gives to your computer when you access a website. Our cookies help provide additional functionality to the Website and help us analyze the Website usage more accurately.

Cookies may also be used for purposes including maintaining Website functionality, improving user experience, remembering user preferences, conducting analytics, monitoring Website performance and facilitating security and administrative functions.

The Website may use different categories of cookies, including strictly necessary cookies required for the operation of the Website, functional cookies, performance and analytics cookies and other similar technologies as may be applicable from time to time.

You may configure your browser settings to refuse, disable or manage certain cookies. However, please note that disabling certain cookies may affect the functionality, performance or availability of certain features of the Website.

You have the right to request access to and to request correction of your personal data and to contact us with any inquiries or complaints in respect of your personal data (including the possible choices and means for limiting the processing of your personal data or to cease or not begin processing your personal data for purposes of direct marketing, and withdrawing your consent to the processing of your personal data, in whole or in part, subject to any applicable legal restrictions, contractual conditions and a reasonable notice period).

If you have any questions or comments about this Privacy Policy or our use of your personally identifiable information, please contact us at [email protected], which shall serve as the contact details of the Church's Data Protection Officer or designated data protection representative responsible for overseeing compliance with applicable data protection laws and handling data protection-related enquiries, requests and complaints.

You may withdraw your consent by contacting us at [email protected]. We will endeavour to process such request within fourteen (14) working days from the date of receipt of the request or within such period as may be permitted under applicable law.

Please note that where your personal data is required for the operation of the Website, administration of programmes, activities or services of the Church, processing of registrations and subscriptions, responding to enquiries, or carrying out any other purpose set out in this Privacy Policy, withdrawal of consent may affect our ability to continue providing such services, facilitate your participation in programmes or activities, respond to your requests, or otherwise carry out the purposes for which the personal data was collected and processed.

Subject to provisions of the Act:

(a)

you may, upon payment of a prescribed fee, make a data access request in writing to us; and

(b)

we may refuse to comply with a data access request or a data correction request and shall, by notice in writing, inform you of our refusal and the reasons of our refusal.

We disclose or may disclose your personal data to all entities related to the Church as stated above, related third party goods and service provider(s), third party payment gateway(s), our related corporations, business partners, service providers, governmental departments and/or agencies, regulatory and/or statutory bodies and any such third party requested or authorized by you for the Purposes.

10)

We won't share your personal information with anyone except for the situations listed above or below or unless we specifically inform you and give you an opportunity to opt out of our sharing your personal information.

11)

We may share your personal information with:

(a)

Authorized third party goods and service provider(s). Our third party authorized goods and service providers are companies that allows for the purchase of goods and certain services. These services may include fulfilling orders, processing credit and debit card payments, bank transfers, delivering packages, providing customer service and marketing assistance, performing business and sales analyses, supporting the Website functionality, and supporting surveys and other features we offer. These service providers may have access to your personal information to the extent necessary to perform their functions, but we do not allow them to share or use any of your personal information for any other purpose.

(b)

Affiliates. We may share information we collect, including personal information, with the affiliates of the Church. Sharing information with our affiliates enables us to provide you with information about a variety of products and services that might interest you. All of the Church affiliates are required to comply with applicable privacy and security laws and, at a minimum, in any commercial email they send to you, will give you the opportunity to choose not to receive such email messages in the future.

(c)

Other Situations. We also may disclose your information:

(i)

In response to a subpoena or similar investigative demand, a court order, or a request for cooperation from a law enforcement or other government agency; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by Malaysian law. In such cases, we may raise or waive any legal objection or right available to us.

(ii)

When we believe disclosure is appropriate in connection with efforts to investigate, prevent, or take other action regarding illegal activity, suspected fraud or other wrongdoing; to protect and defend the rights, property or safety of our company, our users, our employees, or others; to comply with applicable law or cooperate with law enforcement; or to enforce the Website's Terms or other agreements or policies.

(iii)

In connection with a substantial corporate transaction, such as the sale of our business, a divestiture, merger, consolidation, or asset sale, or in the unlikely event of insolvency.

12)

We may require your assistance if the personal data relating to other third parties is required to process your personal data for the Purposes and you hereby agree to use your best endeavours to assist us when required.

13)

It is obligatory that you supply us your email address, phone number, first name, last name and identification details (such as NRIC or passport) (collectively, “compulsory personal data”). If you fail to supply us with the compulsory personal data, we may refuse to process your personal data for any of the Purposes.

14)

We may transfer your personal data to a place outside Malaysia and you hereby give your consent to the transfer.

15)

You are responsible for ensuring that the information you provide us is accurate, complete, not misleading and kept up to date.

16)

If, at any time after registering, you change your mind about receiving information from us or about the use of information volunteered by you, please send us a request specifying your new choice. Please contact us as specified above.

17)

Although most changes are likely to be minor, the Church may change its Privacy Policy from time to time, and in its sole discretion. The Church encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of the Website and the services and/features therein after any change in this Privacy Policy will constitute your acceptance of such change.

18)

The Website and our related services are not intended for those under 18, and we do not knowingly collect information from those under the age of 18. Those under 18 should not submit any personal information without the permission of their parents or guardians. By using the Website, our related applications and/or services. you are representing that you are at least 18.

19)

This Privacy Policy applies only to this Website and its related applications and/or service, and not to any third-party sites. The Church’s website may contain links to third-party websites, and third-party websites may also have links to our website. Our privacy policy does not apply to external links or other websites. The operators of other websites may collect your personal information. The Church encourage you to read the privacy policies of any website you link to from our website.

20)

We take reasonable precautions to ensure the security your personal information. However, we cannot guarantee that hackers or unauthorized personnel will not gain access to your personal information despite our efforts. You should note that in using the Website and our related applications and/or services, this information will travel through third party infrastructures which are not under our control. We cannot protect, nor does this Privacy Policy apply to, any information that you transmit to other users of the Website. You should never transmit personal or identifying information to other users.

If we do not receive the declaration confirming that you have received this Notice and consent to our processing of your personal data below within fourteen (14) days from the date of this Notice, we will assume that you have consented to our processing of your personal data in accordance with the above, subject always to any explicit consent requirements imposed under applicable law. The Church may also require users to acknowledge and accept this Notice, the Terms of Use and any related policies through electronic acceptance mechanisms made available on the Website or related applications.

21)

If you have any questions, concerns, requests or complaints relating to this Privacy Policy or the processing of your personal data, including requests to exercise your rights under applicable data protection laws, you may contact our designated data protection representative at [email protected]. We will endeavour to respond to your enquiry, request or complaint within a reasonable period and in accordance with the applicable laws.