Welcome to our website (“Website”). In compliance with the Personal Data Protection Act 2010 (the “Act”) and its regulations, this notice is issued to all our valued clients and/or prospective clients (this “Notice”). This Notice explains how we collect, use, disclose, and protect your personal data when you visit our Website and engage with our services, which are designed to deliver enterprises efficient and seamless end-to-end digital services that align with international trade practices.

Personal data means any information that can be used to identify directly or indirectly a specific individual. We have collected and will collect your personal data to be processed by us and/or on your behalf in the course of your present or future dealings with Zhong Yun Supply Chain Management Sdn. Bhd. (Company Registration No.: 202001033627(1389948-W)), its subsidiaries, its associated companies (“we”, “our”, “us” or “Company”). Your personal data enables us to achieve the “Purposes” herein that is in connection with our business.

a) Personal contact information (e.g., name, postal address, email address, social network details, identification card and phone number);

b) Demographic information and interests (e.g., date of birth, age or age range, gender, hobbies, interests and household information);

c) Account login information (e.g., username, membership ID and password);

d) Payment information (e.g., bank account details, cardholder name, card expiration date and card number);

e) Business Information (e.g., enterprise details, business categories, financial accounts); and any

f) Communication preferences.

We collect, process and disclose your personal data only for the following purposes including but not limited to:

a) To fulfill contractual obligations and deliver services requested by individuals or organizations;

b) To process and answer your inquires or to contact you to answer your questions and/or requests;

c) To develop and improve our products, services, communications methods and the functionality of our websites;

d) To tailor services and content to individual preferences and interests;

e) To communicate information to you and to manage your registration and/or subscription to our newsletter or other communications;

f) To process payments, manage accounts, and fulfill financial transactions.;

g) For internal administrative purposes;

h) With consent where required, to send promotional materials, newsletters, and updates about products, services, and events.

i) To protect against unauthorized access, fraud, and other illegal activities; and

j) To comply with laws which require us to retain records and/or with any other laws which may be applicable to us.

We do not sell, rent or trade your personal data. We may share your personal data with selected third- parties in the following circumstances:

a) Providers of infrastructure or platform or software-as-a-service solutions, software development services, information system maintenance services, record management services or marketing services;

b) Logistics providers;

c) Financial transactions service providers

d) Entities or subsidiaries within our group;

e) Government authorities or other third parties, if required or allowed otherwise by law or reasonably necessary to protect the rights, legal interests, property, or safety of you, others, or ourselves.

We take the security of your data very seriously. We take every effort to maintain appropriate technical and organizational security safeguards designed to protect the personal data we process against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. Access to your personal data is only permitted among our employees and agents on a need-to-know basis and subject to strict contractual confidentiality obligations when processed by third parties.

The cookies used by the website are solely associated to anonymous users and their computers and do not provide personal data on users. Some cookies are used by third parties to provide us with data on the effectiveness of its engagements and promotions. The cookies used by the website not in any way collect personal data that could be used to identify a specific user. In addition, cookies are of a temporary nature, used solely to improve the efficiency of the last transmission.

We transfer the personal data we collect about you to entities within our group, as well as to third- party service providers that process personal data on our behalf. Some of these companies and service providers are located in countries other than the country in which the personal data was originally collected. The laws of those countries may not have the same level of data protection as the country in which you initially provided the personal data. When we transfer your personal data to other countries, we will protect that personal data as described in this Notice and in accordance with applicable law.

We will keep your personal data for as long as we need it for the purpose it is being processed for, except if required or allowed otherwise by law. Your data may also be retained so that we can continue to improve your experience with us and to ensure that you receive any services which are due to you. We will actively review the personal data we hold and delete it securely, or in some cases anonymize it, when there is no longer a legal, business or consumer need for it to be retained.

a) The right to access. You have the right to obtain confirmation as to whether or not your personal data are being processed and, where this is the case, access to the personal data. You also have the right to ask us for a copy of your personal data.

b) The right to rectification. You have the right to ask us to rectify personal data about you that you think are inaccurate. You also have the right to ask us to complete data you think are incomplete. This right always applies.

c) The right to erasure. This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your data where there’s no compelling reason for us to keep using the data. This is not a general right to erasure; there are exceptions, e.g. if we have a legal obligation to keep your data.

d) The right to restriction of processing. You have the right to ask us to restrict the processing of your personal data under certain circumstances.

e) The right to data portability. This right only applies to personal data you have given us. You have the right to ask that we transfer the data you gave us to another organization or give the data to you.

f) The right to withdraw consent. Where you have provided us with consent to process your personal data, you have the right to withdraw your consent at any time. This will not affect the lawfulness of the processing that has been carried out based on your consent prior to the withdrawal.

g) The right to object. When we process your personal data for purposes of pursuing our legitimate interests, you have the right to object to such processing at any time. If you object, we will stop the processing unless we have strong and legitimate reasons to continue using your data.

h) The right to lodge a complaint. If you have concerns about the way we handle or process your personal data, please contact our team (contact details provided below) who will investigate the matter and report back to you. If you are still not satisfied after our response, depending on the law of the country where you live or work, you may have the right to complain to a date-protection regulator.

We reserve the right to amend this Notice from time to time without any prior notice. We will notify you of any significant changes to this Notice on our website, or through other appropriate communication channels. All changes shall be effective from the date of publication, unless otherwise provided in the notifications.

By communicating, engaging with us or use the Company’s products and services, you acknowledge that you have read and understood this Notice and agree and consent to the use, processing, disclosure, and transfer of your personal data by us as described in this Notice. Any email we send to you will contain an automated unsubscribe link so that you can opt-out of the mailing list.

There will be English and Chinese versions of this Notice. In case of any discrepancies or arguments related to the interpretation of the content between the English and Chinese versions, the English version shall prevail.

If you have any enquiries about this Notice, if you would like to update information we have about you, or if you wish to exercise your data protection rights, you may contact or write to us at:

a) Contact Number: +603-2181 8555

b) Email Address: zhongyunscm@outlook.com

c) Postal Address: B-26-3A, Menara G-Vestor Tower, Kompleks Pavilion Ampang, 200, Jalan Ampang, 50450 Kuala Lumpur