1.This Privacy Policy explains how Pickup-lah User App is a mobile application service provided by Abang Lorry Logistics (M) Sdn. Bhd. along with its affiliates (referred to as “we”, “our”, “us” and “Pickup-lah User App”) collect, hold, process, transfer and use your personal data and what corresponding rights you have in relation to the processing of personal data. For the purpose of this Privacy Policy, Pickup-lah User App means the particular entity providing Services for you on the date you receive this Privacy Policy.

2.This Privacy Policy concerns the following personal data that we collect about you when you use or access our mobile application.

3.We operate Applications and websites to act as a platform to connect users of our platform to drivers, including individuals using other modes of transportation, and to help facilitate such drivers to provide on-demand delivery services and purchasing services (“Services”). Our Applications and Services are primarily designed for adults. We will not knowingly collect any personal data from minors (i.e. persons who have not attained the age of 18 years, or the equivalent minimum age for full legal capacity in relevant jurisdiction) unless such data has been provided with prior consent from a relevant person (i.e. a person who has parental responsibility for the minor). In the event that you as the relevant person disclose such personal data of a minor under your parental responsibility to us, you hereby consent to the collection and processing of such minor’s personal data and accept and agree to be bound by this Privacy Policy. If we are informed of any collection of personal data from a minor without the consent of a person with parental responsibility over such minor, we will delete such personal data.

4.This Privacy Policy applies to personal data of (jointly referred as “you” or “your”):

(A) Visitors: individuals who visit our website or download or access the Applications without being a User as defined below;

(B) Users: individuals who: (i) use, request or receive Services; (ii) contact us through our website, Applications or by phone or other means of communications; (iii) enter into our contests or competitions; or (iv) subscribe to our updates or blog;

(C) Agents: representatives of our corporate customers or business partners such as owners, managers, leaders or other representatives of a fleet; and

5. Please read this Privacy Policy and understand it before using our website, Services or Applications.

2. Sources of personal data

1.When you visit our website, access or use our Applications and Services, we are likely to ask you to provide your personal data. If you do not provide the relevant data, we may not be able to provide you with our products or services or respond to any queries you may have. For example, you may not be able to request delivery services through our website or Applications.

2/ We will collect and process the personal data:

(A) provided by you directly to us, such as during account creation through our Applications, your entry into our competitions, contests and promotional activities, subscribing to our blog or updates, or sending us correspondence through our website, Applications or by phone;

(B) generated during your use of our website, Services and Applications. For example, we may collect your IP address and device information when you visit our website.

(C) we obtained from third parties (such as third party agents, other Users, our service providers and business partners). For example, our third party agents may provide us with additional verification and background information of Drivers/Rider other Users may provide us with your name and phone number when booking a vehicle for you.

3. We may also collect personal data through software development kits (“SDKs”) used in providing the Services.

4. We may also collect personal data from Driver/Rider who participate in our Driver Referral Program and Driver Campaign (“Drivers’ Programs”) to the extent relevant in processing Drivers’ request to enter or participate in the Drivers’ Programs.

3. What personal data do we collect about you?

The personal data collected by us about you will include the following data:

1. Users:

(1) name;

(2) email address;

(3) phone number;

(4) address;

(5) correspondence with us;

(6) IP address or other unique device identifiers;

(7) payment and banking information;

(8) geolocation;

(9) User profile information, including login details and passwords, profile picture, saved routes, language preference, beloved drivers’ details, feedback, ratings, compliments, order details, type of service used and referrer and referee information of a referral program participated by the User;

(10) Applications usage or other relevant data; and

(11) personal data voluntarily entered by the User in free text box when using our Services.

2. Drivers/Rider

(1) name;

(2) phone number;

(3) email address;

(4) home address;

(5) correspondence with us;

(6) IP address or other unique device identifiers;

(7) payment and banking information;

(8) geolocation;

(9) Driver profile information, including login details and passwords, profile picture, vehicle picture, language preference, feedback, ratings, compliments and referrer and referee information of a referral program participated by the Driver;

(10) applications usage or other relevant data;

(11) driving licence identification number and expiry date;

(12) information required to collect and pay any fees;

(13) vehicle information and picture;

(14) vehicle insurance/grant information;

(15) date of birth.

3..We only collect personal data that we reasonably need for use in connection with the purposes stated in paragraph ?4 of this Privacy Policy. We do not collect personal data that is unnecessary or excessive.

4.How do we use your personal data?

1. We may collect, process, compile and collate your personal data in the form of:

(A) Users

(1) records of profile information;

(2) remarks, records and reports of usage of our Services, including records of interaction with customer service;

(3) records of payment in respect of our Services;

(4) records and reports of usage of our Applications, including bug reports, competitions or contests and login sessions;

(5) records of your live chat history and feedback and rating to Drivers;

(B) Drivers

(1) records of profile information;

(2) records and reports of usage of our Services, including records of interaction with customer service, Driver operations, field agents and third-party service providers;

(3) records of payment in respect of our Services;

(4) records and reports of usage of our Applications, including bug reports, competitions or contests and login sessions;

(5) reports of live chat history and feedback from Users and Agents;

(6) records of your deliveries and performance; and

(7) records of your vehicles, driving permit, vehicle insurance and vehicle license.

2. We may process your personal data for the following purposes.

(A) Users

(1) to provide and maintain our Services such as to:

(a) create, update and maintain your account registered with us;

(b) enable transportation and deliveries;

(d) offer, process or facilitate payment for deliveries or our Services.

(2) to monitor the use of our website, Services or Applications;

(3) to help maintain the safety, security and integrity of our Services and prevent crime and fraud;

(4) to personalise your experience on our Applications: identifying your preferences and behaviour help us to better understand your individual needs and interests and provide you with more tailored Services. We may require your consent for some of this marketing activity. In such cases where consent is required, we will only conduct the marketing activity if we have obtained your consent. You may choose to unsubscribe at any time if you do not wish to receive such information;

(5) to improve our website, Services and Applications or develop new ones: we may use your personal data to develop new features and functionality, to improve our software and interface design, we may use the error reports to improve security features;

(6) for customer service: your personal data helps us to more effectively respond to your customer service requests, receive feedback and support needs;

(7) for research and development: your personal data will help us test, research, analyse, assist with product development and machine learning to improve your experience;

(8) to compile aggregate statistics about you and to analyse your Services and Applications usage;

(9) for non-marketing communications related to our Services such as notifications of changes to our Applications or our Services;

(10) to administer our business: we may use your personal data for the management and administration of our business (including administering and maintaining databases storing personal data);

(11) for legal proceedings or as required by regulators, government entities and official enquiries, or to comply with our legal obligations; and

(12) for direct marketing, subject to having obtained your consent in accordance with applicable laws and as contemplated in paragraph ?14 of this Privacy Policy.

(B) Drivers/Rider

(1) to provide and maintain our Services such as to:

(a) create, update and maintain your account registered with us;

(b) enable and notify transportation, orders and deliveries;

(d) offer, process or facilitate payment for deliveries or our Services.

(2) to monitor the use of our Services, Applications and website;

(3) to help maintain the safety, security and integrity of our Services and prevent crime and fraud, such as to screen Drivers;

(6) for customer service: your personal data helps us to more effectively respond to your customer service requests, receive feedback and support needs;

(7) for research and development: your personal data will help us test, research, analyse, assist with product development and machine learning to improve your experience;

(8) to compile aggregate statistics about you and to analyse your Services and Applications usage and deliveries, including performance metrics of services provided by the Driver;

(9) for non-marketing communications related to our Services such as notifications of changes to our Applications or our Services;

(10) to administer our business: we may use your personal data for the management and administration of our business (including administering and maintaining databases storing personal data);

(11) for legal proceedings or as required by regulators, government entities and official enquiries, or to comply with our legal obligations;

(12) for direct marketing, subject to having obtained your consent in accordance with applicable laws

(13) for providing benefits to the Drivers

3.If we want to use your personal data for other purposes not covered by this Privacy Policy, we will notify you and obtain your prior consent where applicable, and ensure that the use of your personal data complies with the applicable laws.

4.We are allowed to use your personal data in these ways because of one or more of the following apply:

(A) we have obtained your consent;

(B) we need to do so in order to perform our contractual obligations with you;

(D) the use of your personal data as described is necessary for our legitimate interests;

(E) we need to do so in order to response to public health incidents or to protect the vital interests of nature persons; or

(F) we have other legal bases allowed by applicable laws to process your personal data.

5.Not all data protection laws are the same so not all of the legal bases listed in paragraph ?4.4 apply in all jurisdictions (e.g. legitimate interests is not a legal basis allowed in some jurisdictions). We will process your personal data in accordance with the legal basis permitted by applicable laws in your jurisdiction.

6.Your personal data collected by us will not be sold, exchanged, shared, transferred or given to a third party for their own direct marketing purposes unless we have your prior consent or we are other legal bases allowed by applicable laws.

5.Personal data sharing and disclosure

1.Our Services require that we share your personal data with other users. This includes:

(A) sharing Users full name, phone number, personal data contained in free text box voluntarily entered by a User, and pick up or drop off locations with Drivers after a delivery has been initiated for the purposes of completing a delivery;

(B) sharing the Driver/Rider’s name, phone number, driver profile information, vehicle information, vehicle picture and geolocation with Users or Agents after a delivery has been initiated for the purposes of completing a delivery; and if you are a member of a fleet, your personal data (e.g. name, phone number, driver profile information, records and reports of usage of our Services and Applications, records of payment, vehicle information) will be shared with the owner or manager of the fleet.You should take care when disclosing your personal data to Drivers, or to Users or Agents. You understand and acknowledge that we cannot control the actions of other users with whom you may choose to share the personal data with. We do not monitor the use of such features in the normal course of business although we reserve the right to do so at our discretion. Therefore, you understand and acknowledge that we cannot and do not guarantee that the personal data you share with other users will not be reviewed by unauthorised persons. You also acknowledge that your personal data may still be accessed by the relevant users with whom you shared the personal data with after the delivery is completed. For example, the relevant user may view the transaction records which contains your personal data.

2.We may also share your personal data to provide our website, Services, Applications or for legal reasons with:

(A) our employees, officers or independent consultants;

(B) our auditors and external legal and financial advisors;

(1) IT service and software suppliers;

(2) payment processors and facilitators;

(3) cloud platform service providers;

(4) cloud storage providers;

(5) data analytics providers;

(6) research partners;

(7) marketing and advertising agencies who create our advertisements and promotions;

(8) background check and identity verification providers;

(9) vendors that assist us to enhance the safety and security of our website and Applications; and

(10) customer service providers;

(D) our insurers and bankers, and Drivers’ insurers;

(E) any regulator or government body to whom we are under an obligation or otherwise required to make disclosure under the requirements of any applicable laws;

(F) our affiliates: we share personal data with our affiliates to help us provide our Services or conduct data processing on our behalf;(G) any applicable persons if we believe it is required by applicable laws, legal process, governmental request or where the disclosure is appropriate due to safety concerns. This includes exchanging your personal data with other companies or organisations for the purposes of crime / fraud protection and prevention; or

(H) another company with connection in or during negotiations of any merger, sale of company assets, consolidation or restructuring, financing or acquisition of all or a portion of our business by or into that other company.

3.We will ensure third parties are under confidentiality obligations before we share your personal data with the third parties set out in paragraph ?5.2 of this Privacy Policy.

4.We may share your personal data with anyone other than as described in paragraph 5.2 of this Privacy Policy. Under such circumstances, we will notify you and will receive your consent beforehand if required by applicable laws.

5.We do not sell your personal data to any third parties and guarantee the legitimate and fair use of personal data only to the extent permitted by law.

6.Security of personal data

1.Once we receive your personal data, we will use all reasonably practicable steps and security measures as required under the applicable laws, to ensure that your personal data is stored securely and protected by us and our data processors against unauthorised or accidental access, processing, erasure, loss or use.

2.Your personal data will be kept confidential and secure except for the purposes and uses as set out in this Privacy Policy and will only be disclosed on a “need-to-know” basis.

3.If we outsource and entrust your personal data with data processors, we will use contractual and other means to monitor the data processors’ compliance with this Privacy Policy.

4.We have adopted organisational, physical and technical security measures that are in line with the industry standards to protect the personal data you provide. Our security measures may include SSL certificate signing, TLS encryption and hashed password storage.

5.You are responsible for keeping your Applications password confidential. You must not disclose or otherwise reveal your Applications password to any third parties. Please let us know immediately if you believe your password or record has been compromised.

6.The transmission of information through the internet is not completely secure. Although we use security measures to secure your personal data, we cannot guarantee the security of your personal data transmitted to the Applications and any transmission is at your own risk.

7.Retention of personal data

1.Personal data collected from you will not be kept longer than necessary for the carrying out of the purposes stated in paragraph ?4 of this Privacy Policy, unless otherwise required or permitted by applicable laws.

2.If your account registered with our Applications has not been accessed over a period of TWO years or we have closed your account upon your request (“End Date”), your personal data will be retained by us for as long as is necessary for the purposes stated in paragraph 4 of this Privacy Policy, or for as long as is permitted by applicable laws. We may retain your personal data for a longer period if it is necessary for us to do so to comply with our contractual or legal obligations, or you have consented to our continued retention of it.

3. At the end of the retention period, we will ensure that your personal data, all app-related data and account-related information will be deleted. For any physical documents containing your personal data, the documents will be shredded or otherwise destroyed by means that ensure the confidential and secure destruction of the documents.

4. We will ensure that our data processors only retain your personal data only for as long as is necessary for the fulfilment of the purposes stated in paragraph ?4 of this Privacy Policy. Our data processors will delete personal data held if personal data is no longer required for the purposes stated in paragraph 4 of this Privacy Policy unless any deletion is prohibited under applicable laws.

8.Your rights

1. We respect your legal rights to your personal data. We list below your legal rights and the measures we take to protect these rights. Not all data protection laws are the same so not all of these rights apply in all jurisdictions.

(A) the right to obtain information regarding the processing of your personal data and access to the personal data which we hold about you;

(B) the right to request that we rectify your personal data if it is inaccurate or incomplete;

(C) the right to request that we erase, block or anonymise your personal data in certain circumstances. Please note that there may be circumstances where you ask us to erase, block or anonymise your personal data, but we are legally entitled to retain it;

(D) in some circumstances, the right to receive some personal data in a structured, commonly used and machine-readable format and/or request that we transmit this data to a third party where this is technically feasible. Please note that this right only applies to personal data which you have provided to us;

(E) the right to withdraw your consent to our processing of your personal data. Please note, however, that we may still be entitled to process your personal data if we have another legitimate reason (other than consent) for doing so. For example, we may need to retain your personal data to comply with a legal obligation;

(F) the right to obtain information about the possibility of refusing consent and the respective consequences. When the consent is used as legal basis for the processing of personal data, you are entitled to be informed about the possibility of refusing consent and the consequence of such refusal;

(G) the right to object to, and the right to request that we restrict our processing of your personal data in certain circumstances. There may be circumstances where you object to, or ask us to restrict our processing of your personal data but we are legally entitled to continue processing your personal data and/or to refuse that request;

(H) the right to request us for the history your personal data that we have collected;

(I) the right not to be subject to a decision based solely on automated processing; and

(J) the right to lodge a complaint with the competent authority if you think that any of your rights have been infringed by us.

2.We will take appropriate technical measures to enable you to control how we use your personal data. In addition to exercising some of your rights through your Applications account, you can exercise all your rights by contacting us using the details set out in the “Contacting us” section below.

9.Third-party links

1.Occasionally, at our discretion, we may include or offer links to third-party products or services on our website or Applications.

2.These third party websites have their own separate and independent privacy policies and user terms which you must review before using their services.

3.We take no responsibility or liability for the content and activities of these third-party linked websites or their products and services.

4. We seek to protect the integrity of our website and Applications and welcome any feedback on these third party links.

10. Changes to our Privacy Policy

1.We may update this Privacy Policy from time to time in response to changing legal, technical or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable laws. You can see when this Privacy Policy was last updated by checking the “last updated” date displayed at the top of this Privacy Policy.

2.You should review this Privacy Policy periodically. By continuing to use our website, our Applications or Services you will be deemed to have accepted to the changes or updates to this Privacy Policy. If you do not consent to such changes or updates made to the Privacy Policy, we will not be able to provide you access to our Applications or provide our Services to you.

11.Contact us

1. All comments, queries, complaints, data access requests or data correction requests relating to our use of your personal data are welcome and should be addressed to: pickuplah@gmail.com

12. Direct Marketing

1.If we provide our Services or interact with you in the course of engagement with a company or business entity, we intend to directly market our website, Services or Applications to you in that capacity and for the use of that company or business entity.

2.If we provide our Services or interact with you in your personal capacity, we intend to use your personal data to directly market our website, Services or Applications to you.

(A) The type of personal data we use for direct marketing purposes are:

(1) your name

(2) your email address

(3) your phone number

(4) your address

(B) The direct marketing activities we conduct using your personal data are:

(1) Newsletters and our blog updates

(2) Promotions of our website, Services or Applications

(3) Competitions or contests held by us

(4) Updates in respect our website, Services or Application

(5) Surveys in respect of our website, Services or Applications

(6) Event invitations

(7) Festival greetings

(8) Advertisements of our website, Services or Applications

(9) Loyalty program with gifts

3.We will not use the types of personal data for the direct marketing activities described in this paragraph ?12 of this Privacy Policy unless we have received your consent.

4.You may request us to cease using your personal data for direct marketing purposes at any time email to us at pickuplah@gmail.com