Last updated: June 9, 2023
This Privacy Notice and its Addendum(s) (“Privacy Notice”) describe how Ghost Kitchens Sdn Bhd, its respective subsidiaries, affiliates, associated companies and jointly controlled entities (collectively “COOX”, “we”, “us” or “our”) collect, use, process and disclose your Personal Data through the use of COOX mobile applications and websites (respectively “Apps” and “Websites”), as well as products, features and other services globally, operated by COOX (collectively, “Services”).
This Privacy Notice applies to our consumers, agents, vendors, suppliers, partners (such as delivery service provider and merchant partners), contractors and service providers (collectively “you”, “your” or “yours”).
1. Collection Of Personal Data
1.1 Types of Personal Data We Collect
We may collect various types of personal data from you, including but not limited to:
Demographic Information: Such as age, date of birth, gender, nationality, race and language preference.
Contact Information: Such as name, email address, postal address, and phone number.
Account Information: Such as username, password, and other credentials used to access our services.
Payment Information: Such as credit card details, bank account information, and other financial information necessary for payment processing.
Usage Data: Such as IP address, device information, browser type, and operating system.
Location Data: Such as GPS data or information about your approximate location.
Communication Data: Such as records of your communication with us, including emails, chats, or phone calls.
Marketing Activity Participation Data: Such as the pictures, audio, or videos you may submit, which may include images of yourself;
Merchant On-Boarding Data: Such as company details, government-issued identification numbers, business information and financial information.
Other Information: Any other information you voluntarily provide to us.
1.2 Collection Methods
We may collect personal data when you:
- Create an account on our website or mobile application.
- Place an order for our products or services.
- Contact our customer support team.
- Participate in surveys, promotions, or contests.
- Interact with our website or mobile application.
- Provide feedback, reviews or user-published content.
- Subscribe to our newsletters or marketing communications.
- Connect with us through social media platforms.
We may collect personal data from other sources, including but not limited to:
- Referral programmes;
- Our business partners, such as delivery service partners and payment providers;
- Insurance and financial providers;
- Marketing services providers or partners.
- Credit bureaus, alternative credit scoring agencies and any other credit reporting organizations;
- Publicly available or governmental sources of data;
- when our users add you as an alternative contact
2. Use Of Personal Data
We use the personal data we collect for the following purposes:
Providing User Support: To process your orders, deliver product and services and to resolve user support issues. For example, we may investigate and address concerns; monitor and improve our user support responses; respond to questions, comments and feedback; and inform you about steps taken to resolve user support issues.
Analytics and Research: To conduct research, analysis, and marketing activities to improve our services and understand customer preferences.
Legal Obligations and Consent: To obtain your consent for specific purposes as required by applicable laws, and to comply with legal obligations, enforce our terms of service, and protect our rights and interests.
Marketing and Promotions: To send you content relating to our products or services (that may be of interest or relevance based on your profile). For example, we may send you special offers, alerts, newsletters, updates, mailers, promotional materials, special privileges, festive greetings; and notify, invite and manage your participation in our events or activities.
Communication: To communicate with you regarding your orders, inquiries, or promotional offers, by various means, where applicable (including by SMS, chat applications (e.g. WhatsApp, LINE, WeChat, Facebook Messenger), push notification, call, and by email).
If you wish to unsubscribe to the receiving of such marketing communications, please inform us at our contact details below. Please note that while you may opt out of marketing or promotion communications, we may still send you service-related messages (such as information on your transactions etc.).
3. Disclosure Of Personal Data
We may disclose your personal data to third parties in the following circumstances:
Service Providers: We may share personal data with service providers and business partners who assist us in operating our business and providing our services. These third parties are bound by confidentiality obligations and are prohibited from using your personal data for any other purposes.
Legal Compliance: We may disclose personal data to comply with legal requirements, such as responding to lawful requests from public authorities, government agencies, or law enforcement entities.
Subsidiaries and Affiliates: We may share personal data with our subsidiaries, associated companies, jointly controlled entities and affiliates as we share resources to improve our product and services.
Protection of Rights and Interests: We may disclose personal data to protect our rights, safety, or property, or that of others.
With Your Consent: We may disclose personal data to third parties with your consent or as otherwise disclosed at the time of collection. In the event that you are required to furnish any documentation or information to us for any purpose which may contain such sensitive Personal Data (which is not required for that purpose), you agree to redact such sensitive Personal Data before providing such documentation or information to us.
When you provide Personal Data of Other Individuals to Us: In some situations, you may provide Personal Data of other individuals (such as your spouse, family members or friends) to us. If you provide us with their Personal Data, you represent and warrant that you have obtained their consent for their Personal Data to be collected, used and disclosed as set out in this Privacy Notice.
Personal Data of Minors: As a parent or legal guardian, please do not allow minors under your care to submit Personal Data to COOX. In the event that such Personal Data of a minor is disclosed to COOX, you hereby accept and agree to be bound by this Notice and take responsibility for his or her actions.
4. Retention Of Personal Data
5. INTERNATIONAL TRANSFERS OF PERSONAL DATA
Your personal data may be transferred to and processed in countries outside of your own, including countries that may have different data protection laws than your country of residence. We take appropriate measures to ensure that any such transfers comply with applicable data protection laws.
6. COOKIES AND ADVERTISING ON THIRD-PARTY PLATFORMS
6.1 Cookies and Similar Technologies
6.2 Advertising on Third-Party Platforms
7. Protection Of Personal Data
We take appropriate technical and organizational measures to safeguard your personal data from unauthorized access, disclosure, alteration, or destruction. We employ industry-standard security measures to protect the confidentiality and integrity of your personal data. Nevertheless, please understand that the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted through any online means, therefore, any transmission remains at your own risk.
8. Your Rights Over Your Data
Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
Erasure: You have the right to request the erasure of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes it was collected or if you withdraw your consent.
Objection and Restriction: You have the right to object to the processing of your personal data or request restrictions on the processing under certain circumstances.
Marketing Communications: You have the right to opt-out of receiving marketing communications from us at any time by following the unsubscribe instructions provided in the communication or by contacting us.
9. AMENDMENTS AND UPDATES