Privacy Statement

Introduction

This Privacy Statement sets out how buySolar, a platform owned by OpenSys Technologies Sendirian Berhad and its holding, related and subsidiary companies, (collectively referred to as "OpenSys", "us" or "we") collect, store and handle personal information (as defined herein) of individuals in accordance with the Personal Data Protection Act 2010 ("PDPA") and the laws of Malaysia. Please read this Privacy Statement to understand how we use the Personal Information we may collect from you. By providing your Personal Information to us, you are consenting to this Privacy Statement and the collection, use, access, transfer, storage and processing of your Personal Information as described in this Privacy Statement.
We value your trust and are committed to protecting your Personal Information. To ensure that you can make informed decisions and feel confident about supplying your Personal Information to us when using any of our OpenSys websites, products and/or services, we provide you with this Privacy Statement outlining our practices and the choices you have concerning how your Personal Information is being collected and used by us.

“Personal Information” refers to any data, whether recorded in a material form or not, which relates directly or indirectly to you. This includes any information that can be used to distinguish, identify, or contact you.

Personal Information We Collect

For us to provide you with our products and/or services and to operate in an efficient and effective manner by providing you with the best service possible, we need to collect relevant Personal Information from you. The Personal Information collected by us may include (but is not limited to) the following:-
• Contact information such as your name, date of birth, identification supporting documents (including NRIC or passport), gender, nationality and race, preferred language, current private and/or business address, mailing address, installation address, telephone or mobile phone number, fax number, email address, profile photo;
• Your financial and payment-related data;
• The status of our products and/or services you have acquired from us or subscribed to;
• Information regarding your property including, without limitation, the address, description, electricity bill information, photograph/image, and GPS coordinates of your property;
• The amount of data that has been received and/or sent by you;
• The equipment you use when accessing our products and/or services (such as your mobile handset, your computer system and platform) to customize the service for you;
• Personal Information which relates to information relating to your health, political opinions, religious beliefs, etc.;
• Your personal interests and preferences to help us tailor offerings of our products and services which would suit you best;
• Data when you visit any of our websites (for example, the pages you access, our products and/or services you browsed, etc.);
• Technical computer or mobile device information (for example type of computer/mobile device, Cookies, IP addresses, type of operating system, web browser type, the address of a referring web site (if any), etc.); and/or
• Recording of calls or chats placed by you to our help desk for our service enhancement and improvement.

The Personal Information we collect can be either obligatory or voluntary. Obligatory Personal Information is those that we require to provide you with our products and/or services. If you do not provide us with obligatory Personal Information, we would not be able to provide you with our products and/or services. Voluntary Personal Information is those that are not mandatory for us to provide you with our products and/or services. If you do not provide us with voluntary Personal Information, you can still sign up for our products and/or services. Obligatory and voluntary Personal Information differs for each product and/or service and will be indicated during the application process.

How We Collect Your Personal Information

We may collect Personal Information directly from you or through any third parties:-

• When you register interest and/or request for any information of our products and/or services (through our online portals or other available channels) and/or subscribe to our Products and/or services;
• When you communicate with us through various methods such as application forms, emails and letters, telephone calls and online chats you have with our staff or third parties;
• When you respond to any marketing materials we send out;
• When you visit or browse our websites;
• When you request that we contact you;
• When you lodge a complaint with us;
• When you provide feedback to us (for example via our websites or in hardcopy);
• When you participate in customer surveys or when you sign up for any of our competitions or promotions;
• When you enter any transactions with us including but not limited to the purchasing/providing goods and/or services; and/or
• when you submit your Personal Information to us for any other reasons.

Other than the Personal Information obtained from you directly (as stated above), we may also obtain your Personal Information from third parties we deal with or relate to you (credit reference agencies, financial institutions, etc.), and from such other sources where you have given your consent for the disclosure of Personal Information relating to you, and/or where otherwise lawfully permitted.

How We Use Your Personal Information

We may collect and use the Personal Information from you or from the category of third parties identified in this Privacy Statement, for one or more of the following purposes:-

• In verifying your identity;
• In maintaining your account with us;
• In conducting audits, reviews and analysis of our internal processes, action planning and managing commercial risks;
• In complying with any applicable rules, laws and regulations, codes of practice or guidelines or to assist in law enforcement and investigations by relevant authorities;
• In providing our products and/or services which benefit you;
• In assessing and processing your application(s) /request(s) for our products and/or services;
• In providing you with our products and/or services you have requested;
• In administering and managing our products and/or services we provide you;
• In investigating and resolving any service issues, complaints or other enquiries that you submit to us regarding our products and/or services;
• In detecting and preventing fraudulent activity;
• In keeping in contact with you and provide you with any information you have requested;
• In engaging in business transactions in respect of our products and/or services to be offered and provided to you;
• In establishing and better managing any business relationship we may have with you;
• In processing any communications, you send us (for example, answering any queries and dealing with any complaints and feedbacks);
• In helping us to monitor and improve the performance of our products and/or services, and service providers to make these more efficient;
• In managing staff training and quality assurance;
• In notifying you about any benefits and changes to the features of our products and/or services;
• In determining on how we can improve our products and/or services to you;
• In producing data, reports and statistics which shall be anonymized or aggregated in a manner that does not identify you as an individual;
• In investigating, responding to, or defending claims made against, or involving us;
• In conducting marketing activities (for example, market research, promotions, etc.);
• In maintaining records required for security, claims or other legal purposes;
• In complying with legal and regulatory requirements; and/or
• for any other purposes that is required or permitted by any law, regulations, guidelines and/or relevant regulatory authorities.

In case there are inconsistencies on how we collect or use your Personal Information between this Privacy Statement and terms and conditions of your specific product and/or service or other contractual documents, the terms and conditions of your specific product and/or service or other contractual documents shall prevail.

Disclosure Of Your Personal Information

Your Personal Information held by us shall be kept confidential. However, to always provide you with effective and continuous products and/or services and subject to any laws (including regulations, standards, guidelines and/or obligations) applicable to us we may need to disclose your Personal Information to:
• Other entities within OpenSys;
• Companies and/or organizations that act as our agents, contractors, service providers and/or professional advisers;
• Companies and/or organizations that assist us in processing and/or otherwise fulfilling transactions and providing you with products and/or services that you have requested or subscribed for;
• Our business associates and other parties for purposes that are related to the purpose of collecting and using your Personal Information;
• Financial service providers in relation to the products and/or services that you have with us or may have with us;
• Strategic partners with whom we have a relationship with for specific products and/or services if consented to, by you;
• Other parties in respect of whom you have given your express or implied consent; and/or
• Enforcement regulatory and governmental agencies as permitted or required by law, authorised by any order of court or to meet obligations to regulatory authorities.

The disclosure of your Personal Information may involve the transfer of your Personal Information to places outside of Malaysia, and by providing us your Personal Information, you agree to such a transfer where it is required to provide you the products and/or services you have requested, and for the performance of any contractual obligations you have with OpenSys including for storage purposes. We shall take reasonable steps to ensure that any such overseas entities are contractually bound not to use your Personal Information for any reason other than to provide the products and/or services they are contracted by us to provide and to adequately safeguard your Personal Information.

Consent To Use Personal Information

When you request information or sign up for our products and/or services or when you enter any commercial transactions with us, you may be required to provide us with your Personal Information. In doing so, you consent to its use by us in accordance with this Privacy Statement.

We may collect your sensitive Personal Information (including, data relating to your physical or mental health, the commission or alleged commission of offences etc.) if you apply for certain products and/or services which require you to disclose such sensitive Personal Information to us. We will only use your sensitive Personal Information to provide the product and/or service you signed up for. If we collect, use, maintain or disclose your sensitive Personal Information, we will ask for your explicit consent.

You have the choice, at any time, not to provide your Personal Information or to revoke your consent to us processing of your Personal Information. However, failure to provide such Personal Information or revocation of your consent to process Personal Information provided may result in us being unable to provide you with effective and continuous products and/or services. In addition, we may also use your Personal Information for the fulfilment of any regulatory requirements and for any other reasons connected with providing you the services you require, and fulfilment of any commercial transactions entered by you with us.

From time to time, we may share your Personal Information with other entities within OpenSys, our agents or subject to your consent, strategic partners with whom we have a relationship with for specific products and/or services as we deem fit, and you may receive marketing communication from us or from these other entities about the products and/or services that may be of interest to you. If you no longer wish to receive these marketing communications, please notify us to withdraw your consent and we will stop processing and sharing your Personal Information with these other entities for the purpose of sending you marketing communications.

You have a choice to withdraw your consent for receiving marketing or promotional materials/communication. Please be aware that once we receive confirmation that you wish to withdraw your consent for marketing or promotional materials/communication, it may take up to fourteen (14) working days for your withdrawal to be reflected in our systems. Therefore, you may still receive marketing or promotional materials/communication during this period of time. Please note that even if you opt out from receiving marketing or promotional materials, we may still contact you for other purposes in relation to the products and/or services that you have subscribed to with us.

Your Obligations

Where indicated (for example in registration/application forms), it is obligatory to provide your Personal Information to us to enable us to process your application for our products and/or services. Should you decline to provide such obligatory Personal Information, we may not be able to process your application or provide you with our products and/or services.

You are responsible for providing accurate and complete Personal Information to us about yourself and any other person whose Personal Information you provide us and for updating this Personal Information as and when it becomes incorrect or out-of-date. This obligation is a condition to the provision of our products and/or services to you and/or any other person authorised or permitted by you or your organization/company to use the products and/or services. In the event you may need to provide us with Personal Information relating to third parties or dealing with us, you confirm that you have (i) obtained their consent or otherwise entitled to provide their Personal Information to us and for us to use accordingly, and (ii) informed them to read this Privacy Statement at our website.

Rights To Access and Correct Your Personal Information

We are committed to ensure that the Personal Information we hold about you is accurate, complete, not misleading and up-to-date. If there are any changes to your Personal Information or if you believe that the Personal Information, we have about you is inaccurate, incomplete, misleading or not up to date, please contact us. We will use reasonable efforts to comply with your request to update or correct your Personal Information.

You have the right to access your Personal Information. If you would like to request access to your Personal Information, please contact us. Please note that we may have to withhold access to your Personal Information in certain situations, for example when we are unable to confirm your identity or where information requested for is of a confidential commercial nature or in the event, we receive repeated requests for the same information. Nevertheless, we will notify you of the reasons for not being able to accede to your request.

Protecting Your Personal Information

The security of your Personal Information is our priority. We take all physical, technical and organizational measures needed to ensure the security and confidentiality of Personal Information. If we disclose any of your Personal Information to our authorised agents or service providers, we will require them to appropriately safeguard the Personal Information provided to them.

However, the internet is not a secure medium. We cannot accept any responsibility for any unauthorised access or loss of your Personal Information, save in accordance with this Privacy Statement. We have put in place various security procedures, rules and technical measures to protect your Personal Information from any loss, misuse, modification, unauthorized or accidental access or disclosure, alteration or destruction. All our employees and data processors, who have access to and are associated with the processing of Personal Information, are obliged to respect the confidentiality of your Personal Information. While we cannot guarantee that loss, misuse or alteration of Personal Information will not occur, we make reasonable efforts to prevent such unfortunate occurrences. Personal Information that we collect from you will be stored and backed up securely in a restricted and controlled location.

Retention Of Your Personal Information

We will only retain your Personal Information for as long as necessary to fulfil the purpose(s) for which it was collected or to comply with legal, regulatory and internal requirements. Afterwards we will destroy or permanently delete your Personal Information.

Updates To Our Privacy Statement

Please note that we may update this Privacy Statement from time to time and the updated version shall apply and supersede any and all previous versions. If there are material or significant changes to this Privacy Statement, we will notify you by posting a notice of such changes on our website or by sending you a notification directly. Please review this Privacy Statement periodically to stay informed on how we are protecting your Personal Information.

Contact Us

If you need to contact us, you may visit us at buySolar.my.

Please be informed that this Privacy Statement applies solely to OpenSys Websites and does not apply to any third-party websites you may access from our websites. Some of these third-party websites may be co-branded with our logo or trademark, even though they are not operated or maintained by us. To determine how they deal with your Personal Information, you should ensure that you read their respective privacy policies.

Last updated: 29 July 2024