Privacy Policy
Your privacy matters. Discover how we handle your personal info with care.
Privacy Policy
(hereinafter, “the Company”, “We”, “Us” and the like) respects your privacy and firmly committed to protecting your personal data. Accordingly, in the present Privacy Policy, will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.
Purpose of this private notice
For the purposes of this Privacy Policy, “personal data” means all data that identifies you or that could be used to identify you, such as your contact details like your name, email/postal address, signature, position held and/or other information such as your IP address. It may also include information about how you use our website.
Controller
A private company under the laws and regulations of Malaysia and its registered address, will be the controller of the personal data that we collect, use and process
from you when you browse our website, you request our products and/or you contact us for any reason, among others.
Third-party links
This website may include links to third-party websites,plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
When do we collect your personal data?
The personal data we collect from and about you is as follows:
If you provide us with personal data of third parties, you confirm that you have informed them about the purposes for which their personal data will be processed and you guarantee us that you have obtained their prior and express consent to communicate us their personal data.
- Direct interactions: when you complete the forms on our website to request our products and/or when you contact us by post, telephone, or email for further information about our products and/or about us.
- Payment data: We will only request your credit or debit card information during the payment process of our products. The captured data will be sent securely to our certified payment service providers for the authorization of the transaction. In no case we visualize or access the complete data of your credit or debit card. We will never ask for your credit or debit card details by email, phone calls or any other unauthorized channel. It is the customer’s responsibility not to enter, provide or send his/her card information through channels not authorized by the company.
If you provide us with personal data of third parties, you confirm that you have informed them about the purposes for which their personal data will be processed and you guarantee us that you have obtained their prior and express consent to communicate us their personal data.
How do we use your personal data?
Your personal data are processed for the following purposes:
- To properly address your informational request or queries about us and/or our products;
- To provide you with the requested products and to send you up-to-date information and/or operational communications regarding the status of your order and/or the status of our services;
- For administrative purposes related to the process and management of the product’s orders and its delivery, verification of your payment information, accountancy and billing tasks;
- To improve your user experience on our website, improve our products and customer support by analyzing you and other customers use of our website and/or your communications with us;
- To comply with our legal obligations and/or to respond to judicial or police requirements;
- To carry out periodic checks against fraudulent, unauthorized or illegal activity on/or through our website.
Purposes for which we will use your personal data
We only process your personal data when there is a legal basis for doing so. The legal basis will depend on the reason we collect and process your personal data. In almost all cases the legal basis will be:
- The consent that you provided us with for the processing of your personal data in connection to the purposes informed at the time of collection of your data (i.e. to receive the requested information).
- To fulfill the contract with you, means, to manage your order and provide you with the ordered product and/or process your informational request.
- For compliance with our legal obligations and/or to attend to judicial or police requirements.
- Our legitimate interest regarding (i) administrative purposes (ii) credit cards and other methods of payments verifications, (iii) address possible claims regarding our services, (iv) sending commercial communications about our products which are identical or similar to those you have previously ordered, (v) enhancing the user experience when you use this website and to operate it efficiently, (vi) enhance our products offers, (vii) monitor fraudulent activity in order to preserve the security and integrity of our website. Our legitimate interest will only be applied provided that your interests and fundamental rights do not prevail.
Data retention
We will process your personal data for as long as necessary to fulfill the purposes for which they were collected and, beyond that, your personal data will be retained, duly blocked, for the necessary period we need to keep them. For example, it will be kept for as long as necessary to comply with our legal obligations and/or address possible claims related to the products sold; to finish the investigation of a fraudulent or illicit activity detected.Once the necessary retention period has ended, your personal data will be securely deleted from our information systems.
Furthermore, if you have provided us with your consent to process your personal data for specific purposes, note that you can withdraw said consent at any time. Upon receiving your withdrawal request, we will proceed to delete your personal data.
Furthermore, if you have provided us with your consent to process your personal data for specific purposes, note that you can withdraw said consent at any time. Upon receiving your withdrawal request, we will proceed to delete your personal data.
Sharing with your personal data
The Company, as an official vendor of Japan Rail West Pass, will communicate the personal data of customers that has purchased this product to JTR Web Ltd, which is the distributor of Japan Rail West Pass on behalf of Japan Railways, for the issuance of the Japan Rail West Pass ticket in the Japan Rail Exchanges Offices.
For all Products, we also may communicate your personal data to the following third parties, including but not limited to:
- credit/debit card companies to process payments and (when necessary) carry out fraud controls;
- technology service providers which host our information systems and/or or that offer us tools or technological support;
- complying with our legal obligations;
- administrative, judicial and/or police authorities in response to requirements, as long as they are required in accordance with the applicable law and regulations;
- law firms responding to claims regarding the products sold and/or to protect our legitimate interests.
Protection of your personal data
Your personal data is securely stored securely in our information systems and we have established the technical and organizational measures in order to ensure the confidentiality and integrity of your personal data and to protect it against unauthorized or unlawful processing and/or accidental loss, destruction or damage.
Likewise, we have taken reasonable measures to guarantee that all our staff, as well as the suppliers or collaborators with access to your personal data, have received adequate training regarding the processing of the personal data collected.
Although we will do our best to guarantee the protection of your personal data transmitted through our website and/or that you may provide us by others means such as email or phone, please bear in mind that you should also take precautions to keep safe your personal data such as e.g you must not enter or confirm bank details by means of fake messages and/or websites.
Likewise, we have taken reasonable measures to guarantee that all our staff, as well as the suppliers or collaborators with access to your personal data, have received adequate training regarding the processing of the personal data collected.
Although we will do our best to guarantee the protection of your personal data transmitted through our website and/or that you may provide us by others means such as email or phone, please bear in mind that you should also take precautions to keep safe your personal data such as e.g you must not enter or confirm bank details by means of fake messages and/or websites.
Your legal rights
You may, with any cost, exercise your rights of: access, rectification, erasure, restriction of processing, to object, as well as the right to the portability of your personal data, by a written request addressed to Us, sent by email to: enquiry_japanrail@j-horizons.com.my telephone, or by post to.
For security reasons and when we consider it necessary, we may request a copy of a document proving your identity before proceeding to address your data protection right request.
Your data protection right request will be responded to within one (1) month; but occasionally, this period may be extended by two (2) further months where necessary, taking into account the complexity and/or number of requests you may have made. In this case, we will notify you of such an extension together with the reasons for the delay.
When you consider it appropriate, you have the right to file a claim with the competent Data Protection Authority, such as e.g when you consider that your data protection rights have not been adequately addressed.
We remain at your disposal for any doubts or questions about the present Privacy Policy or about the processing of your personal data you may have, so don’t hesitate to contact us: : enquiry_japanrail@j-horizons.com.my.
For security reasons and when we consider it necessary, we may request a copy of a document proving your identity before proceeding to address your data protection right request.
Your data protection right request will be responded to within one (1) month; but occasionally, this period may be extended by two (2) further months where necessary, taking into account the complexity and/or number of requests you may have made. In this case, we will notify you of such an extension together with the reasons for the delay.
When you consider it appropriate, you have the right to file a claim with the competent Data Protection Authority, such as e.g when you consider that your data protection rights have not been adequately addressed.
We remain at your disposal for any doubts or questions about the present Privacy Policy or about the processing of your personal data you may have, so don’t hesitate to contact us: : enquiry_japanrail@j-horizons.com.my.