top of page

PRIVACY & COOKIES POLICY

PRIVACY 

NOTICE

This Privacy Notice describes how we collect, use, disclose, transfer, store and otherwise process your personal data when you are using our platforms, in general, to any of the channels or means you may have used to interact with us. The main ones are our website and online customer service (hereinafter collectively referred to as "Platform"). Please read the Privacy Notice carefully and familiarise yourself with our privacy practices before using our Platform or providing your personal data.

​

In addition to this Privacy Notice, specific privacy notices might apply depending on the Platform used. We will, in each case, provide you with the applicable privacy notice.

​

The general provisions shall apply to you, regardless of your location.

1. Responsibility

HAYA GROUP BUSINESS (referred to as “HAYÄ€”, “we”, “us” or “our”) is responsible for and controls the processing of your personal data with respect to personal data collected by the Platform and is committed to protecting and respecting your privacy. To the extent that personal data localisation requirements apply, we will comply with these requirements.

2.What Types of Personal Data We Collect and How We Use Your Personal Data

Depending on the purpose for which we process your data from time to time, as explained below, we need to process one or other data, which will in general be, depending on each case, as follows:

  1. your identity data (for example, your name, surname, image, language, and country from which you interact with us, contact data, etc.);

  2. economic and transactions information (for example, your payment or card data, information on your purchases, orders, returns, etc.);

  3. connection, geolocation, and/or browsing data (for example, the location data, the device identification number or the advertising ID, etc.);

  4. commercial information (for example, if you have subscribed to our newsletter),

  5. information about your tastes and preferences.

​

When we ask you to fill in your personal data to give you access to any functionality or service of the Platform, we will mark certain fields as compulsory, since this is information that we need to be able to provide the service or give you access to the functionality in question. Please take into account that, if you decide not to make such data available to us, you may be unable to complete your user registration or may not be able to enjoy those services or functionalities.

In specific cases, a third party may have provided us with information about you by using a feature or service on the Platform, for example by sending you a gift card or shipping an order to your address. In these cases, we only process your data where relevant to this feature or service, as stated in this Privacy Policy.

​

In other cases, we may collect information passively, as we may use tracking tools like browser cookies and other similar technology on our Platform and in communications we send you.

​

Depending on how you interact with our Platform, i.e., depending on the services, products, or functionalities that you wish to enjoy, we will process your personal data for the following purposes:

  1. to manage your registration as user of the Platform and provide you with HAYÄ€'s Services, process your orders or fulfill the contract between you and HAYÄ€;

  2. for the development, performance, and execution of the purchase or services contract that you executed with Us on the Platform;

  3. to communicate with you and reply to your questions or comments submitted through email, our online platforms, or other Customer Services channels, including social media accounts;

  4. to recommend and display content and advertisements tailored to you;

  5. to analyze the usability and quality, so as to improve our services.

3. How We We use cookies and similar tracking technologies on our Platform
a) What Are Cookies?

Cookies are small text files that are transferred from our Platform and stored on your device. Our Platform may use "cookies" and other technologies such as pixel tags and web beacons (collectively referred to as "Cookies"). Cookies may be stored on your computer. Cookies not set by us will not be accessible to us.

​

b) How We Use Cookies

Cookies are an essential part of our how Platform works. The main goal of our Cookies is to make your browsing experience as easy and efficient as possible. For example, they are used to remember your preferences (language, country, etc.) when browsing and during future visits. We also use our Cookies to continuously improve our services and Platform and to offer customized advertising according to your browsing habits.

​

Information collected on Cookies also allows us to improve our Platform by making estimates on statistical data and patterns of use (number of visits, most visited sections, visit time, etc.), gain a statistical understanding of how users interact with the Platform so as to improve our services and to adapt the Platform to your individual interests, accelerate searches, etc.

​

We may sometimes use Cookies to obtain information that enables us to display advertising, from our Platform, third-party platforms, or any other means, based on an analysis of your browsing habits (products visited, sections consulted, etc.).

​

In any case, the Cookies we use never store sensitive information such as passwords, credit or debit card details,etc.

​

c) Third-Party Tracking and Online Advertising

We partner with third parties to display advertisements on our websites and apps or to manage our advertisements on other sites. Our third-party partners may use cookies or similar tracking technologies to provide advertisements to you based on your browsing activities and interests, please note that certain third parties may be members of some of the following self-regulatory programs for online behavioral advertising, with the relevant voluntary exclusion options:

​

If you wish to opt out of interest-based advertising, you can manage Cookies as described in the following paragraph. Please note that opting out of interest-based advertising does not mean you will no longer see advertising on your device – it just means that adverts may no longer be tailored to your interests.

​

d) Clear/Disable Cookies

Depending on your mobile device and operating system, you may not be able to delete or block all cookies. Please note that if you choose to refuse all cookies, you may not be able to use the full functionality of our Platform. These settings will typically be found in the "Options" or "Preferences" menu of your browser.

​

See the instructions below on how to manage cookies in some common web browsers:

​

For more information about cookies and instructions on how to configure your browser to accept, delete or reject cookies, see www.allaboutcookies.org.

​

Please note that deleting or blocking cookies may not be effective for all types of tracking technologies, such as Local Storage Objects (LSOs) like HTML5.

​

If the "Do Not Track" function is enabled in your browser, we will respect your choice.

4. How Long We Keep Your Personal Data

We will only store your personal data for as long as necessary to achieve the collection purposes set out in this Privacy Notice, unless a longer retention period is required by law. If we are required by law to store your personal data beyond this period (such as for tax and commercial law reasons), we will delete the personal data at the end of this storage period.

​

After the expiry of the aforementioned retention periods, we will delete or anonymize your personal data.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use and disclosure of your personal data, the purposes for which we process the personal data, and the applicable legal requirements.

​

If, after you sign up for our promotional emails, you unsubscribe from receiving our promotional emails, we will delete your personal data from our mailing lists. However, we will continue to store your email address in a blocklist to ensure that you will not receive any further communication.

5. How We Disclose Your Personal Data

At times HAYÄ€ may make certain personal data available to other companies that are wholly or jointly controlled by us ("Affiliates") and other third parties that work with HAYÄ€ in order to provide Services to you, i.e.:

  1. Providers and partners of services related to logistics, transport and delivery, and/or their partner establishments.

  2. Providers of customer support-related services.

  3. Service providers and collaborators related to marketing and publicity, such as advertising agencies, advertising partners, or social media in certain cases may act as joint controllers.

  4. Law enforcement, regulators, and other parties for legal reasons as required by law, or if we reasonably believe that such action is necessary (a) to comply with a subpoena or other legal proceedings, legal actions, or government agency requests; (b) when we believe in good faith that disclosure is necessary to comply with the law and the reasonable requests of law enforcement; (c) to protect and exercise our legal claims, rights, and property; (d) to protect your rights, property or personal safety or that of others; (e) to investigate fraud and (f) to protect the security or integrity of our Services.

  5. The public, when posted in certain public spaces connects and interacts with others. Your profile information or information that you post in a forum or on a blog, including personal data, will be accessible to other users or the general public by default when you create it. Such content will be accessible by the general public or the members of the Service depending on the Service used.

  6. Otherwise with consent: We may disclose your personal data to certain other third parties with your consent.

6. How We Protect Your Personal Data

  1. The security of your personal data is very important to us. We have taken measures in accordance with industry standards to protect personal data collected in connection with our Platform and prevent it from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

  2. In case of a personal data security incident, we will act in accordance with applicable law and notify you and/or the competent data protection authority of any such security incident where required, and take measures to mitigate any risks arising therefrom.

7. Your Rights Regarding Your Personal Data

We undertake to keep your personal data confidential and to ensure that you may exercise your rights. You may exercise your rights free of charge by contacting us using the "Contact Us" section, via e-mail or telephone, and inform us of the reason for your request and the right that you wish to exercise.

​

If we consider this necessary to be able to identify you, we may request you to provide a copy of a document evidencing your identity.

​

In particular, notwithstanding the purpose or legal basis, we use to process your data, you have the following rights:

  1. To request access to your personal data that we hold. We remind you that where you are a Platform registered user you may also consult this information in the relevant section of your online account.

  2. To request that we rectify the personal data that we hold. Please bear in mind that if you are a registered user on the Platform, you may also access the relevant personal data section of your online account to change or update your personal data. In any case, please take into account that, on actively making your personal data available to us through any procedure, you guarantee that they are true and accurate, and you undertake to notify to us any change or modification of your data. You will be liable for any loss or damage caused to the Platform or to the person responsible for the Platform or to any third party by reporting erroneous, inaccurate or incomplete information in the registration forms. Please remember that, as a general rule, you must provide us only with your own data, not with those of third parties, other than to the extent otherwise permitted in this Privacy and Cookies Policy.

  3. To request that we erase your personal data to the extent that they are no longer necessary for the purpose for which we need to keep processing them, as we have explained above, or when we are no longer legally permitted to process them.

  4. To unsubscribe from marketing communications, you may unsubscribe from such communications at any time using the method provided in each promotional message.

  5. To request that we limit the processing of your personal data, which entails that in certain cases you can request us to temporally suspend the processing of the data or that we keep them longer than necessary.

8. Third-Party Websites

  1. HAYÄ€ Services may contain links to third-party websites and services. You can choose whether to access websites or accept services provided by third parties or not. For example, the "Follow us" function on our official website provides links to our official social media accounts (such as Facebook, Instagram, LinkedIn and Twitter) where you can view marketing or promotional information published by HAYÄ€.

  2. We do not control third-party privacy and data protection policies and do not accept any responsibility or liability for such policies. At the same time, such third parties are not bound by this Privacy Notice. Therefore, before submitting personal data to third parties, we strongly recommend that you refer to the privacy protection practices of such third parties.

9. Changes To The Privacy and Cookies Policy

We may amend the information contained in this Privacy and Cookies Policy when we consider this appropriate.

Should we do so, we will notify you by various procedures through the Platform (for example, through a banner, a pop-up, or a push notification), or we may even send you a notice to your e-mail address when the change in question is relevant to your privacy, for you to be able to review the changes, assess them and, as the case may be, object or unsubscribe from any service or functionality. In any case, we suggest you review this Privacy and Cookies Policy from time to time in case minor changes are made or we make any interactive improvement, taking the opportunity that you will always find it as a permanent point of information on our Website.

10. Language

This Privacy and Cookies Policy is drafted in the English and Bahasa Malaysia language. In the event of any inconsistency between the English version and the Bahasa Malaysia version of this Privacy and Cookies Policy, the English version shall prevail over the Bahasa Malaysia version.

bottom of page