PRIVACY POLICY
SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?
This Privacy Statement is intended to explain how we collect, use, disclose, store, and protect personal data in connection with our website and related activities. Where applicable, we handle personal data in accordance with the Personal Data Protection Act 2010 of Malaysia and other applicable laws.
When you use our website, make a donation, register for an activity, contact us, subscribe to updates, or otherwise provide information to us, we may collect personal information such as your name, contact details, billing or payment information, and any message or other information you choose to provide.
When you browse our website, we may automatically receive technical information such as your internet protocol (IP) address, browser type, device information, operating system, pages visited, and general usage information to help us operate, secure, and improve the website.
Email communications: With your permission, we may send you emails about our conservation work, programmes, events, opportunities to support us, and other updates.
We may use your personal data to respond to your enquiries, process donations or payments, manage registrations, issue receipts or confirmations, provide updates you have requested, improve our website and services, maintain records, comply with legal obligations, and protect the security and integrity of our website.
SECTION 2 – CONSENT
How do you get my consent?
When you provide personal information to complete a transaction, make a donation, register for an activity, request information, or otherwise use our services, we will use that information for the purpose for which it was provided and for related purposes that are reasonably necessary to fulfil your request.
If we ask for your personal information for a secondary purpose, such as sending newsletters, campaign updates, event invitations, or fundraising communications, we will ask for your consent or provide a clear way for you to opt out, where required.
How do I withdraw my consent?
If, after you opt in, you change your mind, you may withdraw your consent for us to contact you or for the continued collection, use, or disclosure of your information by contacting us using the contact details published on www.reefcheck.org.my.
SECTION 3 – DISCLOSURE
We may disclose your personal information if required or permitted by law, if necessary to protect our rights, safety, or security, or if you violate our applicable terms.
SECTION 4 – PAYMENT
We may use third-party payment processors, such as Razorpay or other providers available through our website, to process donations, purchases, or other payments. Payment information is handled by the relevant payment processor in accordance with its own terms, privacy policy, and security standards. We do not intentionally store full card numbers or security codes on our own website systems.
Our payment processors may be required to comply with applicable payment card industry standards, including PCI-DSS, for the secure handling of card information.
PCI-DSS requirements are intended to help ensure the secure handling of card information by payment processors and other service providers involved in payment transactions.
For more information, please review the applicable terms and privacy policy of the payment processor used for your transaction.
We will keep personal data only for as long as necessary to fulfil the purposes described in this Privacy Statement, comply with legal, accounting, or reporting requirements, resolve disputes, and enforce our rights. When personal data is no longer required, we will take reasonable steps to delete, anonymise, or securely dispose of it.
SECTION 5 – THIRD-PARTY SERVICES
In general, the third-party providers we use will collect, use, process, and disclose your information only to the extent necessary to provide services to us, support our website, process payments, manage communications, or fulfil other functions described in this Privacy Statement.
Certain third-party service providers, including payment processors, website hosting providers, email or communications platforms, analytics providers, and other operational service providers, may have their own privacy policies that apply to the personal data they process in providing services to us.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, certain providers may be located in, or have facilities located in, a different jurisdiction from you or us. If you proceed with a transaction or interaction involving a third-party service provider, your information may become subject to the laws of the jurisdiction in which that provider or its facilities are located.
Once you leave our website or are redirected to a third-party website or application, you are no longer governed by this Privacy Statement or our website’s applicable terms.
Links
When you click on links on our website, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
Your personal data may be transferred to, stored in, or processed in locations outside Malaysia where our service providers, technology platforms, or support partners operate. Where this occurs, we will take reasonable steps to ensure that your personal data remains protected in accordance with this Privacy Statement.
SECTION 6 – SECURITY
To protect your personal information, we take reasonable administrative, technical, and organisational precautions designed to reduce the risk of loss, misuse, unauthorised access, disclosure, alteration, or destruction.
SECTION 7 – COOKIES
We may use cookies and similar technologies to operate the website, maintain sessions, remember preferences, understand website usage, improve performance, and support security. You may be able to manage or disable cookies through your browser settings, although some website features may not function properly without them.
SECTION 8 – AGE OF CONSENT
By using this website, you represent that you have the legal capacity to use it and provide personal data, or that you have obtained the consent of a parent or legal guardian where required by applicable law.
SECTION 9 – CHANGES TO THIS PRIVACY STATEMENT
We reserve the right to modify this Privacy Statement at any time, so please review it periodically. Changes and clarifications will take effect immediately upon posting on the website. If we make material changes, we will update this page so that you are aware of what information we collect, how we use it, and the circumstances in which we may use or disclose it.
If our organisation undergoes a restructuring, merger, or transfer of operations, your information may be transferred as part of that process so that we may continue providing our services, programmes, and communications.
QUESTIONS AND CONTACT INFORMATION
You may request access to, correction of, or deletion of your personal data, subject to any legal or operational requirements that allow or require us to retain it. We may need to verify your identity before responding to such requests.
If you would like to access, correct, amend, or delete any personal information we have about you, register a complaint, withdraw consent, or request more information, please contact our team using the contact details published on www.reefcheck.org.my.