(Last Updated on : DEC 2014)

AVON PRIVACY STATEMENT

Avon Cosmetics (M) Sdn Bhd (Avon) is a registered data user under the Personal Data Protection
Act 2010 (PDPA) therefore we are under an obligation to comply with the PDPA whenever we
collect, use and process personal data and sensitive personal data within the meaning of the PDPA.
Our Privacy Policy which is formulated in accordance with PDPA is detailed below. We would suggest
that you read it thoroughly.
This policy is subject to change from time to time and all changes will be posted on this Web Site.
The policy is applicable to those who are Avons employees, Sales Representatives, Franchisees and
the third parties who process these personal data in the course of providing services to Avon.
1. Nature of Personal Data:

Personal data include but not limited to the following information:

Name, job title;

Gender, age, date of birth, national registration identity card number, passport number;

Age, ethnic, origin, nationality;

Family address and telephone number

Employment information, personal education, performance and training information

Spouses information

Information of family income and expense

Personal hobbies

Sensitive personal data consists of those elements of personal data that require extra privacy and
security protections. For example, any information about a persons health or condition of health
subject, his political opinions, his religious beliefs or other beliefs of similar nature. Government issued
identifiers (such as Employee Provident Fund or Income Tax numbers) are also sensitive personal
data.
Sensitive personal data include but not limited to the following:-

Personal information record/criminal record/ court summons record

Race, faith, political viewpoint, philosophical faith

Member of trade union

Health information: disease history, disability

Bank account information, computerized national identity card number

Nationality, citizen hood information

2. How We Collect Personal Data

We may collect your Personal Data on our web sites, by telephone, facsimile, e mail and when you
complete and submit an application form to become an Independent Sales representatives or
Franchisee.
3. Usage of Data

Avon will use and/or process the personal data for, amongst others, the following reasons:

Delivery of services or deliverables and the marketing of such services or deliverables

whether present or future, to you;

conducting training and awareness programs, sales representatives activities, marketing and
sales representatives/franchisees profiling activities in connection with our services and
related deliverables;

enable us to send you information by e mail, telecommunication means (telephone calls or

text messages) or social media about products, services and/ or business updates;

To comply with any legal or regulatory requirements relating to direct selling and franchise and
to make disclosure under the requirement of any applicable laws, regulations, direction, court
order, by-law, guidelines, circular and codes applicable to Avon;

To be used for internal record keeping;

For the purpose of credit check , renewal or extension of credit;

To be used, processed, and transferred by Avon , its affiliated entities, authorized third parties,
including but not limited to entities in countries that have a different level of data protection
than that in Malaysia for purpose of, including without limitation, promotion, marketing,
recognition, debt collection, legal action and other purposes as described by Avon.

Such other purposes relevant to the products and services provided by Avon.

4. What Are The Effects Arising From Failure To Provide Personal Data

The failure to such Personal Data will or may:-

Result is us being unable to provide our independents sales representatives and franchisees
with the services and/or deliverables requested;
Result is us not being able to update you on our products, services and business updates;
Result in us being unable to provide you with any notice, services and products in which you
have ordered/requested.

5. Disclosure of Your Personal Data

Avon will keep your personal data confidential but you hereby consent and authorize Avon to disclose
your personal data to the following categories of parties:-

Any person to whom Avon is required by so by law or in response to a competent or

government agency;

Any related, affiliated and subsidiaries of Avon;

Avons business partners in relation to providing you with Avons products and services;

Government agencies, statutory authorities and industry regulators;

Avons auditors, consultants, accountants, lawyers or other financial or professional advisers;

Avons appointed service providers in relation to Avons programs and promotions for the
purpose of delivery of gifts, prizes and services;

6. Security

Avon shall keep and process your personal data in a secure manner,, in accordance with the
applicable laws and regulations to prevent the unauthorized or unlawful processing of your personal
data including loss, misuse, modification, unauthorized or accidental access or disclosure, alteration
or destruction.
The personal data processed shall not be kept longer than is necessary after termination of contract
between you and Avon. Avon shall take all reasonable steps to ensure that all personal data is
destroyed or permanently deleted if it is no longer required for the purpose for which it was collected
to be processed unless required so under the law.

7. Changes To This Statement

Any updates or changes to the terms of this Privacy Statement will be posted here on our Site and the
date of the newest version posted below. Please check back frequently, especially before you submit
any Personal Data at our Site, to see if this Privacy Statement has changed. By using our Site, you
acknowledge acceptance of this Privacy Statement in effect at the time of use.

8. Your Rights of Access and Correction

You have the right to request access to and correction of Personal Data held by us and in this respect
you may:-

Check whether we hold or use such Personal Data and request access to such data;
Request that we correct any Personal Data that is inaccurate, incomplete or out-of-date;

Request that we specify or explain our policies and procedures in relation to data and types of
Personal Data handled by us.

Request for access to Personal Data or correction of Personal Data or for information regarding
policies and procedures and types of Personal Data handled by us can be made by calling our
HOTLINE : 03-79657100.

MAS:

Customer Privacy Statement

Contents:
Introduction
What Personal Data do we collect?
How do we collect your Personal Data?
How do we collect your Personal Data from our website?
What do we use your Personal Data for?
Accessing/Limiting/Correcting/Updating your Personal Data
Consent
To whom do we disclose your Personal Data?
How long may we retain your Personal Data?
Notifications of Change
Contact
Introduction
Malaysian Airline System Berhad (MAS) is committed to the protection of your Personal
Data and takes the matter of protecting your privacy as high priority.

This Privacy Statement explains how we protect the privacy of your Personal Data under the
Personal Data Protection Act 2010 ("PDPA"). Please note that the Privacy Statement is
streamlined with the common principles of data privacy in most jurisdictions although there
maybe some slight variations due to local requirements.
What Personal Data do we collect?
The types of Personal Data that we collect directly from you or from third parties depend on
the circumstances of collection and on the nature of the service requested or transaction
undertaken. It may include (but is not limited to):

Personal information that links back to an individual, e.g., name, gender, date of birth,
passport and other personal identification numbers.
Contact information, e.g., address, phone number and email address.

Payment information, e.g., credit or debit card information, including the name of
cardholder, card number, billing address and expiry date.

Travel information, e.g., flight information, dietary and seating and other service
preferences.

Health information, e.g., medical records and requests.

Technical information, e.g., IP address.

Statistical Data, e.g., number of passengers, and hits to website. This information will
be for statistical analysis so that we can better understand MAS' customer profile and
improve MAS' services to you.

How do we collect your Personal Data?

This Privacy Statement covers any Personal Data provided to us:

When making a booking with us, checking-in for a flight or lodging freight.
Via any online sites operated by MAS and its contractors.

Under any other contractual agreement or arrangement.

Via a third party, e.g., travel agent or our service provider.

Some of the other ways we may collect Personal Data also include (but is not limited to):

Via telephone, letter, fax and email.

When you visit our website or one of our contractors websites.

When you contact us in person.

When we contact you in person.

When we collect information about you from third parties.

From publicly available sources.

Mobile services.

Other channels including our ticketing counters and airport operations.

How do we collect your Personal Data from our website?

IP Address
We use your IP address to help diagnose problems with our server, and to administer our
website. Your IP address is used to help identify you and your membership information and to
gather broad demographic information.
User Feedback Form
Our Customer Care Feedback Form requires you to give us contact information (e.g. your
name and email address) so that we can respond to your comments. We use your contact
information from the registration form to send you information about our company. Your
contact information is also used to contact you where necessary. Demographic and profile
data are also collected at our site. We use your Personal Data to tailor your experience at our
site by showing you contents that we think you may be interested in contents according to
your preferences.
Information on Cookies
A cookie is an element of data that a website can send to your browser, which may then store
it on your system. We use cookies in some of our pages to store your preferences and record
session information. The information that we collect is then used to ensure a more
personalised service level for our users. You can adjust settings on your browser so that you
will be notified when you receive a cookie. Please refer to your browser documentation to
check if cookies have been enabled on your computer or to request not to receive cookies.
What do we use your Personal Data for?
We may use your Personal Data for the following purposes ("Purpose"):

To facilitate your travel (e.g., making a booking) and freight arrangements.

To provide flight alert messages.

To facilitate internet check-in.

To be able to process any commercial transaction (e.g., In-flight sales).

To facilitate your participation in the loyalty programs of MAS and third parties.

To send you promotions and information on products and activities, offers to upgrade
or other notifications in relation to your booking.

To protect the safety and well being of yourself and/ or other customers.

To investigate and respond to claims from you.

To comply with any legal or regulatory requirements.

To remind you to complete your booking and/ or offer our assistance (in case, for
instance, failure to complete due to technical difficulties). This is an optional service.
You can choose not to receive these emails at any time by following the link at the
bottom of each such email.

To provide in-flight catering and other services that best meet your preferences and
needs (which we may collect during our interactions with you).

Marketing and communicating with you in relation to products and services offered
by MAS, MAS airline and service partners, as well as MAS appointed agents.

Contacting you for product or customer satisfaction surveys and market research.

In connection with the above, we may disclose your information to third parties, such as our
travel and freight service providers or travel-related businesses, partner airlines, airport
management, security personnel, and other carriers.
Accessing/Limiting/Correcting/Updating your Personal Data
You may request to obtain information of your Personal Data, limit the processing of your
Personal Data and also update or make amendments to your Personal Data as below:

For online registered customers, you may login to your MAS online account and
update your Personal Data.
For every other customer, you may forward your request
to customer@malaysiaairlines.com.
Please note that depending on the information requested and where permitted by law,
a nominal administrative fee may be charged. We will endeavour to provide the
information back to you as soon as practicable; however we also reserve the right to
validate all requests for the authenticity of the request. We may refuse to comply with
data access request in circumstances as provided by the law(under section 32 of the
PDPA).

Consent
In the course of MAS performing servicing functions such as making a flight booking,
transmitting flight alert messages or accepting a meal preference, your personal data will, by
nature of the task or transaction, be provided by our customers and passengers to MAS. In
such instances, consent will necessarily be implied from you that they are agreeable to
providing Personal Data in order for MAS to provide the requested or necessary service
and/or product to them.
Where another person makes reservations on your behalf, you undertake and will ensure that
you have authorized the disclosure of your Personal Data and consent to the terms and
conditions of this Privacy Statement.
Please note that it is obligatory for us to process your Personal Data, without which we will
not be able to make travel arrangements for you and keep you updated about our future, new
and/ or enhanced services and products.

Nonetheless, you may stop receiving promotional activities by:

unsubscribing from the mailing list;

editing the relevant account settings to unsubscribe; or

sending a request to customer@malaysiaairlines.com

To whom do we disclose your Personal Data?

We will not trade or sell your Personal Data to third parties. Your Personal Data shall only be
disclosed or transferred to the following third parties who may be located within or outside
Malaysia for the fulfillment of the Purpose:

Other MAS affiliates, subsidiaries and any other parties that MAS contracts with.
Credit card verification providers, data warehouse and other third parties in order to
process your commercial transactions.

Legal bodies as permitted or required by law such as in compliance with a warrant or

subpoena issued by a court of competent jurisdiction.

Customs, immigration or other regulatory authorities applicable to you.

MAS shall take practical steps to ensure that its employees, officers, agents, consultants,
contractors and such other third parties mentioned above who are involved in the collection,
use and disclosure of your Personal Data will observe and adhere to the terms of this Privacy
Statement.
How long may we retain your Personal Data?
We will not retain your personal data longer than necessary for the fulfillment of the Purpose.
However, relevant Personal Data may be retained subject to the conditions below:

As and when required under legislation.

Where legal actions have arisen and are pending.

Commercial/ operational purposes of MAS.

MAS shall take all reasonable steps to ensure that all Personal Data is destroyed or
permanently deleted when no longer required for the Purpose.
Notification of Changes
Please note that this Privacy Statement may be amended from time to time in accordance to
applicable laws and regulations and such variations may be applicable to you. The latest
version of this Privacy Statement will be made available to all customers.
Do visit our website from time to time for updates on our Privacy Statement.
Contact

For any queries, concerns or complaints in relation to our handling of your Personal Data or
MAS' Personal Data Protection policies, please contact us at privacy@malaysiaairlines.com