TH Privacy Notice
This Privacy Notice outlines how TH collects, records, holds, stores, organises, modifies, discloses, uses, and destroys your personal data in relation to the handling and management of hajj matters at TH (hereafter referred to as processing).
"TH" or "we" in this notice refers to TH headquarters and our branches in Malaysia and other countries.
This Privacy Notice is provided in both Malay and English versions. In the event of any inconsistency between the two versions, the Malay version shall prevail. Should there be any conflict between this Privacy Notice and the terms and conditions of any specific product or service regarding how we process your personal data, the terms and conditions of the specific product or service shall apply.
Personal Data
"Personal Data" refers to any information relating to a commercial transaction that directly or indirectly concerns an individual, who is identified or identifiable from the information or from other information in TH’s possession, including any sensitive personal data and opinions expressed about the individual.
"Sensitive Personal Data" refers to information regarding an individual's health, physical or mental condition, political opinions, religious beliefs, or other similar beliefs, any misconduct or alleged misconduct by the individual, or any other personal data as determined by the Minister responsible for personal data protection through an order published in the Gazette.
Notification and Consent
When you request information or subscribe to our products and services, you may be required to provide your personal data to TH. By doing so, you consent to the use of your personal data by TH in accordance with this Privacy Notice. Your personal data may also have been submitted to TH by third parties (for example, by your spouse, a company where you are a director, officer, or shareholder, or a partnership where you are a partner) for products or services required by these third parties from us. In this context, the terms in this Privacy Notice will also apply to any individuals whose personal data has been submitted to TH and/or obtained by means as outlined in Section 4 of this Privacy Notice.
You have the option, at any time, to not provide your personal data or to withdraw your consent for TH to process your personal data. However, failure to provide such personal data or the withdrawal of your consent may result in TH being unable to provide its products and services to you effectively and continuously.
What types of personal data do we collect?
The types of personal data we collect include, but are not limited to your name, contact address, age, occupation, marital status, financial information, identification card, passport, place of birth, and history of your transaction dealings.
We may collect your sensitive personal data if you engage with TH in a manner that requires you to disclose such sensitive personal data to us.
We will only use your sensitive personal data to provide the services you require. If we process your sensitive personal data, we will obtain your consent first.
The personal data we collect can be categorised as either mandatory or voluntary. Mandatory personal data is required for us to provide our products and services to you. If you do not provide such personal data, we will not be able to offer our products and services to you. Voluntarily provided personal data refers to data that is not mandatory but enables us to better serve you. If you do not provide this data, you will still be able to subscribe to our products and services. The distinction between mandatory and voluntary personal data varies depending on the product or service we offer.
How Do We Collect Your Personal Data?
We obtain your personal data in various ways, such as:
- When you subscribe to or use any of the services we provide.
- When you contact TH through various methods, such as application forms, emails and letters, phone calls, or conversations with our call centre. If you contact us or we contact you via phone, we may monitor or record the call for quality assurance, training, and security purposes.
- From the analysis of your transactions.
- We may also obtain your personal data when you participate in customer surveys or when you register for any of our contests or promotions.
- When we acquire any data and information from authorised parties (e.g., regulatory and enforcement agencies as permitted.
- When we obtain any data and information from third parties.
- When you enter into any commercial transactions with TH, including but not limited to, providing goods and/or services or your professional services.
- From TH’s website and other social media platforms.
- From public sources.
What Is the Purpose of Processing Your Personal Data?
We may process your personal data for the following reasons:
- To assess your application for any of our products and services.
- To manage and maintain your accounts and facilities.
- To evaluate your financial needs and proceed with the fulfilment of contractual obligations between TH and yourself.
- To respond to your inquiries and complaints and to resolve disputes.
- For internal functions such as evaluating marketing effectiveness, market research, analysis, and statistical modelling, reporting, audit management, and risk management, as well as fraud prevention.
Additionally, we may use your personal data to fulfil any regulatory requirements and for any other reasons related to the provision of services you require.
To Whom Do We Disclose Your Personal Data?
Your personal data in our possession will be kept confidential. However, to enable us to provide products and services to you effectively and continuously and to comply with any legal and regulatory requirements, we may need to disclose your personal data to:
- Other entities within TH such as its subsidiaries and its associates.
- Our authorised agents and service providers with whom we have contractual agreements for certain functions, services, and activities.
- Our strategic partners and advisors/consultants.
- Enforcement, regulatory, and governmental agencies, as permitted or required by law, authorised by any court order, or to fulfil obligations to regulatory authorities.
- Parties authorised by you.
The disclosure of your personal data may involve transferring your personal data to locations outside Malaysia, and by providing your personal data to us, you agree to such transfers necessary for providing the services you requested and for fulfilling any contractual obligations you have with TH, including for the purposes of storage and hajj management.
You may receive marketing notifications from us or other entities regarding products and services that may interest you. If you wish to opt-out of receiving these marketing notifications, please inform us to withdraw your consent, and we will cease processing and sharing your personal data with other entities for the purpose of sending you marketing notifications.
You have the option to withdraw your consent from receiving material/ information about marketing or promotion. You may contact us by using the contact information provided below. Please note that as soon as we receive confirmation that you wish to withdraw the consent for marketing or promotional material/ information, it may take up to fourteen (14) working days before the withdrawal of consent to appear in our system. Therefore, you may still receive material/ information about marketing or promotion during this period.
Please note that even if you choose to stop receiving marketing or promotional materials, TH may still contact you for other purposes related to your account, facilities, or services you hold with TH. If you have provided third-party personal data to TH, please ensure that you have obtained consent from the relevant third party for the processing and disclosure of their personal data, and that this Privacy Notice has been brought to their attention.
How Do We Protect Your Data?
The security of your personal data is our priority. TH takes all necessary physical, technical, and organisational steps to ensure the safety and confidentiality of your personal data. Should we disclose any of your personal data to the parties mentioned in Section 6, they are obliged to protect the personal data provided to them appropriately.
How Long Can We Retain Your Personal Data?
We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected or to comply with legal, regulatory, and internal requirements.
Changes to the Privacy Notice
Please note that we may update this Privacy Notice from time to time. If there are significant changes to this Privacy Notice, we will notify you by displaying a notice of the changes via print or electronic media within a timeframe deemed appropriate by us. Please review this Privacy Notice periodically so that you remain informed about how we protect your information.
How Can You Access/Correct/Update Your Personal Data?
We are committed to ensuring that your personal data in our possession is accurate, complete, not misleading, and up-to-date. If there are any changes to your personal data or if you believe that the personal data we hold is inaccurate, incomplete, misleading, or not up-to-date, please contact us so we can take the necessary steps to update your personal data.
You have the right to access your personal data by contacting us. We may also take steps to verify your identity before fulfilling such requests.
How Can You Contact Us?
If you need to contact us, you may visit any of our branches or call our Customer Service Center (THCC) Hotline +603-6207 1919.